Privacy Officer

Position: Privacy Officer (FT)
Waypoint Centre for Mental Health Care is a 321-bed academic and teaching hospital that provides specialized mental health, addiction and geriatric care. Located on the shores of Georgian Bay, we serve some of the most complex and disadvantaged individuals in Ontario and are the sole provider of high-secure forensic mental health services in the province.
Waypoint is looking to fill the position of Manager, Privacy, HIM & Risk (Privacy Officer). This position leads the development, implementation, oversight, and continuous improvement of Waypoint's privacy program. As the organization's senior privacy subject matter expert and designated privacy resource, the Manager advises senior leadership on privacy legislation, information practices, risk and compliance, supporting adherence to PHIPA, FIPPA and other applicable requirements.

Key responsibilities include overseeing privacy investigations and breach response, privacy impact assessments, access and correction requests, audits, education and awareness, and liaison with the Information and Privacy Commissioner of Ontario and other external partners.
The Manager leads Privacy Services, including the Privacy and Legislation Lead and Claims Coordinator, and establishes effective governance, controls, reporting and service standards to ensure privacy risks are identified, escalated and addressed. The role also oversees health information management and corporate risk activities, including health records and registration functions, records management strategy, claims administration and the development of effective risk-mitigation strategies in collaboration with the Director.

Please Note:

This position offers a hybrid work environment consisting of in-office and remote work. Office location is 500 Church St. Penetanguishene, ON.
KEY

ACCOUNTABILITIES   Leads and oversees Waypoint’s Privacy Program, ensuring compliance with applicable privacy legislation, regulatory requirements, agreements with partners, and organizational policies.
Serves as Waypoint’s Privacy Officer and primary privacy subject matter expert, providing advice to senior leaders, managers and staff on complex privacy matters
Develops, maintains and recommends privacy policies, standards, procedures and practices to support effective privacy governance.
Monitors legislative, regulatory and industry developments and assesses their impact on Waypoint’s privacy obligations and practices.
Provides privacy reporting, recommendations and updates to senior leadership and relevant governance committees.
Privacy Compliance, Advisory and Risk   Provides expert advice on PHIPA, FIPPA and other privacy requirements, including consent, information handling, access, correction and disclosure.
Advises on privacy implications and safeguards for organizational initiatives, technology, contracts, research and information-sharing arrangements; leads privacy impact and risk assessments.
Identifies privacy risks and recommends controls, mitigation and corrective actions; oversees privacy terms in vendor and partner agreements and conducts user audits.
Leads privacy breach, incident, complaint and regulatory matters, including investigation, notification, remediation, documentation and coordination with the Information and Privacy Commissioner of Ontario.
Privacy Education and Program Improvement   Leads the development and delivery of privacy education, training and awareness initiatives for staff, physicians, contractors, volunteers, students and other applicable stakeholders.
Develops privacy communications, resources and tools to support consistent understanding and application of privacy requirements.
Oversees privacy monitoring, audits, incident trends and other assurance activities to assess…