RQ09522 - Privacy Impact Assessment (PIA) Specialist - Senior

Description:

Interpret and apply Ontario Freedom of Information and Protection of Privacy Act (FIPPA) and Personal Health Information Protection Act (PHIPA) Health Information Network Provider (HINP) agreements and Data Sharing Agreements (DSAs) to the project deliverables ensuring that the ministry and OH s obligations are met to provide individual access to PHI and other digital health care services.

Assess existing legislation and regulations for potential changes required to support additional initiatives to provide greater access to PHI and digital health care services and determine impacts on existing data sharing/EHR agreements/privacy frameworks/health information custodian (HIC) models.

Develop and provide change management support and/or communications to support stakeholders with changes related to privacy business processes.

Review the recommendations from the privacy impact assessment (PIA) of the proposed solution and business processes.

Provide advice to the ministry as it relates to privacy legislation regulations policy and guidelines.

Coordinate across branches and develop communication materials such as briefing notes and presentations.

Consult and gather input from specific individuals within the organization on privacy topics either independently or as part of a team.

Communicate with technical and business audiences and non-privacy experts.

Prepare and present status reports and updates for any relevant steering committees advisory panels working groups or similar governance bodies.

Ensure project artefacts and deliverables reflect a superior understanding of:

o The necessary legislation and regulations to enable access to PHI and digital health care services in the Ontario context;

o The current landscape of digital health tools used to support patient access to PHI including patient portals apps etc. and the opportunities to transform care and improve services to support a unified patient experience in digital health;

o Strong knowledge of identity verification authentication and authorization services and the privacy and policy requirements to enable the usage of these services;

o Strong knowledge of digital health systems and programs including Health811 secure log-in mechanisms patient portals and the provincial EHR;

o All relevant digital health/information technology issues including policy clinical / business and technical (e.g. interoperability standards licensing operations and sustainment etc.) requirements; and

o Private and public sector delivery partner capacity to deliver technology in a clinical setting; and

o Best practices in information technology project management.

Requirements

Health sector and digital health experience :

Strong understanding of the healthcare system structures processes stakeholder groups and affected populations and how healthcare services are delivered in the province based on extensive experience with Ontario s health sector;

Strong track record of experience with the ministry and its delivery partners and in-depth knowledge of the levers and instruments of change;

Strong knowledge of and experience with the digital health systems programs vendors assets and solutions in Ontario.

Health privacy knowledge and regulatory experience :

Strong understanding of Ontario s privacy regulations/policies/frameworks and how they are applied to individuals and organizations in the use and protection of personal health information;

Demonstrated experience with conducting or leading privacy impact assessment in the health context;

Demonstrated experience with interpreting or applying PHIPA and leading regulatory/policy projects in digital health.

Program and project management :

Experience managing complex projects with a demonstrated track record of successful delivery within approved plan scope and budget and business outcomes; and

Demonstrated leadership and resource management skills including the ability to direct activities and manage a variety of professionals.

IT strategy and planning :

Track record of successful strategic planning in health technology contexts;

Demonstrated ability to define objectives develop strategic options analysis and to create action plans that outline tasks required for implementation phase; and

Ability to provide clarity and collective understanding of the range of options and communicate logically how the options were developed and selected as the strategic response.

Business analysis:

Demonstrated experience managing business projects and achieving successful results on time and on budget with high customer satisfaction;

Demonstrated experience in process mapping requirements gathering program definition and transition planning; and

Demonstrated experience in leading program or organizational transformation initiatives.

MUST HAVES:

Strong understanding of Ontario s privacy regulations/policies/frameworks and how they are applied to individuals and organizations in the use and protection of personal health information

Demonstrated experience with conducting or leading privacy impact assessment in the health context

Strong knowledge of and experience with the digital health systems programs vendors assets and solutions in Ontario.