Privacy and Access Analyst, Office of General Counsel

Responsibilities

Reporting to the Information and Privacy Officer, the Privacy and Access Analyst supports the University's compliance obligations under FIPPA within the Office of the General Counsel. The analyst facilitates FOI requests, performs initial PIAs, and supports privacy incident and breach responses. The incumbent exercises independent judgment within established institutional frameworks to conduct risk assessments for new systems, services, and vendor agreements.

The analyst optimizes internal workflows, manages inquiry triage, and tracks multiple concurrent files and statutory deadlines. The incumbent serves as the primary operational point of contact for academic and administrative units to streamline the privacy and access function. Additionally, the analyst facilitates privacy awareness training, performs periodic compliance audits, and compiles data for institutional stakeholder reports.

• Supports the Information and Privacy Officer in the development, implementation, and maintenance of the university's privacy and access to information framework, ensuring adherence to FIPPA and related policies.
• Processes FOI requests, including coordinating records retrieval, reviewing records for responsiveness, applying FIPPA exemptions, and redacting sensitive information under guidance.
• Guides academic and administrative units through the PIA process, including conducting intakes, managing timelines, and ensuring compliance with FIPPA requirements.
• Provides operational support for privacy incident and breach response, including documentation, investigation assistance, and coordination of notification processes.
• Conducts initial privacy risk assessments for current systems, services, and vendor agreements, escalating complex or high‑risk matters as needed.
• Monitors and researches legislative, regulatory, and best‑practice developments related to FIPPA and privacy in the post‑secondary sector, providing summaries to the Information and Privacy Officer.

• Assesses, documents, and continuously improves privacy and access to information workflows, including FOI intake, PIA coordination, incident response, and compliance reporting, using structured process improvement approaches.
• Serves as the primary point of contact for internal university departments on privacy and access to information processes, triaging inquiries and requests and reducing demands on the Information and Privacy Officer and Senior Legal Counsel.
• Supports the Information and Privacy Officer in managing and tracking multiple concurrent files, projects, and statutory deadlines using structured project and task management methods.
• Identifies operational inefficiencies in privacy-related processes across academic and administrative units and proposes practical, scalable solutions.
• Supports the development and delivery of privacy awareness and FIPPA compliance training programs for staff and faculty.

• Conducts periodic privacy compliance audits across academic and administrative units, identifying gaps and recommending corrective measures.
• Maintains accurate and complete records of FOI requests, PIAs, privacy incidents, and other compliance activities.
• Compiles, analyzes, and presents compliance data for internal and external stakeholder reports, including the annual privacy and access to information report.
• Assists in the development and maintenance of privacy compliance documentation, policies, and procedures.

• Performs other duties within the skilled scope and skill level of the position, in full compliance with applicable legislation, university policies, and collective agreements.

• College Diploma in Public Administration, Information Management, Law & Justice, Paralegal Studies, Business Administration, Business Analytics, Data Analytics or a related field.
• Bachelor’s Degree in a relevant field is preferred.
• Three (3) to five (5) years of experience in privacy, access to information, regulatory compliance, process improvement, business analysis, or project coordination, preferably within the public or…