Privacy Analyst (Full Time, 9-Month Contract)

Program Overview:

Clinically driven. Digitally inspired.

Amplify Care is a not-for-profit organization (founded in 2014 as the eHealth Centre of Excellence) dedicated to helping clinicians and their teams thrive through the implementation of innovative digital health and AI solutions. We focus on technologies that truly meet clinical needs: streamlining workflows to reduce administrative burden, supporting evidence-based decision-making at the point-of-care, enhancing clinical pathways, improving interoperability between disparate information systems, and advancing data quality to support proactive care are just a few examples of the ways we create impact, always with the goal of helping clinicians focus on what matters most: the people they serve.

At Amplify Care, collaboration is at the heart of everything we do. We’ve built a supportive, inclusive workplace where ideas are welcomed, creativity is encouraged, and teamwork drives meaningful change. Recognized as a Great Place to Work for four years in a row (ranking in the top 25 organizations in our size category) and certified as a Living Wage Employer, we’re proud to be a place where purpose, innovation, and people come together.

Position Description:

The Privacy Analyst will play a key role in supporting digital health initiatives. Under the strategic direction and oversight of the Manager, Privacy and Amplify Care executive team, the Privacy Analyst will support all activities related to the development, implementation, and maintenance of health privacy principles and policies in accordance with federal and provincial laws. This role will actively participate across the organization engaging internal and external partners to conduct training, perform compliance monitoring activities and identify/escalate concerns to the Manager, Privacy.

Key Roles and Responsibilities:

• Support the completion of privacy and security assessments (including Privacy Impact Assessments) for digital health tools, EMR integrations, and emerging technologies including AI-enabled solutions, ensuring alignment with applicable legislation, industry, and organizational standards.
• Track and report on privacy risks, remediation activities, and status of privacy program activities.
• Support the implementation and monitoring of established privacy and security standards associated with the delivery of digital health technologies.
• Support compliance activities related to digital health tools used in care settings, in accordance with privacy and security standards and legislation.
• Develop and/or deliver training to various audiences on specific issues, requirements, policies and processes to ensure that the use of assets is in accordance with regional, provincial and federal privacy and security guidelines.
• Support organizational data governance activities by contributing privacy expertise to data management practices and ensuring alignment with privacy requirements.
• Support participating health care clinicians in the development/review of internal privacy processes, policies, and best practices as required.
• Serve as a single point of contact for routine questions and concerns regarding adherence to privacy, security and consent policies and standards and escalate complex issues as required.
• Participate in related regional committees and workshop groups as assigned.
• Assist with the development and revision and maintenance of privacy policies, procedures, and guidance materials.
• Monitor privacy trends in the internal and external environment and escalate relevant findings to support organizational awareness and response.
• Provide regular reports to the Manager, Privacy.
• Other duties as assigned.

Experience, Skills & Qualifications:

• Minimum 2 years of experience in a privacy-related role, preferably in a healthcare setting.
• Post-secondary degree in Health Informatics, Information Studies, Information Sciences or related field.
• Certified Information Privacy Professional/Canada (CIPP/C) or similar/complementary designation an asset.
• Demonstrated understanding of provincial and federal laws and regulations concerning information privacy and security.
• Knowledge of responsible AI principles and their privacy implications, or a willingness to develop this expertise.
• Demonstrated understanding of lifecycle data management (including collection, use, transmission, disclosure, retention of personal and confidential business information).
• Demonstrated understanding of shared solutions, regional/provincial solutions, Ontario Health Teams, and Integrated Care models.
• Familiarity with eHealth Ontario or Ontario Health provincial assets and provincial digital initiatives.
• Exposure to and understanding of privacy requirements and best practice in various healthcare environments.
• Demonstrated experience with projects that span multiple organizations an asset.
• Ability to communicate technical and legal information effectively and clearly to a wide variety of audiences.
• Strong communication skills (written and oral).
• Strong presentation skills.
• Demonstrated interpersonal and problem-solving skills.
• Strong ability to pay attention to detail.
• Ability to work as part to a team to accomplish common goals.

Feel like you don’t meet all the requirements? If you have some of the skills and experience that we’re looking for and are willing to learn the rest, we encourage you to reach out to us!

The Amplify Care team is a respectful and inclusive workplace. Upon individual request, hiring processes will be modified to remove barriers to accommodate those with disabilities. Should any applicant require accommodation through the application, interview, or selection processes, please contact our People & Culture team at people.culture@amplifycare.com for assistance.

The Amplify Care team is committed to employment equity.  We encourage applications from all qualified candidates including, 2SLGBTQIA+ identified persons, persons with disabilities, First Nations, Inuit and Métis individuals, and members of Black and other racialized communities, and individuals who speak languages other than English.

We thank all interested applicants; however, due to the volume of resumes we receive only those selected for an interview will be contacted.