Privacy Impact Assessment (PIA) Specialist

Note: Hybrid - Candidate must be able to work 3 days onsite and 2 days remote

MUST HAVES:

• Assess Ontario privacy legislation and regulations against current patient needs and opportunities associated with new digital integration solutions.
• Recommend regulatory changes to enable privacy-by-design solutions for patients and to enhance patient care experience
• 8+ years of experience as a privacy expert, including:
  • Managing privacy risks in the collection, use and disclosure of Personal Health Information (PHI)
  • Leading end-to-end operational risk assessments, selecting risk methodologies,
  • Identifying privacy compliance gaps, priorities, dependencies, and redundancies, and - SUPER IMPORTANT recommending process remediation or simplification

Description

• Assess Ontario privacy legislation and regulations against current 9-1-1 patient needs and opportunities associated with new digital integration solutions in Central Ambulance Communication Centres.
• Recommend regulatory changes to enable privacy-by-design solutions for 9-1-1 patients and to enhance the 9-1-1 patient care experience.
• Lead stakeholder consultations and provide technical expertise to develop the access and privacy tools to fulfil these recommendations, including the development of I & IT requirements, implementation of security mechanisms pertaining to the creation, collection, storage, access, retrieval and disclosure of Personal Health Information (PHI).

NOTE

• Extension/Amendment Attestation: Extension(s) only allowed using unused days/funds left on contract. No additional funds will be added beyond the maximum contract value and any extension options included in the original SOW.
• Assignment Type: This position is currently listed as "Hybrid" as consultants will be required to work partly in the physical workplace and partly remotely. The details of this arrangement will be at the Hiring Manager's discretion.

Experience and Skill Set Requirements

Technical Skills - 50%

• 10+ years experience in privacy impact assessment methodologies, tools and techniques.
• Understanding of policy development to lead or participate in the development of options and strategies on information management and privacy protection.
• Practical knowledge of information technology concepts and processes that impact the protection of personal information (i.e. information management, knowledge management, intellectual property/copyright, information technology and electronic service delivery channels).
• Practical knowledge of broad political, legal, fiscal, social and governance dimensions to ensure that privacy principles, directives, notices, and directions are considered in the development of new programs/initiatives.
• 8+ years of experience as a privacy expert, including:
  • Managing privacy risks in the collection, use and disclosure of Personal Health Information (PHI)
  • Leading end-to-end operational risk assessments, selecting risk methodologies,
  • Identifying privacy compliance gaps, priorities, dependencies, and redundancies, and recommending process remediation or simplification
  • Implementing information privacy best practices

Analytical and Conceptual Skills - 35%

• Demonstrated experience and competency to resolve complex issues, identify options and make recommendations.
• Demonstrated experience and competency to analyze policy proposals to assess / identify I&IT business implications and develop strategic policy planning options and impact analyses for clients.
• Demonstrated experience and competency to acquire and apply relevant legislation, regulations and directives to ensure proposed initiatives conform to legislation.
• Demonstrated experience and competency to identify and evaluate emerging privacy issues, changes, and trends in current and future that impact government policy directions.
• Experience in program analysis/evaluation techniques to assess the impact of proposed, or new/changed policies/fiscal or governance arrangements for new programs.

General Skills - 10%

• Demonstrated experience and competency to prepare comprehensive reports, options analyses, briefing materials and presentations and propose responses on privacy issues.
• Experience in consultation and negotiation to gain support for policy and program initiatives.
• Demonstrated experience and competency to develop effective relationships with senior management and stakeholders.
• Strong oral and written communications and principles and methods, to draft papers, reports, options analyses, correspondence, briefing notes, speeches, and materials.

Public Sector/ Healthcare Experience - 5%

• Demonstrated previous public sector experience and has familiarity with the privacy and deidentification guidelines set by IPC.
• Experience in working on multiple projects at the same time.
• Experience in working on multi-year projects.