Privacy Officer

Join to apply for the Privacy Officer role at The Canadian Centre of Recovery Excellence (CoRE)

The Canadian Centre of Recovery Excellence (CoRE) is a trailblazing Crown corporation backed by the Government of Alberta, dedicated to transforming the recovery journey for individuals facing mental illness and addiction. By providing decision-makers with cutting‑edge data, evidence, and actionable insights, CoRE paves the way for impactful recovery solutions.

Position Summary

Reporting to the Chief Privacy Officer and General Counsel, the Privacy Officer plays a key role in advancing CoRE’s privacy management framework. The Privacy Officer provides leadership, oversight, and expert guidance on the collection, use, disclosure, retention, and protection of personal information, while balancing operational needs, legal obligations, and risk management.

Working closely with CoRE’s General Counsel, internal and external partners, this position ensures that privacy practices reflect best‑in‑class standards, and that CoRE continues to demonstrate excellence in protecting Albertans’ information. The position requires sound judgment, strong applied privacy expertise, and the ability to interpret and operationalize legislative requirements in a complex, multi‑custodian data environment. The Privacy Officer will be responsible for leading and supervising a team of professionals that may include access coordinators, records coordinators, and privacy risk and compliance analyst.

This position follows a hybrid work model, with an expectation of working onsite in CoRE’s Calgary or Edmonton office three (3) days per week. Work arrangements may be adjusted as operational needs evolve.

Responsibilities

• Act as CoRE’s designated Privacy Officer, ensuring compliance with applicable Alberta privacy and access to information legislation.
• Interpret legislation and regulatory guidance and provide authoritative advice on disclosure, privacy obligations, and statutory requirements.
• Establish and maintain governance mechanisms, including privacy policies, procedures, delegation instruments, and the Directory of Personal Information Banks.
• Ensure consistent application of privacy‑related provisions across CoRE, including alignment with other legislation affecting disclosure.
• Monitor legislative and regulatory developments related to privacy, access to information, and data governance, and advise leadership on operational implications.
• Manage the lifecycle of various contracts, including privacy‑related and data‑sharing agreements, specifically drafting, review, execution, renewals, and obligation tracking.
• Review and maintain privacy contract templates to ensure alignment with legislative, regulatory, and organizational requirements.
• Maintain updated research on evolving and updated legislative changes as well as common law precedents relevant to mental health and addiction, corporate governance, and any other subject matter falling within CoRE’s mandate.
• Maintain contract tracking mechanisms to monitor key dates, renewal terms, compliance obligations, and risk exposure.
• Collaborate with internal stakeholders and external service providers to ensure contractual arrangements meet privacy and data protection standards.
• Coordinate with General Counsel to ensure contractual language appropriately mitigates privacy and information security risks.
• Develop, implement, and oversee CoRE’s privacy management framework.
• Establish privacy controls governing the collection, use, disclosure, accuracy, retention, and security of personal information.
• Lead the development, review, approval, and ongoing maintenance of Privacy Impact Assessments (PIAs) for all new or substantially modified programs, datasets, data linkages, systems, and repository enhancements.
• Monitor privacy risks and recommend mitigation strategies and control improvements.
• Maintain documentation and records related to privacy management activities to support accountability, auditability, and continuous improvement.
• Lead or support the assessment and response to privacy incidents and potential breaches, including investigation, documentation, mitigation, and remediation.
• Determine regulatory notification requirements and coordinate communications with affected individuals and oversight bodies, as required.
• Identify emerging incident trends and recommend preventative improvements to privacy controls and practices.

Access to Information & External Relations

• Oversee and administer CoRE’s Access to Information request process in accordance with legislative requirements, including intake, coordination, review, disclosure recommendations, and responses.
• Ensure compliance with statutory timelines, fee requirements, and third‑party consultation obligations.
• Track and report on access to information compliance metrics and obligations as required.
• Serve as the primary liaison with the Office of the Information and Privacy Commissioner (OIPC) of Alberta.
• Coordinate and manage inquiries, investigations, mediations, audits, and related regulatory processes.
• Prepare summaries, reports, and recommendations for senior leadership related to regulatory matters, privacy risks, and compliance.

