Privacy Impact Assessment (PIA) Specialist (RQ07939)

NOTE

Assignment Type: This position is currently listed as “Hybrid” as consultants will be required to work partly in the physical workplace and partly remotely. The details of this arrangement will be at the Hiring Manager’s discretion as the resource might be asked to be in office 2 days per week depending on direction.

Extension/Amendment Attestation:

The Statement of Work (SOW) shall expire on March 31, 2025. HSC will exercise it’s option(s) to extend the SOW beyond April 5, 2025 based on the optional extension amount and any funds remaining on the contract. Such extension(s) will be allowable only if the Master Service Agreement is extended beyond April 5, 2025 and be upon the same terms, conditions and covenants contained in the SOW.

?·      Interpret and apply Ontario Freedom of Information and Protection of Privacy Act (FIPPA) and Personal Health Information Protection Act (PHIPA), Health Information Network Provider (HINP) agreements, and Data Sharing Agreements (DSAs) to the project deliverables, ensuring that the ministry and OH’s obligations are met to provide individual access to PHI. 

·      Assess existing regulations for potential changes required to support additional initiatives to provide greater access to PHI and determine impacts on existing data sharing/electronic health record (EHR) agreements/privacy frameworks/health information custodian (HIC) models. 

·      Develop and provide change management support and/or communications to support stakeholders with changes related to privacy business processes. 

·      Review the recommendations from the privacy impact assessment (PIA) of the proposed solution and business processes. 

·      Provide advice to the Ministry as it relates to privacy policy and guidelines.  

·      Coordinate across branches and develop communication materials such as briefing notes and presentations.  

·      Consult and gather input from specific individuals within the organization on privacy topics either independently or as part of a team. 

·      Communicate with technical and business audiences and non-privacy experts. 

·      Prepare and present status reports and updates for any relevant steering committees, advisory panels, working groups, or similar governance bodies. 

·      Ensure project artefacts and deliverables reflect a superior understanding of: 

o  The necessary legislation and regulations to enable access to PHI in the Ontario context; 

o  The current landscape of digital health tools used to support patient access to PHI, including patient portals, apps, etc., and the opportunities to transform care and improve services to support a unified patient experience in digital health;  

o  Strong knowledge of digital health systems and programs, including Health811, secure log-in mechanisms, patient portals, and the provincial EHR;  

o  All relevant digital health/information technology issues, including policy, clinical / business and technical (e.g. interoperability, standards, licensing, operations and sustainment, etc.) requirements; and 

o  Private and public sector delivery partner capacity to deliver technology in a clinical setting; and 

o  Best practices in information technology project management.