Privacy Consultant-- NARDC5883582

Responsibilities

The Privacy Consultant will undertake assigned tasks and responsibilities, which include, but are not

limited to the following:

• Execute Data Access Request reviews as per HRDP-SK work standards and expected timelines.
• Completion of the HRDP-SK Privacy Impact Assessment (PIA) and Implementation Plan inclusive
• of goals, milestones and timelines.
• In partnership with the Policy & Procedure Committee and HRDP-SK and eHealth team members,
• write policies and procedures to ensure HRDP-SK.
• Alongside eHealth and HRDP-SK team members, develop and support, policies, procedures, in
• compliance with privacy best practices.

Refine and manage the privacy program for HRDP-SK. Create content such as:

• Development and delivery of privacy curriculum and training;
• Privacy Breach Guidelines;
• Use of Indigenous Data – Ownership, Control, Access, and Possession (OCAP) Policies and
• Procedures; and
• General privacy statements/policies/FAQs for internal use and website.
• Develop new content, schedules and amendments as required to support advancement of the
• HRDP-SK and alignment with the Health Data Platform.
• Manage the development of new and amended content in collaboration with HRDP-SK staff and
• Master Health Data Sharing Agreement (MHDSA) Policy & Procedure and Governance Committees.
• Support projects, as identified, in alignment with the MHDSA.
• Encourage collaboration and enterprise approaches on data and privacy practices and legislation

(e.g., Public Health, Indigenous Identifiers, Anonymization).

• MHDSA Policy & Procedure Committee;
• Saskatchewan representative to HDRN Privacy Working Group; and
• Advisory member of HRDP-SK Data Quality & Standardization Committee.
• Provide regular status updates to HRDP-SK/SCPOR and eHealth leadership and partners.
• Other duties as assigned based on HRDP-SK priorities.

Mandatory Resource Qualifications/Requirements

The proposed Resource must:

• Possess a bachelor’s degree in a related field, such as health information, social science or public
• administration.
• Have a minimum of five (5) years proven experience working as a Privacy Consultant, providing privacy guidance and advice and PIA, privacy policy, and data sharing agreement development for complex, multi-partner environments.

Rated Resource Qualifications/Requirements

The proposed Resource should have the following qualifications and have experience fulfilling the

following job requirements:

• Privacy legislation in Saskatchewan, in particular, The Health Information Protection Act (HIPA).
• Provisioning secondary data access as outlined in HIPA.
• The principles and standards of Ownership, Control, Access, and Possession (OCAP) and the UN Declaration on the Rights of Indigenous Peoples.
• Fair information practices and other privacy standards and best practices.
• Current trends and challenges in information privacy, e.g., artificial intelligence.
• Saskatchewan health care environment, including the roles of the various partners.

Extensive experience with

• Conducting privacy impact assessments (PIAs).
• Providing expertise and advice on privacy and access issues, requirements, etc.
• Identifying, developing, and monitoring risk mitigation plans arising from PIAs.
• Reading, interpreting, and applying legislation, including HIPA and Freedom of Information and Protection (FOIP).
• Developing and implementing privacy programs.
• Developing and implementing privacy and access policies.
• Developing and executing data sharing agreements.

Plus

• Experience working with healthcare projects would be considered an asset.
• Completion of the TCPS: CORE-2022 (Course on Research Ethics) is preferred.