The Information and Privacy Officer at CAMH is responsible for managing all aspects of the privacy program, including program implementation and monitoring, policy development, stakeholder relations, investigations, auditing, and education initiatives. Reporting to the Director, Clinical Informatics and Health Information Services, the Information and Privacy Officer ensures the confidentiality, integrity, and security of sensitive patient information, oversees compliance with privacy regulations, develops information governance policies, and educates staff on privacy best practices.

Responsibilities & Activities:

1.     Privacy Policy Development (20%):

• Develop and update policies, procedures, and training materials relating to privacy compliance with PHIPA and FIPPA.
• Develop strategies to ensure regulatory compliance.
• Ensure policies reflect the unique considerations of mental health patient information.

2.     Compliance Oversight (20%):

• Process access requests under FIPPA.
• Process and manage patient correction requests under PHIPA.
• Participate in and implement provincial initiatives.
• Monitor and ensure compliance with privacy laws.
• Create quarterly/annual reports as required.
• Conduct regular audits to assess adherence to privacy policies and regulations.

3.     Data Management (15%):

• Advise on hospital practices for access to and management of personal health information and personal information to ensure regulatory, policy, and contractual compliance.
• Maintain the hospital Index of Personal Information Banks.

4.     Incident Response and Reporting (15%):

• Investigate privacy breaches and complaints promptly.
• Report and document incidents in accordance with legal requirements.

5.     Privacy Impact Assessments (PIAs) (10%):

• Conduct PIAs or privacy reviews for new or changing systems, processes, or initiatives involving personal health information and personal information.
• Consult with program stakeholders on recommendations to mitigate privacy risks and ensure compliance with regulations.

6.     Training and Education (10%):

• Keep up to date on emerging trends and practices related to information and privacy.
• Represent CAMH with external partners.
• Provide ongoing training to staff on privacy laws, policies, and best practices.
• Foster a culture of privacy awareness within the hospital.
• Support a healthy workplace that embraces diversity, encourages teamwork, and complies with all applicable regulatory and legislative requirements.

7.     Privacy Audits and Consultations (10%):

• Conduct regular privacy audits to assess data access and handling practices.
• Identify areas for improvement and implement corrective actions.
• Provide guidance and consultation to staff on privacy matters.
• Address inquiries related to personal health information and personal information handling practices.

Education & Specific Training:

• Bachelor's degree or equivalent related experience.

Credentials:

• Designation as a Certified Information Privacy Professional/Canada (CIPP/C) considered a strong asset.

Experience:

• Minimum of three (3) years related work experience (experience may include front office support in a clinical program, privacy consultancy, health records, release of information experience, entry-level work in a privacy and access management office).
• Previous experience in the healthcare industry, management level accountabilities.
• Strong working knowledge of the Personal Health Information Protection Act (PHIPA) and either the Freedom of Information and Protection of Privacy Act (FIPPA) or the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA).
• Strong analytical and problem-solving abilities, organizational and time management skills, as well as sound judgment.
• Leadership experience in driving and executing compliance programs and knowledgeable in process management, analysis, operational improvement, and risk management.
• Enthusiastic, flexible, and capable of working independently and in a team setting, demonstrating excellent interpersonal, organizational, and communication skills (both written and oral).
• Ability to handle matters of a confidential and/or sensitive nature and work well under pressure and timelines.
• Ability to work effectively in a wide range of settings with individuals from diverse backgrounds.
• Proficient in Microsoft Office including Word, Excel, and PowerPoint.
• Bilingualism (French/English) and/or proficiency in a second language is an asset.

Compensation & Benefits:

• Salary is competitive and based on experience, with a hiring range of $91,758.17 – $114,697.71 per year.  
• Employees in this role may progress within the full pay range of $91,758.17 – $137,637.25 per year
• CAMH’s Total Rewards: Includes participation in HOOPP defined benefit pension plan, extended health and dental benefits, paid vacation starting at 4 weeks, flexible work arrangements, and ongoing professional development support.

This role allows professionals to apply their expertise in a mission-driven environment dedicated to public health outcomes.

If you are interested in this position, please ensure that you apply before 5pm EST of the closing date. If your application is received past 5pm EST of the closing date, your application will not be accepted.

CAMH is a fully affiliated teaching hospital and research institute of the University of Toronto. As a CAMH employee, you will contribute to our mission by supporting teaching, research, and clinical care across the hospital.

CAMH is dedicated to equity, diversity, and inclusion. Our commitment is to foster a workplace, teaching, and learning environment that is inclusive, respectful, and free from discrimination or harassment.

CAMH strongly encourages applications from candidates who reflect the diversity of the communities we serve, including First Nations, Métis, and Inuit Peoples; Black and other racialized communities; LGBTQ2S+ communities; women; and people with disabilities, including those with lived experience of mental health and substance use challenges.

We welcome applicants from all backgrounds. Thank you to all who apply; however, only those selected for an interview will be contacted. If you require accommodations during the application or recruitment process, please let us know.