Privacy Officer

Job Summary:

In accordance with the Mission, Vision and Values, and strategic direction of Provincial Health Services Authority patient safety is a priority and a responsibility shared by everyone at PHSA, and as such, the requirement to continuously improve quality and safety is inherent in all aspects of this position. The Privacy Officer evaluates and provides recommendations with respect to information privacy strategies including the development of privacy policies, procedures and processes for both new and existing initiatives in compliance with the BC Centre for Disease Control (BCCDC), Provincial Health Services Authority (PHSA), Ministry of Health (MOH) and Office of the Information and Privacy Commissioner’s policies and guidelines. The position develops privacy impact assessments, information sharing agreements and identifies the extent to which new and existing systems or proposals comply with privacy legislation. The Privacy Officer identifies privacy risks affecting all service lines of BCCDC and or PHSA, advises and trains staff on the avoidance and/or mitigation of privacy risks, coordinates the submission, review and approval of data access requests, and is responsible for breach and audit management across BCCDC and or PHSA. The role requires consultation and coordination with PHSA Legal and the BC Attorney General’s Office, and includes contract management responsibilities.

Duties/Accountabilities:

? Supports the BCCDC Privacy and Access Committee or other provincial committees, and provides privacy direction and oversight on provincial initiatives (eg. Get Checked Online) and other provincial committees/activities.
? Leads the ongoing oversight and development of the Privacy and Access Management Framework, including review and development of information privacy policies, procedures and processes that comply with organizational, corporate and governmental requirements.
? Provides expert privacy advice to executive and divisions, including development of information sharing plans and agreements, contractual agreements, and privacy impact assessments between BCCDC/PHSA and external partners.
? Provides ongoing training to staff on the appropriate use, storage, and transmission of sensitive data.
? Coordinates the development and execution of data governance models for electronic public health and other information systems and other initiatives at BCCDC/PHSA including internet based initiatives. In providing secretariat support to the Panorama Data Governance Committee or other committees, coordinates data governance and policy development with Health Authorities, PHSA, eHealth and MOH stakeholders.
? Manages the privacy requirements of multiple levels of data access requests. Reviews and maintains processes for receiving, documenting, tracking, investigating and taking action on internal and external data access requests; investigates breaches as well as complaints concerning access to information and privacy issues.
? Maintains current knowledge of provincial and federal privacy laws, policies and procedures for the management of data sets in clinical systems, management of data sets when transitioning to new systems, and data management in an online (internet-based) environment. Monitors changes in legislation and provides information regarding the implication of changes to relevant stakeholders to ensure organizational adaptation and compliance.
? Identifies privacy risks across all service lines at BCCDC/PHSA and works with staff, advising and providing training and guidance on the avoidance and/or mitigation of privacy risks.
? Defines and provides work direction, advice and guidance to consultants and staff, as required, to meet privacy-related project requirements.

Qualifications:

A level of education, training, and experience equivalent to a Master’s degree in Health Administration, Business (MBA), Information Management or related discipline and (5) five to (7) seven years of progressively more responsible information management experience in a comparable role. Completion of the Information Access and Protection of Privacy Certificate Program is an asset.
Comprehensive knowledge of privacy legislation, practices and processes, preferably within the eHealth environment. Strong written and verbal communication skills. Excellent proficiency with MS Office toolsets (Word, Excel, Visio). Extensive experience and knowledge of British Columbia’s Freedom of Information and Protection of Privacy Act, and eHealth Legislation. Good analytical skills, excellent people skills and a demonstrated capability for handling sensitive situations.