Privacy and Policy Lead

Primary Purpose: The Saskatchewan Centre for Patient-Oriented Research’s vision is working together for a healthier Saskatchewan through patient-oriented research (POR).  SCPOR is a group of partners that includes patients, academic institutions, government agencies, and health organizations.  Together, SCPOR advances the Learning Health System (LHS), to improve the health and well-being of patients and families and ensure healthcare services are helping people.  SCPOR also funds and leads the development and advancement of the Health Research Data Platform- Saskatchewan.  

The HRDP-SK is the first platform in Saskatchewan to integrate Saskatchewan health data from multiple health organizations and establish a streamlined process for researchers to access health data.

This position serves as the Privacy & Policy Lead for the HRDP-SK and works in close collaboration with Privacy leads from our partner organizations.

Nature of Work: Reporting to the Executive Director of SCPOR, the Privacy and Access Lead will work with the Director, Health Research Data Platform – Saskatchewan (HRDP-SK) and HRDP-SK staff to support the work of the platform. 

The Privacy & Policy Lead is responsible for developing, implementing, and evaluating processes and strategies for ensuring organizational compliance with The Health Information Protection Act (Saskatchewan), The Local Authority Freedom of Information and Protection of Privacy Act (Saskatchewan), and other applicable privacy legislation.

The Privacy & Policy Lead provides guidance and brings professional expertise to support the privacy and access functions across the organization.  They provide education and advice to the organization regarding privacy obligations, awareness, best practices, and access to information requests.

The Privacy & Policy Lead will create strong working relationships with key partners, including researchers, health service providers, post-secondary organizations, and SCPOR partners including Saskatchewan Health Authority, eHealth Saskatchewan, Health Quality Council, First Nations University of Canada, Saskatchewan Health Research Foundation, University of Saskatchewan, University of Regina, Saskatchewan Polytechnic, Saskatchewan Cancer Agency, the Federation of Sovereign Indigenous Nations, Metis Nation Saskatchewan, Saskatchewan Ministry of Health, and Saskatchewan Ministry of Advanced Education. Building and maintaining strong working relationships with all relevant current and future provincial stakeholders is essential including the Office of the Information and Privacy Commissioner (Saskatchewan)

Accountabilities:

Reporting to the SCPOR Executive Director and Director – HRDP-SK, this position has the overall responsibilities of the continued development and implementation of a framework and governance of privacy, data access and data integration for the Health Research Data Platform- Saskatchewan. This will include the development and implementation of six services:

• privacy impact assessments (PIA’s);
• centralized privacy service and consent management services;
• audit requirements;
• policy, procedures, and work standards development and implementation;
• privacy education and training;
• data stewardship and data agreements.

Key responsibilities include:

• Representing SCPOR and HRDP-SK at both the provincial and national levels in the field of privacy at forums such as the Health Research Data Network Privacy Committee.
• Participating in continuous improvement of HRDP-SK processes and data quality and standardization.
• Leading the ongoing development and implementation of the Master Health Data Sharing Agreement as directed by the Master Health Data Governance Committee and the Policy & Procedure Committee in alignment with advancing the Health Research Data Platform- SK. Includes developing new content, schedules and amendments as required
• Working in collaboration with provincial privacy leads and HRDP-SK team members, in completing a privacy impact assessment of the HRDP-SK.
• In partnership with the Policy & Procedure Committee and HRDP-SK team members, write policies and procedures to ensure HRDP-SK is in alignment with PIA. (Inclusive of stakeholder engagement and legal review as required.)
• Develop and support HRDP-SK staff, policies, procedures, projects and users to be in alignment and compliance with privacy best practices and ensure a privacy program for HRDP-SK is created and documented. Create content such as:
  • Development and delivery of privacy curriculum and training.
  • Privacy Breach Guidelines
  • Use of Indigenous Data – OCAP® Policies and Procedures
  • General privacy statements/policies/FAQs for internal use and website.
  • Privacy & Security Overview available for internal use and website. PIA on request perhaps.
• Maintain MHDSA and manage new content, schedules and amendments as required. Manage the development of new and amended content in collaboration with HRDP-SK staff and MHDSA Policy & Procedure and Governance Committees.
• Seek to build and foster relationships between partner organizations to:
  • Promote HRDP-SK.
  • Exchange knowledge, encourage and support integration with provincial workstreams as applicable.
  • Encourage collaboration and enterprise approaches on data and privacy practices and legislation
  • Pilot or parallel aligned health system projects (e.g., Learning Health System)

