Reporting to the Director level, the Privacy and FOI Advisor is the first point of contact with internal and external stakeholders in addressing most Privacy issues and Freedom of Information (FOI) requests.
The Privacy and FOI Advisor coordinates and processes FOI requests for BCCSS, provides support to staff in complying with the Freedom of Information and Protection of Privacy Act (FIPPA), collaborates with FOI Offices in other public bodies and, on behalf of the organization, participates in mediations and inquiries before the Office of the Information and Privacy Commissioner (OIPC).
Working closely with the Director, provides recommendations about information privacy strategies and risk mitigation and assists staff and stakeholders in understanding the requirements of privacy legislation as well as developing internal and external confidence that personal information is being collected, used, and disclosed at BCCSS in a responsible manner and in compliance with policy and legislative requirements.
Examples of Duties/Accountabilities:
- Coordinates all FOI requests and acts as the primary contact for FOI issues.
- Administers processes for receiving and tracking FOI files including requests, consultations from other public bodies and appeals to the Office of the Information and Privacy Commissioner of British Columbia (the “OIPC”).
- Facilitates and supports the completion of privacy impact assessments to evaluate whether programs and services, projects and initiatives involving the collection, use or disclosure of personal information comply with privacy requirements.
- Escalates privacy issues to the Director according to established Departmental procedures.
- Assists in the management and investigation of privacy incidents or complaints
- Communicates with FOI applicants and members of the public to answer inquiries and provide assistance in release of information matters.
- Works collaboratively with other FOI and Privacy offices at BC Health Authorities to manage FOI requests and information privacy matters of joint concern
- Represents BCCSS before BC health sector committees and working groups comprised of health sector Privacy Office and Information Security leads. Works with various Departments, Information Access & Privacy team members, Risk Management, Communications, Human Resources, Information Technology, Privacy Commissioners Office, and/or legal counsel to develop action plans in reaction to privacy and/or security breaches.
- Operates in a complex healthcare environment with multi-site responsibilities. Work involves extensive use of detailed information including highly sensitive and confidential information, and the responsibility to make recommendations regarding steps required to handle this information in accordance with information access and privacy legislation and policy.
- Upon request, provides support to BCCSS departments in release of information matters.
- Investigates and takes action on complaints received from applicants and members of the public regarding access to information.
- Provides internal stakeholders across the organization with recommendations with respect to information privacy compliance and risk mitigation steps
- Performs other related duties as required.
Education, Training and Experience
- Minimum Bachelors Degree in Health Administration, Law or another related discipline (i.e. Business or Computer Science)
- 5-7 years recent related experience
- Completion of an Information Access and/or Protection of Privacy Certificate Program is an asset ( i.e. CIPP/C, CIPT, CIPM, or (PACC) Privacy and Access Council of Canada .)
Examples of Knowledge, Skills and Abilities
- Extensive experience and knowledge of British Columbia’s Freedom of Information and Protection of Privacy Act, case decisions, trends and issues.
- Effective stakeholder engagement and management skills.
- Demonstrated expertise in the area of information privacy and information access concepts, tools, and methods.
- Use of investigative and analytical skills to research, analyze and interpret data and information from a variety of disparate sources.
- Proficient in using Microsoft Office applications and databases.
- Physical ability to perform the duties of the position.