Privacy Advisor, Privacy Reviews and Consulting

Detailed Overview

Supporting the Vision, Values, Purpose and Commitments of Fraser Health including service delivery that is centered around patients/clients/residents and families: Acts as a consultant and provides counsel to Fraser Health (FH) business areas to support and promote the privacy of personal health information; leads the development of strategies to ensure the protection and privacy of personal health information; leads the development of information privacy practices and ensures that policies and processes are in place to protect the privacy of personal health information; develops recommendations to address breach and risk mitigation strategies to minimize future breaches of privacy and access to personal information; collaborates with other team members in promoting and adopting best practice models in relation to privacy of personal Information; supports the investigation of privacy incidents when required by the Privacy Auditing and Incident Management Team; oversees and provides work direction to assigned staff. Responsibilities Reviews Privacy Impact Assessments (PIA) that have been submitted to the Privacy team in order to assess compliance with BC’s Freedom of Information and Protection of Privacy Act (FIPPA) and identify opportunities to reduce privacy risk. Tracks the implementation of recommendations with business areas. Identifies potential privacy risks while leading Privacy Impact Assessments and collaborates with the Privacy Auditing and Incident Management Team to minimize breaches and develop auditing strategies. Supports investigating privacy incidents when required by the Privacy Auditing and Incident Management Team. Identify areas for improvement in record-keeping and technology tools to optimize privacy reviews in collaboration with the Manager, Privacy Reviews and Consulting. Provides counsel to FH leadership and employees on FIPPA Compliance and best practices; supports the Manager of Privacy Reviews and Consulting in representing FH and the head of the public body in formal complaint process with the Office of the Information Privacy Commissioner for BC. This involves assisting the Manager in navigating the OIPC’s structured assessment, information gathering, and addressing the recommendations issued by the commissioner. Participates in initial project discussions within the Organization, providing privacy-focused consultation to identify potential risks and ensure privacy. Identifies and develops solutions to support the long-term strategic plan for the privacy and security of personal information systems for FH, in collaboration with the Manager, Privacy Reviews and Consulting Develops the electronic health information systems goals that are consistent with the strategies established by the Manager, Privacy Reviews and Consulting and in consultation with key internal partners. Develops and/or recommends policies and procedures that ensure the integrity and security of personal health information; reviews and provides input into related policies and processes to ensure consistency with established privacy policies; collaborates with key internal and external partners to maintain and achieve applicable privacy standards for the organization. Develops and/or recommends strategies to ensure the secure access and utilization of electronic health information systems while maintaining the privacy of personal health information; identifies, researches and recommends innovative approaches for information capture, storage and retrieval to ensures that standards related to the privacy of personal health information are maintained and enhanced. Conducts and reviews the assessment and completion of privacy impact tools to ensure compliance with privacy principles and policies; identifies resources needed to develop risk mitigation strategies for potential and actual breaches of privacy and access to personal information. Participates in establishing fiscal priorities for the department; assists with preparation and monitoring of the annual operating budget for the designated portfolio on an ad hoc basis where requested Manager, Privacy Reviews and Consulting; monitors portfolio expenditures, completes variance analysis and reports anomalies to the Manager for follow up. Provides work direction to team members and provides assistance and advice to ensure consistent interpretation and application of policy, guidelines and directives and effective knowledge translation. Develops, delivers and evaluates ongoing education and communication plans related to privacy of personal information principles, policies and awareness. Maintains departmental reports and records; and collects statistical information on workload measurement, department activity, quality assurance and clinical use on scheduled or requested basis. Participates on assigned internal and external committees, as required. Qualifications Education and Experience Bachelor’s degree in health information management/health information science or related field, supplemented with five years recent related experience managing health information systems in a large complex organization including strategic planning, tactical planning and development/operation of electronic information privacy processes, or an equivalent combination of education, training and experience. Recognized access and privacy designation (CIPP/C) is an asset. COMPETENCIES: Demonstrates the leadership practices of the Fraser Health Leadership Framework of Clear, Caring and Courageous and creates the conditions for people to succeed. Professional/Technical Capabilities: Demonstrated knowledge of applicable electronic health information systems. Demonstrated knowledge of information privacy issues including related and relevant legislation/statutes in information privacy, access and protection of personal information. Demonstrated ability to consult, plan, implement, and organize and problem solve. Demonstrated ability to exercise initiative and work both independently and in a team environment. Demonstrated ability to collaborate and deal with senior personnel regarding sensitive and confidential matters. Demonstrated ability to work effectively in a highly dynamic environment subject to continuous change. Ability to work independently and as a member of team. Ability to supervise and provide work direction to others. Working knowledge of collective agreements as pertaining to audit processes and procedures. Ability to operate related equipment including applicable software applications. Physical ability to perform the duties of the position. About Fraser Health Fraser Health is the heart of health care for over two million people in Metro Vancouver and the Fraser Valley in British Columbia, Canada, on the traditional, ancestral and unceded lands of the Coast Salish and Nlaka’pamux Nations and is home to 32 First Nations within the Fraser Salish region. People - those we care for and those who care for them - are at the heart of everything we do. Our hospital and community-based services are delivered by a team of 48,+ staff, medical staff and volunteers. We are committed to planetary health and value diversity in the work force. We strive to maintain an environment of respect, caring and trust. Fraser Health’s hiring practices aspire to ensure all individuals are treated in an inclusive, equitable and culturally safe manner. Together, we are the heart of health care. Instagram | Facebook | LinkedIn | X | Indeed | Glassdoor IMPORTANT: Recruitment scam warning Please be on alert for recruitment scams. We are aware of several scams targeting individuals by falsely claiming to represent Fraser Health. Always take precautions when sharing personal details with unverified sources. Please note that we will never ask for money or payment, nor ask you to download or install an app at any point during our recruitment process.