Regina, SK (Remote, Must be Located in SK, AB & MB) :: Senior Privacy and HIPA/FOIP Data Access Consultant; (Canadian Citizens / P.R)

Senior Privacy and HIPA/FOIP Data Access Consultant; (Canadian Citizens / P.R)

12+Months

Regina, SK (Remote, Must be Located in SK, AB & MB) 

Level of Effort: 20 Hours per week (Anticipated, actual may vary)

Eligibility: Open to Canadian Citizens, Permanent Residents, and valid Work Permit holders

Remote – Canada | Candidates must be based in or near the following locations:

1. Regina, SK
2. Saskatoon, SK
3. Moose Jaw, SK
4. Prince Albert, SK
5. Lloydminster, SK/AB
6. Medicine Hat, AB
7. Edmonton, AB
8. Calgary, AB
9. Winnipeg, MB
10. Brandon, MB

Overview
The Senior Privacy and Data Access Consultant supports the Health Research Data Platform – Saskatchewan (HRDP-SK) and eHealth Saskatchewan in enabling compliant secondary use of health data. Reporting jointly to the Chief Privacy Officer (eHealth) and the Director, HRDP-SK (University of Saskatchewan), this role leads privacy governance, policy, and operational practices that meet legislative obligations and partner expectations across a complex, multi-organization environment.

Primary Objectives
- Ensure timely, compliant provisioning of secondary data access in accordance with HIPA, FOIP, and HRDP-SK standards.
- Design, implement, and mature HRDP-SK’s privacy program, including PIA execution, policy and procedure development, and privacy training.
- Build and sustain strong partnerships with researchers, service providers, post-secondary institutions, and SCPOR partners to drive aligned, enterprise approaches to data privacy.

Key Responsibilities
- Review and adjudicate Data Access Requests against HRDP-SK standards, service levels, and legal/ethical requirements.
- Lead the HRDP-SK Privacy Impact Assessment (PIA) and develop an implementation plan with clear goals, milestones, and timelines; manage risks and mitigation plans arising from PIAs.
- Develop, refine, and maintain privacy governance artifacts (policies, procedures, standards, guidelines) in collaboration with HRDP-SK, eHealth, and MHDSA Policy & Procedure and Governance Committees.
- Create and deliver privacy training and awareness materials; maintain internal and public-facing privacy content (statements, FAQs, website).
- Establish and maintain privacy breach response guidelines; support incident management and continuous improvement.
- Embed Indigenous data governance principles, including OCAP and alignment with UNDRIP, into HRDP-SK policies, agreements, and workflows.
- Advise on and help draft/execute data sharing and access agreements; ensure alignment with the Master Health Data Sharing Agreement (MHDSA).
- Promote privacy-by-design, de-identification/anonymization practices, and consistent interpretations of legislation across partners; contribute to enterprise approaches on topics such as public health data, Indigenous identifiers, and AI.
- Represent Saskatchewan/HRDP-SK on relevant committees and working groups (e.g., MHDSA Policy & Procedure Committee, HDRN Privacy Working Group, HRDP-SK Data Quality & Standardization Committee).
- Provide regular status reports, metrics, and recommendations to HRDP-SK/SCPOR and eHealth leadership and partners.
- Perform other duties aligned to HRDP-SK priorities.

Minimum Qualifications
- Bachelor’s degree in a related field (e.g., health information management, social sciences, public administration, law, or equivalent experience).
- 5+ years of progressive experience as a privacy consultant or equivalent role in complex, multi-partner environments.
- Demonstrated experience leading PIAs, developing privacy policies and procedures, and drafting/executing data sharing agreements.

Required Knowledge and Skills
- Expert knowledge of Saskatchewan privacy legislation, particularly The Health Information Protection Act (HIPA), and the Freedom of Information and Protection of Privacy (FOIP) framework.
- Deep understanding of secondary use provisioning under HIPA and fair information principles.
- Strong grasp of OCAP principles and UNDRIP, with demonstrated application to Indigenous data stewardship.
- Proven ability to interpret and apply legislation, policy, and standards to real-world data access scenarios.
- Experience developing and implementing privacy programs, risk assessments, and mitigation strategies.
- Excellent communication, facilitation, and stakeholder management skills; adept at consensus-building across diverse partners.
- Strong writing skills for policy, agreements, training, and executive reporting.
- Awareness of current privacy trends and challenges (e.g., AI, de-identification/anonymization, cross-jurisdictional data sharing).

Assets
- Experience on healthcare or health research data projects.
- Completion of TCPS 2: CORE-2022 (Course on Research Ethics).
- Recognized privacy certifications (e.g., CIPP/C, CIPM, CIPT) considered an asset.
- Familiarity with HDRN Canada practices and health data platform governance.

Success Indicators
- Data Access Requests completed within agreed SLAs and standards.
- Approved PIA with implementation milestones delivered on time.
- Adoption of key policies, procedures, and training across partners.
- Effective risk mitigation evidenced by reduced incidents and clear, practiced breach response.
- Positive stakeholder feedback and sustained engagement across the HRDP-SK ecosystem.

Location
Saskatchewan-based role collaborating closely with HRDP-SK (University of Saskatchewan) and eHealth Saskatchewan stakeholders.