Privacy Analyst

Position Summary

Reporting to the Director of Digital Innovation and Health Information Management the Privacy Analyst supports the organizations compliance with privacy legislation and internal policies by managing day-to-day privacy operations. This includes responding to and tracking privacy breaches processing Freedom of Information requests assisting with Privacy Impact Assessments supporting privacy education initiatives and maintaining privacy-related policies and procedures.

Required

A diploma or degree in Health Information Management Library Science Archival Studies or a Health Science related discipline is preferred or a combination of education training and moderate experience in information management and access and privacy legislation
Knowledge and understanding of the Freedom of Information and Protection of Privacy Act (FIPPA) the Personal Health Information Protection Act (PHIPA) other applicable legislation and the directives guidelines decisions and orders of the Office of the Information and Privacy Commissioner (IPC)
Knowledge of privacy programs and operational activities including privacy breach management staff training and awareness auditing practices and privacy risk assessment and mitigation.
Ability to design implement or support compliance related processes and tools such as forms logs workflows and tracking mechanisms including the development and use of metrics dashboards and reports to monitor compliance.
Strong organizational and communication skills.
Proficiency in Microsoft Office (Word Excel PowerPoint).
Ability to handle sensitive information with discretion.
Asset: Privacy certification (e.g. CIPP/C) experience in healthcare privacy knowledge of clinical workflows experience with hospital health information systems (Cerner Meditech Epic Quadramed or other)

Duties

Privacy Breach Management
oRespond to and document privacy breaches including investigation containment notification and follow-up.
oMaintain breach logs and prepare reports for internal and external compliance requirements.
oDevelop privacy audit plans and conduct privacy audits across QH portfolios on an ongoing basis and/or as scheduled by privacy policies and procedures
Freedom of Information Requests (FIPPA)
oProcess and track formal requests for access to information.
oReview records redact sensitive information and prepare responses in accordance with legislation.
Privacy Impact Assessments
oAssist in conducting PIAs for new systems or processes involving personal health information.
oDocument findings and escalate risks as needed.
Education & Awareness
oSupport the development and delivery of privacy training and awareness programs for staff.
oTrack completion of mandatory privacy training.
Policy & Procedure Maintenance
oAssist in reviewing and updating privacy policies and procedures to ensure compliance with PHIPA and FIPPA.
oMaintain templates forms and logs related to privacy operations.
oCollaborate with members of the privacy team and other QH portfolios or functional teams (i.e. Information Security Enterprise Risk Management etc.) to ensure QH has integrated and harmonized information practices
o Act as the subject matter expert as you coordinate and support the management and execution of program and operational activities required to ensure QHs compliance with IPC requirements including but not limited to governance and accountability privacy breach management privacy risk management and privacy training and awareness activities
Reporting
oPrepare routine reports on privacy breaches FOI requests and training compliance for leadership and regulatory bodies.

At Quinte Health our four hospitals unite under the core values of Imagine Its You Value Everyone We All Make a Difference and Stronger Together. We work as one team to enhance lives improve access to high-quality care and build healthier communitiesright where people need it most.

Quinte Healths four hospitals are the heart of our communities delivering exceptional care close to home. As one unified team were passionate about improving lives and expanding access to high-quality healthcare. Our staff physicians and volunteers dont just work herewe live grow and thrive here. If youre compassionate and driven we have exciting opportunities across our hospitals. Join us and make a real impact!

Physical Demands Analysis

Strength
Required Rarely lifting average 5-10 pounds maximum 15 pounds carrying pushing/pulling.
Mobility
Required Often prolonged sitting and
Required Occasionally standing and walking on hard surfaces bending/stooping.
Dexterity
Required Often prolonged fine finger movements
Required Frequently gripping/grasping eye/hand coordination and
Required Briefly reaching with both hands.

Equal Opportunity

We thank all interested candidates for their response however only those chosen for an interview will be contacted. Quinte Health is an equal opportunity employer committed to meeting needs under the Canadian Charter of Rights and Freedom and the Ontario Human Rights Code. Our Recruitment process follows the Accessibility for Ontarians with Disabilities Act in order to provide a fair and equitable process for all candidates. Applicants requiring accommodation through the recruitment/interview process are encouraged to contact the Human Resources Department at x2577 or for assistance.