CoRE Priorities Advancement

• Provide expert advisory services to leadership and staff on privacy, access to information, contractual privacy obligations, and information‑sharing matters.
• Serve as a central point of contact for privacy or data‑sharing related contracts and inquiries across CoRE.
• Design and deliver privacy and access to information training and awareness initiatives.
• Promote a culture of privacy, confidentiality, responsible data use, and ethical decision‑making across CoRE.
• Support integration of privacy considerations into business initiatives, partnerships, research, and data‑sharing activities.
• Lead and supervise a team of professionals, providing guidance, setting priorities, monitoring performance, and fostering collaboration.
• Oversee performance management activities, including conducting performance reviews and managing recruitment for all direct reports.
• Other duties as assigned.

Education and Experience

• Post‑secondary degree in law, business, public administration, information management, public policy, or a related discipline (Master’s degree preferred).
• Minimum 5 years of progressive experience in privacy, access to information, information governance, compliance, legal, or regulatory roles.
• Membership in a Canadian law society or paralegal certification is preferred; equivalent experience will be considered.
• Hands‑on experience managing access to information requests, supporting or leading PIAs, and advising on disclosure decisions.
• Experience responding to privacy incidents or breaches and liaising with regulatory bodies, including the OIPC of Alberta, is preferred.
• Experience drafting and reviewing complex contracts and privacy agreements.

Knowledge, Skills, and Abilities

• Strong understanding of Alberta and federal privacy legislation such as Health Information Act (HIA), Protection of Privacy Act (POPA), and Access to Information Act (ATIA).
• Knowledge of contract law, privacy and access legislation, and data governance principles.
• Demonstrated ability to translate legal and privacy requirements into operational practice.
• Strong analytical and problem‑solving skills, with sound judgment and attention to detail.
• Excellent writing, editing, and document management skills.
• Ability to manage multiple priorities and shifting deadlines.
• Strong interpersonal and communication skills with the ability to build effective relationships.
• Proficiency with Microsoft Office and familiarity with contract management or privacy compliance tools.
• Ability to work independently with minimal supervision and collaborate within cross‑functional teams.

Pension and Benefits

• CoRE offers a pension plan with LAPP which provides a retirement income, survivor benefits, and early retirement options. Explore more at www.lapp.ca.
• As part of our commitment to our employees’ well‑being, CoRE is pleased to provide a group benefits plan and health spending account. This comprehensive plan includes extended health care coverage, travel insurance, dental care, specialized medical coverage, and more.

Pre‑employment Conditions

• Prior to an offer of employment, candidates are required to complete and maintain satisfactory Criminal Record, Education Verification, and Canadian Work Authorization checks as well as Conflict of Interest disclosure, as applicable.
• Candidates who have completed post‑secondary studies outside of Canada may be required to provide an evaluation of their credentials from the International Qualifications Assessment Service (IQAS) or from a recognized Canadian Credential Evaluator; please visit the Alliance of Credential Evaluation Services of Canada for more information.

How To Apply

Applicants should provide a resume and cover letter that clearly and concisely demonstrates how their qualifications meet the advertised requirements, including education, experience, and relevant examples of required competencies.

Closing Date

January 18, 2026

We thank all applicants for their interest. All applications will be reviewed to determine which candidates’ qualifications most closely match the advertised requirements. Additional screening information may be requested. Candidates chosen to move forward to interview will be contacted. An eligibility list may be established to fill similar positions.

CoRE is committed to inclusiveness, equity, and accessibility and encourages all qualified candidates to apply. If you require accommodation during any portion of the selection process, please let our team know at hr@recoveryexcellence.org.

Seniority level

• Entry level

Employment type

• Full‑time

Job function

• Finance and Sales

Industries

• Mental Health Care

#J-18808-Ljbffr