Privacy Analyst (Full Time, 9-Month Contract)

Amplify Care•Kitchener, ON

2d•Hybrid

About The Position

The Privacy Analyst will play a key role in supporting digital health initiatives. Under the strategic direction and oversight of the Manager, Privacy and Amplify Care executive team, the Privacy Analyst will support all activities related to the development, implementation, and maintenance of health privacy principles and policies in accordance with federal and provincial laws. This role will actively participate across the organization engaging internal and external partners to conduct training, perform compliance monitoring activities and identify/escalate concerns to the Manager, Privacy.

Requirements

Minimum 2 years of experience in a privacy-related role, preferably in a healthcare setting.
Post-secondary degree in Health Informatics, Information Studies, Information Sciences or related field.
Demonstrated understanding of provincial and federal laws and regulations concerning information privacy and security.
Knowledge of responsible AI principles and their privacy implications, or a willingness to develop this expertise.
Demonstrated understanding of lifecycle data management (including collection, use, transmission, disclosure, retention of personal and confidential business information).
Demonstrated understanding of shared solutions, regional/provincial solutions, Ontario Health Teams, and Integrated Care models.
Familiarity with eHealth Ontario or Ontario Health provincial assets and provincial digital initiatives.
Exposure to and understanding of privacy requirements and best practice in various healthcare environments.
Ability to communicate technical and legal information effectively and clearly to a wide variety of audiences.
Strong communication skills (written and oral).
Strong presentation skills.
Demonstrated interpersonal and problem-solving skills.
Strong ability to pay attention to detail.
Ability to work as part to a team to accomplish common goals.

Nice To Haves

Certified Information Privacy Professional/Canada (CIPP/C) or similar/complementary designation an asset.
Demonstrated experience with projects that span multiple organizations an asset.

Responsibilities

Support the completion of privacy and security assessments (including Privacy Impact Assessments) for digital health tools, EMR integrations, and emerging technologies including AI-enabled solutions, ensuring alignment with applicable legislation, industry, and organizational standards.
Track and report on privacy risks, remediation activities, and status of privacy program activities.
Support the implementation and monitoring of established privacy and security standards associated with the delivery of digital health technologies.
Support compliance activities related to digital health tools used in care settings, in accordance with privacy and security standards and legislation.
Develop and/or deliver training to various audiences on specific issues, requirements, policies and processes to ensure that the use of assets is in accordance with regional, provincial and federal privacy and security guidelines.
Support organizational data governance activities by contributing privacy expertise to data management practices and ensuring alignment with privacy requirements.
Support participating health care clinicians in the development/review of internal privacy processes, policies, and best practices as required.
Serve as a single point of contact for routine questions and concerns regarding adherence to privacy, security and consent policies and standards and escalate complex issues as required.
Participate in related regional committees and workshop groups as assigned.
Assist with the development and revision and maintenance of privacy policies, procedures, and guidance materials.
Monitor privacy trends in the internal and external environment and escalate relevant findings to support organizational awareness and response.
Provide regular reports to the Manager, Privacy.
Other duties as assigned.