Privacy Consultant

Privacy Consultant

Location: Regina, Saskatchewan, Canada

Canada – Remote, Hybrid, or On-site Must be able to work on-site, remotely, or hybrid, as required. Work Schedule: Monday–Friday, 8:00 AM–5:00 PM Saskatchewan time

Expected Hours: Approximately 20 hours/week on average; actual hours may vary based on operational needs

The Privacy Consultant will lead and support privacy activities for HRDP-SK, including privacy guidance, Privacy Impact Assessments (PIAs), privacy policy and procedure development, data-sharing agreements, privacy training, risk mitigation, and data-access reviews. The consultant will work closely with eHealth Saskatchewan, HRDP-SK, researchers, healthcare organizations, universities, Indigenous organizations, and other partners to ensure health research data is accessed, shared, and managed in accordance with Saskatchewan privacy legislation and applicable privacy best practices.

Key Responsibilities

• Review Data Access Requests according to HRDP-SK standards and timelines.
• Complete the HRDP-SK Privacy Impact Assessment (PIA) and Implementation Plan.
• Develop and update privacy policies and procedures.
• Refine and manage the HRDP-SK privacy program.
• Develop and deliver privacy training and educational materials.
• Develop Privacy Breach Guidelines.
• Develop Indigenous Data policies and procedures using OCAP® – Ownership, Control, Access and Possession principles.
• Develop privacy statements, policies, and FAQs.
• Develop and update privacy-related content, schedules, and amendments.
• Support development and management of the Master Health Data Sharing Agreement (MHDSA).
• Support privacy and data initiatives involving public health, Indigenous identifiers, anonymization, and related legislation.
• Identify and develop risk-mitigation plans arising from PIAs.
• Provide privacy and access guidance and advice.
• Participate in privacy, policy, data quality, and governance committees.
• Promote collaboration and enterprise approaches to privacy and data practices.
• Provide regular status updates to HRDP-SK/SCPOR and eHealth leadership and partners.
• Support other HRDP-SK priorities as assigned.

Required Qualifications

• Bachelor's degree in a related field such as Health Information, Social Science, Public Administration, or equivalent related discipline.
• Minimum 5 years of proven experience working as a Privacy Consultant.
• Minimum 5 years of experience providing:
  • Privacy guidance and advice
  • Privacy Impact Assessments (PIAs)
  • Privacy policy development
  • Data-sharing agreement development
• Experience must be demonstrated in complex, multi-partner environments.
• Resource must be located in Canada and permitted to work in Canada.
• Ability to work remotely, on-site, or hybrid as required.
• Ability to work during 8:00 AM–5:00 PM Saskatchewan time, Monday–Friday.

Preferred Qualifications

• Expert knowledge of Saskatchewan privacy legislation, particularly HIPA.
• Knowledge of secondary data access under HIPA.
• Knowledge of OCAP® and the UN Declaration on the Rights of Indigenous Peoples.
• Knowledge of fair information practices and privacy standards/best practices.
• Knowledge of current privacy trends and challenges, including AI.
• Knowledge of the Saskatchewan healthcare environment.
• Experience developing PIA risk-mitigation plans.
• Experience interpreting and applying HIPA and FOIP.
• Experience developing and implementing privacy programs.
• Experience developing privacy and access policies.
• Experience developing and executing data-sharing agreements.
• Healthcare project experience.
• TCPS: CORE-2022 research ethics training is preferred.

Deliverables

Key deliverables include:

• Privacy policy and procedure documents
• Status reports
• Privacy training plans and delivery
• HRDP-SK privacy content and schedules
• Committee participation
• Data-sharing/privacy documentation
• Other deliverables identified during the engagement.