Foundry transforms how young people in British Columbia access health and social services. Our province-wide network of community-based centres, online tools and resources use an approach to wellness that is collaborative, trustworthy, respectful, dynamic, responsive and approachable. Through this provincial initiative, we connect young people with the care and community resources they need to lead a healthy, balanced and fulfilling life.

Reporting to the Director, Information Access & Privacy, the Privacy Advisor is a subject matter expert who acts as a liaison and consultant to Foundry to support and promote the security and confidentiality of personal information. As a member of the Information Access and Privacy Office, the Privacy Advisor will support Foundry with completion of privacy impact assessments, support privacy education and training, respond to general privacy enquiries, assist in privacy breach investigations, and support compliance with PHC's Privacy policies and applicable privacy legislation.  

Education:
A level of education, training and experience equivalent to a Bachelor's degree in Health Information Management, Health Information Science or other related field plus three (3) to five (5) years' recent related experience or an equivalent combination of education, training and experience. Completion of an Information Access & Protection of Privacy program or certification as a Certified Information Privacy Professional/Canada (CIPP/C) or other Canadian industry-recognized privacy certification, or evidence of continuing professional development in the area of privacy and information management an asset.

Skills and Abilities:

• Comprehensive knowledge (good understanding) of audit and privacy concepts, tools and methods.
• Comprehensive knowledge (good understanding) of confidentiality of information, privacy protection, data security and other related information privacy and security issues important in a healthcare environment.
• Knowledge of BC provincial and other provincial and federal privacy legislation and requirements.
• Broad knowledge of the health care environment.
• Demonstrated knowledge of electronic information systems and applications and information management processes.
• Use of advanced computer skills in a variety of desktop computer applications.
• Demonstrated ability to consult, plan, implement, organize and problem solve.
• Demonstrated communications, leadership, facilitation and coaching skills.
• Demonstrated ability to develop, implement and deliver education and training programs/initiatives.
• Advanced analytical and problem solving skills.
• Ability to deal with others effectively; to interact with tact and diplomacy with staff at all levels within the organization.
• Ability to remain organized and on task while handling multiple priorities.
• Demonstrated ability to consult, plan, implement, and organize and problem solve.
• Ability to adapt to change in a dynamic environment.
• Excellent oral and written communication skills to function within a complex interdisciplinary environment.
• Effective leadership and communication skills to foster a respectful and motivating environment.
• Use of investigative and analytical skills to research, analyze and interpret data and information from a variety of disparate sources.
• Effective stakeholder engagement and management skills and ability to build consensus among groups.
• Safe handling of confidential and sensitive information with skill, tact and diplomacy.
• Demonstrated ability to exercise initiative and work both independently and in a team environment.
• Physical ability to carry out the duties of the position.

• A competitive salary: The salary range for this position is $38.12 - $54.80 per hour, depending on experience. 
• Growth opportunities: We welcome individuals at all stages of their career, offering opportunities for professional development and growth. 
• Inclusive culture: We respect the diversity, dignity and interdependence of all persons. We value the cultural richness that our diverse workforce brings to the care of our equally diverse population of patients and residents. 
• Hybrid work opportunity. 
• Meaningful impact: You will have the opportunity to work for an organization that is deeply committed to safeguarding of our surrounding environment by contributing to high quality care while promoting sustainable practices in your everyday work. 
• A comprehensive health benefits package including dental, vision, and life insurance as well as pension. 

Your Day To Day:

• Provides interpretation and expert advice, both verbally and in writing, to internal staff, physicians, and management on privacy legislation, principles, standards and best practices, with a special emphasis on analyzing privacy risk and application of privacy conscious behaviours into clinical and operations workflows.
• Facilitates and supports the completion of privacy impact assessments to evaluate whether projects and initiatives involving the collection, use or disclosure of personal information comply with privacy requirements. Identifies potential privacy risks and recommends mitigation strategies where necessary.
• Leads the development and delivery of a PHC-wide privacy education and training program. Works with other relevant stakeholders to develop appropriate education and training materials. Delivers in-person/on-line education sessions. Assists in the development and delivery of corporate-wide privacy awareness campaigns to inform staff/physicians, patients/residents, and the public regarding privacy rights of personal information.
• Supports the development and implementation of an ongoing proactive and reactive compliance audit program.
• Investigates privacy incidents and complaints; develops reports, action plans, and response communications on mitigation strategies; liaises with the Office of the Information Privacy Commissioner (OIPC) as required.
• Responds to and resolves allegations of non-compliance with corporate privacy policies and procedures and investigates privacy breaches by reviewing, documenting, reporting and developing appropriate action plans.
• Works with Leaders to ensure a centralized intake and tracking of privacy related issues and complaints.
• Maintains expert knowledge of current information legislation, standards, and information management and privacy trends and issues.
• Participates in the development and/or review of policies and procedures that ensure confidentiality and privacy of personal information and achieves PHC privacy standards and goals.
• Supports Leaders to ensure compliance to privacy legislation in regards to collection, use and disclosure of personal information for purposes such as research, registries, quality improvement and quality assurance.
• Fosters strong relationships with Risk Management, Clinical, Business, Research, Communications and Information Management/Information Technology Systems (IMITS) Staff to implement strategic initiatives or directives.
• Builds partnerships with colleagues in other organizations and associations ensuring legislative compliance is met and privacy standards and best practices are adhered to.
• Effectively participates and represents Providence Health Care on local and provincial committees.
• Collaborates with various programs, including IMITS, Risk Management, Patient Relations, Data Analytics, and/or Communications to develop action plans in response to privacy and/or security breaches.
• Assists in Freedom of Information requests that require review, investigation, and reporting of highly sensitive information.
• Performs other related duties as assigned.

Who We Are:  

Providence Health Care is one of the largest faith-based health care organizations in Canada. For the people at Providence, living our Mission, Vision and Values means providing British Columbians with compassionate, socially just, exceptional and innovative care every day.  

From our humble roots 129 years ago, Providence Health Care has grown into a globally recognized leader in research, teaching, and care. As individuals within a mission-driven organization, we choose to be part of PHC because we value its long-standing dedication to social justice and compassionate care, its active efforts to advance environmental sustainability and planetary health, and its meaningful engagement in the process of Truth and Reconciliation with Indigenous Peoples. 

We acknowledge that Providence Health Care and the new St. Paul’s Hospital site is located on the traditional, ancestral, and unceded territory of the Coast Salish Peoples, including the territories of the xʷməθkwəy̓əm (Musqueam), Skwxwú7mesh (Squamish), and Səl̓ílwətaʔ/Selilwitulh (Tsleil-Waututh) Nations.