• Provide regular status updates to HRDP-SK/SCPOR leadership and partners.
• Other duties as assigned based on SCPOR and HRDP-SK priorities.

Education: A relevant university degree, preferably in Health Information Policy, Business, or related field. CIAPP Professional Designation - Canadian Institute of Access and Privacy Professionals (CIAPP-P) or commitment to completing the training within 6 months of hire.

Experience: A minimum of five (5) years’ relevant work experience or a combination of education and experience will be considered.  Knowledge and experience of privacy impact assessments and data sharing agreements is considered a strong asset. A strong understanding of health research and the research process would be considered a significant asset. Experience working in a diverse and inclusive environment is required.

Skills:

• Knowledge in  application and compliance requirements of health and privacy legislation in Canada including The Health Information Protection Act (HIPA, SK), The Freedom of Information and Protection of Privacy Act (FOIP, SK), The Local Authority Freedom of Information and Protection of Privacy Act (LAFOIP, SK), The Public Health Act (PHA, SK), The Medical Care Insurance Act (MCIA, SK), The Privacy Act (Canada), The Personal Information Protection and Electronic Documents Act (PIPEDA, Canada)
• Knowledge of OCAP principles
• Experience in the development, implementation and evaluation of local and provincial policies and procedures.
• Experience in development, implementation, maintenance, and enhancement of data sharing agreements that pertain to the collection, use and disclosure of personal information or personal health information.
• Principled and self-disciplined; ability to work individually and as a member of an interdisciplinary and cross-sector team.
• Willingness and ability to build collaborations with a variety of stakeholders and work cultures; upholds respect for diversity and cultural safety.
• Excellent communication skills – both written and oral; possess networking skills.

• Outstanding interpersonal skills; respect for diversity; sensitivity, and empathy; relationship builder.

• Ability to exercise professional judgment, tact, diplomacy, and confidentiality.
• High level of professionalism; the ability to interact diplomatically and professionally with a variety of individuals within SCPOR, and with SCPOR’s partners and stakeholders.
• Possess dexterity in effectively maneuvering in difficult situations with competing interests.
• Demonstrated ability to maintain attention to detail and apply critical thinking skills.
• Demonstrated dexterity in planning and setting goals, managing deadlines and multiple demands; ability to manage frequently shifting priorities.
• Demonstrated ability to logistically track and follow up on action items. Strong organizational skills and attention to follow-through.
• Demonstrated strong skills in online meeting software in platforms, such as Zoom and Microsoft Teams
• Demonstrate exceptional efficiency with Microsoft Office Software including Outlook, Word, PowerPoint, Excel, and pdf software.

This position is in-scope of the Administrative and Supervisory Personnel Association (ASPA).

Department: SaskCentrePatientOrientdRsrch
Status: Term until March 31, 2025, with the possibility of extension
Employment Group: ASPA
Full Time Equivalent (FTE): 1.0
Salary: The salary range, based on 1.0 FTE, is $83,468.00 - 139,027.00 per annum. The starting salary will be commensurate with education and experience.
Salary Family (if applicable): Specialist Professional
Salary Phase/Band: Phase 3
Posted Date: 3/15/2024
Closing Date: 4/11/2024 at 6:00 pm CST
Number of Openings: 1
Work Location: May be eligible for hybrid work under the terms of USask's Alternative Workspace Guidelines