Privacy and Information Access Officer

About the Role

Based in Vancouver, CPBC is seeking a skilled privacy and information access professional to take on the permanent, full‑time position of Privacy and Information Access Officer
. Reporting to the Chief Legal Officer (under review), the successful candidate will have knowledge of the British Columbia Freedom of Information and Protection of Privacy Act (FIPPA) and other privacy legislation, and will have government, regulatory or other public sector experience in implementing and maintaining privacy management programs, preparing privacy impact assessments, responding to privacy incidents and breaches, developing and administering information sharing agreements, coordinating responses to record and information access requests, providing staff training, and developing and implementing related policies.

The ideal candidate will also have education or experience in multiple aspects of information management, information governance and/or information security policy and certification as an Information Privacy Professional (e.g., CIPP/C or CIPM).

• Supports the development, implementation, and continuous improvement of CPBC’s privacy management program to ensure alignment with FIPPA and other applicable legislation.
• Researches, analyzes, and provides advice and recommendations to supervisor and CPBC’s leadership team on privacy protection and information access policy issues and related information governance, information management, and information security issues.
• Supports or leads the preparation and maintenance of privacy impact assessments.
• Supports or leads responses to privacy incidents and breaches in accordance with established privacy incident and breach protocols.
• Administers and coordinates responses to access to records requests under FIPPA and other non‑FIPPA data or information access requests from intake to disclosure.
• Coordinates or conducts searches of all CPBC repositories including electronic and paper files, and email system for records; reviews and assesses records for responsiveness to FIPPA access requests, disclosure demands in legal proceedings, and internal legal holds initiated by CPBC legal counsel.
• Identifies and reviews responsive records and applies FIPPA exceptions using sound judgment to sever appropriately and liaises with CPBC legal counsel as and when required.
• Prepares responsive records to be approved for disclosure by the designated CPBC authority.
• Represents CPBC with all parties in relation to disputes, hearings, and applications under FIPPA, as directed.
• Builds effective relationships and linkages with CPBC staff as well as with external partners.
• Recommends and develops training materials and conducts training sessions on access requests, privacy, and information security.
• Stays current and informed on emerging privacy, information governance, information management, and related information security issues.
• Performs the role and responsibilities of the Records and Information Management Coordinator in a backup capacity, as needed or directed.

• Post‑secondary education in a relevant field such as privacy management, information studies, information management, records management, law, or public administration.
• At least three years of recent, relevant work experience (or an equivalent combination of education and experience).
• Experience working in privacy management and/or FOI/access to information request management, in a government, regulatory, or public sector organization.
• Education or experience in multiple aspects of information management, information governance and/or information security policy is an asset.
• Certification as an Information Privacy Professional (CIPP/C and/or CIPM) is an asset.
• Anti‑racism and/or diversity, equity and inclusion training or equivalent self‑directed training.
• Indigenous Cultural Safety training or equivalent self‑directed training.
• Demonstrated knowledge of FIPPA and other privacy legislation.
• Demonstrated knowledge of information sharing agreements, breach reporting, and the preparation of Privacy Impact Assessments (PIAs), and related policy and legal issues.
• Knowledge of records management…