Job Title: Privacy Lead
Organization: eHealth Centre of Excellence
Location: Kitchener, ON
Job Type: Full-time
Program Overview
The eHealth Centre of Excellence (eCE) develops, implements, and advances digital health tools and services – such as eReferral, eConsult, Virtual Care, Online Appointment Booking, Patient Forms, EMR Tools, and Automated Solutions – to better serve clinicians and patients across the province. We advocate for the continued and improved use of technology to enhance the connection and secure information-sharing between all clinicians in the patient’s circle of care, as well as communication between clinicians and their patients. We also support clinicians with tools that provide decision support at the point of care and improve data quality, leading to enhanced outcomes for patients.
Our organization works with system partners, regional and provincial agencies, Ontario Health Teams, clinicians, and patients to support priorities that ensure equitable, seamless care for all residents in Ontario, and co-leads two provincial programs: the Ontario eServices Program and Evidence2Practice Ontario. Our founding vision is one of innovation and partnership, and our mission is to be the leading, trusted digital health partner for primary care and integrated patient care.
Here at the eHealth Centre of Excellence, we strive to cultivate a welcoming and collaborative work environment, where people are encouraged to share ideas and work together to turn them into real and tangible solutions that address the problems facing our healthcare system today. We are proud to be recognized as a Great Place to Work and are a certified Living Wage Employer.
About the role
Reporting to the Manager, Privacy, the Privacy Lead will play a key role in supporting digital health initiatives in the region and across the province. The Privacy Lead will contribute senior level privacy expertise to activities across the organization related to the development, implementation, and maintenance of digital health privacy policies in accordance with federal and provincial laws. This role will actively participate in various privacy committees and working groups and will engage with internal and external stakeholders to conduct training, perform compliance monitoring activities, and identify any concerns to Program Managers, Directors, and eCE Executive.
Key Roles and Responsibilities
- Contribute to and monitor privacy assessments (PIA), audits, and report on privacy risks associated with digital health tools and technologies with which eCE is currently engaged, or seeks to be engaged
- Establish privacy and security standards and targets associated with the delivery of privacy services
- Support the articulation, refinement, and distribution of privacy frameworks that align with necessary legislation e.g. HIC, Service Provider, HINP
- Provide information on industry standard privacy impact assessments, author and deploy privacy policies relevant to the context, and other current information on privacy matters which affect the organization and/or its stakeholders
- Assist with the development of standard agreements that can be leveraged by all teams (e.g., privacy content for vendor agreements, data sharing agreements, and Participation agreements)
- Monitor the compliance of participating health care providers to the privacy standards and legislation as necessary
- Anticipate and identify privacy and/or security risks and issues during program planning and implementation, and work with the Program teams to develop mitigation strategies to address these
- Develop and deliver training to users on the specific issues, requirements, policies and processes to ensure that the use of assets is in accordance with regional, provincial and federal privacy guidelines
- Conduct/oversee standardized auditing and reporting processes, to ensure compliance across the organization and delivery partners as required
- Act as a single point of contact to field questions and investigate concerns regarding adherence to privacy policies and standards
- Actively participate in related regional committees and workshop groups as assigned by the Manager
- Support participating health care providers in the development of their internal privacy processes, policies and best practice as required
- Support and facilitate understanding and discussion between health care providers and jurisdictional authorities as required
- Provide regular reports to the Manager
- Other duties as assigned
Qualifications
- Minimum five years of experience in a similar role
- Post-secondary education in Health Informatics, Information Technology, Information Management, Public or Business Administration or equivalent combination of education and experience
- Certified Information Privacy Professional/Canada (CIPP/C) or equivalent designation required
- Demonstrated understanding of provincial and federal laws and regulations concerning information privacy and security and how they apply in various healthcare contexts
- Familiarity with provincial digital health products and initiatives
- Ability to liaise with security subject matter experts and understand the intersection of the privacy and security domains
- Demonstrated knowledge and experience in health care, in relationship to privacy requirements and best practice
- Demonstrated experience with projects that span multiple organizations
- Ability to communicate technical and legal information effectively and clearly to a variety of audiences
- Strong communication skills (written and verbal)
- Strong presentation skills
- Demonstrated interpersonal and problem-solving skills
- Strong attention to detail particularly in analysis of relevant agreement and contract language
- Ability to work as part of a team to accomplish common goals
- Strong proficiency with Microsoft Office tools (Word, Excel, PowerPoint, etc.)
To apply
If this position is of interest to you, please apply via our Careers Website.
Feel like you don’t meet all the requirements? If you have some of the skills and experience that we’re looking for and are willing to learn the rest, we encourage you to reach out to us!
The eHealth Centre of Excellence team is a respectful and inclusive workplace. Upon individual request, hiring processes will be modified to remove barriers to accommodate those with disabilities. Should any applicant require accommodation through the application, interview or selection processes, please contact Human Resources at hr@ehealthce.ca for assistance.
The eHealth Centre of Excellence team is committed to employment equity. We encourage applications from all qualified candidates including, 2SLGBTQ-identified persons, persons with disabilities, First Nations, Inuit and Métis individuals, and members of Black and other racialized communities, and individuals who speak languages other than English.
We thank all interested applicants; however, due to the volume of resumes we receive only those selected for an interview will be contacted.
