Within the context of a client and family centred model of care and, in accordance with the Mission, Vision and Values, and strategic directions of Providence Health Care, the person promotes a safe, respectful, and civil working environment for patients, residents, families, visitors and staff.
Reporting to the Leader, Information Access & Privacy, the Privacy Advisor is a subject matter expert who acts as a liaison and consultant to clinical and business areas to support and promote the confidentiality of personal information. The Privacy Advisor leads in the administration and continuous improvement of PHC’s privacy audit program and provides primary support to staff in the completion of privacy impact assessments. As a member of the Information Access and Privacy Office, the position also responds to general privacy inquiries, supports staff education, and assists in privacy breach investigations and Freedom of Information requests.
Comprehensive knowledge (good understanding of) of audit and privacy concepts, tools and methods.
Comprehensive knowledge (good understanding of) of confidentiality of information, privacy protection, data security and other related information privacy and security issues important in a healthcare environment.
Knowledge of BC provincial and other provincial and federal privacy legislation and requirements.
Broad knowledge of the health care environment.
Demonstrated knowledge of electronic information systems and applications and information management processes.
Use of advanced computer skills in a variety of desktop computer applications.
Demonstrated ability to consult, plan, implement, organize and problem solve.
Demonstrated communications, leadership, facilitation and coaching skills.
Demonstrated ability to develop, implement and deliver education and training programs/initiatives.
Advanced analytical and problem solving skills.
Ability to deal with others effectively; to interact with tact and diplomacy with staff at all levels within the organization.
Ability to remain organized and on task while handling multiple priorities.
Demonstrated ability to consult, plan, implement, and organize and problem solve.
Ability to adapt to change in a dynamic environment.
Excellent written and communication skills to function within a complex interdisciplinary environment.
Effective leadership and communication skills to foster a respectful and motivating environment.
Use of investigative and analytical skills to research, analyze and interpret data and information from a variety of disparate sources.
Effective stakeholder engagement and management skills and ability to build consensus among groups.
Safe handling of confidential and sensitive information with skill, tact and diplomacy.
A level of education, training and experience equivalent to a Bachelor’s degree in Health Information Management, Health Information Science or other related field plus three to five years’ recent related experience or an equivalent combination of education, training and experience. Completion of an Information Access & Protection of Privacy program or certification as a Certified Information Privacy Professional/Canada (CIPP/C) or other Canadian industry-recognized privacy certification, or evidence of continuing professional development in the area of privacy and information management an asset.
Facilitates and supports the completion of privacy impact assessments to evaluate whether program and service, projects and initiatives involving the collection, use or disclosure of personal information comply with privacy requirements. Assists in identifying potential privacy risks and recommends mitigation strategies where necessary.
Administers PHC’s privacy audit program. Develops reports and processes for conducting random and routine information privacy audits, such as processes for the distribution, tracking and follow-up of audit reports and reviews.
Generates audit logs and other information from the audit software program used to support investigations into privacy breach investigations. Reviews and analyzes privacy audit information for anomalies or potential privacy breach situations. Follows up with appropriate Leaders as required.
Supports privacy incident investigations and follow up activities.
Responds to and resolves allegations of non-compliance with corporate privacy policies and procedures and investigates privacy breaches by reviewing, documenting, reporting and developing appropriate action plans.
Works with Leaders to ensure a centralized intake and tracking of privacy related issues and complaints.
Participates in the development and delivery of a PHC-wide privacy education and training programs. Works with other relevant stakeholders to develop appropriate education and training materials.
Assists in the development and delivery of corporate-wide privacy awareness campaigns to inform staff/physicians, patients/residents, and the public regarding privacy rights of personal information.
Maintains expert knowledge of current information legislation, standards, and information management and privacy trends and issues.