Privacy Analyst

Position Overview

The Provincial Lead, Legal Services provides legal advice to Shared Health, WRHA programs and facilities, while also serving in a provincial lead and coordinate capacity.

The Chief Privacy Officer, reporting to the Provincial Lead, Legal Services, is responsible for the administration and compliance with privacy legislation including The Personal Health Information Act (PHIA), The Freedom of Information and Protection of Privacy Act (FIPPA), The Personal Information Protection of Electronic Documents Act (PIPEDA), The Mental Health Act (as it pertains to access and privacy), The Health Governance and Accountability Act, The Protecting Children Information Sharing Act, The Public Health Act, The Vulnerable Persons Living With a Mental Disability Act  (as it pertains to access and privacy) along with other applicable legislation as they relate to access and privacy.

The Privacy Analyst has direct responsibilities for ensuring that Shared Health and the WRHA are compliant with access and privacy legislation with respect to the collection, use, disclosure, retention and destruction of personal information (PI) and personal health information (PHI).

The Privacy Analyst (Compliance) reports to Shared Health, Manager, Privacy, who is responsible for managing the Privacy Auditing Program, who in turn reports to the Shared Health, Chief Privacy Officer.

Main Function:
Reporting to the Chief Privacy Officer, the position ensures systemic compliance with statutory obligations set out in PHIA, FIPPA and related legislation by:

• Managing access to information requests (PHIA/FIPPA).
• Review and provide guidance on research requests involving Personal Health Information (PHI) and Personal Information (PI) where Shared Health or the WRHA is the trustee.
• Leading development and maintenance of access and privacy policies and guidelines, including stakeholder engagement and cross jurisdictional research to ensure compliance with PHIA and FIPPA.
• Leading, coordinating and reviewing record of user activity (RUA) audits across electronic systems managed or maintained by Shared Health or the WRHA.
• Advising on agreements, including SPAs, RAs, DSAs, IMAs etc.
• Oversee the completion of Privacy Impact Assessments (PIAs) for repositories containing Personal Health Information (PHI) and Personal Information (PI) where Shared Health or the WRHA is the trustee.
• Providing guidance and support on matters related to access and privacy to privacy officers, programs and regional health authorities.
• Assisting privacy officers, sites and programs related to privacy breach investigations.
• Developing and delivering training, awareness and compliance monitoring activities.
• Conducting cross-jurisdictional research on matters relating to access and privacy.
• Participating on various committees serving as a privacy subject matter expert.

Experience

• Strong knowledge of privacy laws specifically PHIA, FIPPA, PIPEDA and related legislation.
• Demonstrated experience and understanding of the Manitoba health system.
• Experience with: 
  
  • Privacy and Security policies, procedures and standards.
  • Privacy audit analysis and management.
  • Privacy Breach/Incident investigation, management and reporting.
  • Risk mitigation and management plans.
  • Privacy Impact Assessments (PIAs).
  • Healthcare research involving personal health information (PI).
  • Electronic information systems used within health care and data governance.
• Health care administrative/record management experience an asset.
• Proven analytical and problem-solving skills.
• Minimum 5 years’ experience applying privacy legislation (preferably healthcare).
• Minimum 3 years’ experience in policy development and implementation.

Education (Degree/Diploma/Certificate)

• Undergraduate University Degree in Public Administration, Health Information Management, Project Management, Information/Computer Technology, healthcare management or other relevant discipline.
• A combination of education and experience may be considered.

Certification/Licensure/Registration

Not applicable

Qualifications and Skills

• The provincial health system in Manitoba has adopted the LEADS in a Caring Environment framework.
• Strong working knowledge of privacy laws and health information systems.
• Demonstrated investigative, analytical, and audit capabilities.
• Established knowledge of electronic information systems used within health care.
• Proven ability for exercising sound and impartial judgment in conflict situations 
• Possesses strong interpersonal skills and effectively collaborates with challenging stakeholders and/or team members.
• Maintains strong listening skills, identifying key insights from both expressed and unspoken information while understanding underlying intent and behavior.
• Demonstrated strong problem-solving skills, with attention to detail while maintaining a focus on the broader picture.
• Ability to interpret legislation and apply it in complex environments.
• Strong communication, facilitation, presentation, and stakeholder engagement skills.
• Ability to work independently and manage competing priorities.
• High level of professionalism, discretion, and judgment.
• Strong organizational and documentation skills.

Physical Requirements

• May be required to work safely in a typical computerized office environment with frequent meetings.
• May be required to travel throughout the service area requiring a valid Manitoba driver’s license and use of a personal motor vehicle.