Information Privacy Advisor

Job Summary: The Information Privacy Advisor is a specialist role in PHSA that will work within the Information Access and Privacy Team by providing recommendations about information privacy and risk mitigation strategies for PHSA. The Advisor will assist senior leaders, staff and provincial stakeholders in understanding the requirements of provincial privacy legislation, as well as developing internal and external confidence that personal information is being collected, accessed, used, and disclosed at PHSA in a responsible manner and in compliance with policy and legislative requirements, while enabling patient care and health service delivery.

The Advisor will operate in a complex healthcare environment with multi-site and provincial responsibilities. The work will involve extensive use of detailed information, including highly sensitive and confidential information, and the responsibility to make recommendations regarding steps required to handle such information in accordance with legislation and policy. The Advisor will be a subject matter support to PHSA programs ensuring that privacy is an enabler of patient care. The nature of the position requires involvement in the investigation and review of confidential projects or highly sensitive privacy incidents that have varied implications, including the potential for recommending disciplinary action or other penalties for staff in breach of privacy requirements.Duties/Accountabilities: • Facilitates, drafts and supports the completion of privacy impact assessments and privacy reviews to evaluate whether programs or services, projects or initiatives involving the collection, access, use or disclosure of personal information comply with BC’s Freedom of Information and Protection of Privacy Act requirements.• Assists in the management and investigation of privacy incidents or complaints, taking a proactive approach to risk remediation and supporting clinical areas in assessing risks and identifying solutions. Escalates privacy issues according to established procedures. Investigates and takes appropriate action with respect to privacy complaints regarding access to personal/confidential information.• Provides advice to, consults with, develops and maintains relationships with program areas, partners and stakeholder groups on the application of information privacy principles, policy and legislation. • Conducts research into and makes recommendations regarding emerging privacy trends, best practices, and regulations and identifies their impact on projects and operations.• In collaboration with the Team, works with provincial stakeholders in the development and delivery of a provincial service which fosters a culture of information sharing, reasonable and authorized access and privacy awareness within PHSA.• Administers privacy incident tracking, analyses data and prepares reports, updates, and briefings on the progress of the PHSA privacy program for presentation to key stakeholders.• Assists in implementing a proactive audit solution at PHSA. Coordinates with PHSA program leads on audit requests and provides support and advice in complying with industry best practices.• Communicates with complainants and members of the public to answer inquiries and provide assistance with privacy related concerns. • Works collaboratively with provincial stakeholders and privacy offices at BC Health Authorities to manage information privacy matters of joint concern. Works collaboratively and participates in Provincial Working Groups to ensure consistency and harmonization with Information Access and Privacy Policy standardization.• Works closely with PHSA program leads, team members, Risk Management, Communications, Human Resources, Information Technology, OIPC, and/or Legal Counsel in relation to privacy breaches. • Works with the OIPC, relevant government agencies/branches and internal staff on privacy compliance reviews and investigations.Qualifications: A minimum level of education, training and experience equivalent to Bachelor Degree in Health Administration, Law or another related discipline (i.e. Business or Computer Science, Human Resources) and 5-7 years recent related experience. Completion of an Information Access and/or Protection of Privacy Certificate Program is an asset ( i.e.CIPP/C, CIPT, CIPM, or CAPPA.) however individuals with extensive experience in investigations or audit may also be considered. Knowledge, Skills and Abilities

• Healthcare experience will be highly regarded.• Experience and working knowledge of BC’s Freedom of Information and Protection of Privacy Act, relevant OIPC orders, cases, trends and issues.• Effective stakeholder engagement, communication, collaboration and management skills.• Demonstrated expertise in the area of information privacy and information access concepts, tools, and methods.• Use of investigative and analytical skills to research, analyze and interpret data and information from a variety of disparate sources, with attention to detail.• Demonstrated ability to adapt and work effectively in a changing environment.• Proactive and solution orientated.• Demonstrated ability to prioritize workload in order to meet deadlines.• Proficient in using computer information systems, databases and electronic information management.• Proficient in using Microsoft Office applications and databases.• Physical ability to perform the duties of the position.