Regina, SK (Remote, Must be Located in SK, AB & MB) :: Senior Privacy and HIPA/FOIP Data Access Consultant; (Canadian Citizens / P.R)

Overview

The Senior Privacy and Data Access Consultant supports the Health Research Data Platform – Saskatchewan (HRDP-SK) and eHealth Saskatchewan in enabling compliant secondary use of health data.

Reporting jointly to the Chief Privacy Officer (eHealth) and the Director, HRDP-SK (University of Saskatchewan), this role leads privacy governance, policy, and operational practices that meet legislative obligations and partner expectations across a complex, multi-organization environment.

Primary Objectives

• Ensure timely, compliant provisioning of secondary data access in accordance with HIPA, FOIP, and HRDP-SK standards.
• Design, implement, and mature HRDP-SK’s privacy program, including PIA execution, policy and procedure development, and privacy training.
• Build and sustain strong partnerships with researchers, service providers, post-secondary institutions, and SCPOR partners to drive aligned, enterprise approaches to data privacy.

Key Responsibilities

• Review and adjudicate Data Access Requests against HRDP-SK standards, service levels, and legal/ethical requirements.
• Lead the HRDP-SK Privacy Impact Assessment (PIA) and develop an implementation plan with clear goals, milestones, and timelines; manage risks and mitigation plans arising from PIAs.
• Develop, refine, and maintain privacy governance artifacts (policies, procedures, standards, guidelines) in collaboration with HRDP-SK, eHealth, and MHDSA Policy & Procedure and Governance Committees.
• Create and deliver privacy training and awareness materials; maintain internal and public-facing privacy content (statements, FAQs, website).
• Establish and maintain privacy breach response guidelines; support incident management and continuous improvement.
• Embed Indigenous data governance principles, including OCAP and alignment with UNDRIP, into HRDP-SK policies, agreements, and workflows.
• Advise on and help draft/execute data sharing and access agreements; ensure alignment with the Master Health Data Sharing Agreement (MHDSA).
• Promote privacy-by-design, de-identification/anonymization practices, and consistent interpretations of legislation across partners; contribute to enterprise approaches on topics such as public health data, Indigenous identifiers, and AI.
• Represent Saskatchewan/HRDP-SK on relevant committees and working groups (e.g., MHDSA Policy & Procedure Committee, HDRN Privacy Working Group, HRDP-SK Data Quality & Standardization Committee).
• Provide regular status reports, metrics, and recommendations to HRDP-SK/SCPOR and eHealth leadership and partners.
• Perform other duties aligned to HRDP-SK priorities.

Minimum Qualifications

• Bachelor’s degree in a related field (e.g., health information management, social sciences, public administration, law, or equivalent experience).
• 5+ years of progressive experience as a privacy consultant or equivalent role in complex, multi-partner environments.
• Demonstrated experience leading PIAs, developing privacy policies and procedures, and drafting/executing data sharing agreements.

Required Knowledge and Skills

• Expert knowledge of Saskatchewan privacy legislation, particularly The Health Information Protection Act (HIPA), and the Freedom of Information and Protection of Privacy (FOIP) framework.
• Deep understanding of secondary use provisioning under HIPA and fair information principles.
• Strong grasp of OCAP principles and UNDRIP, with demonstrated application to Indigenous data stewardship.
• Proven ability to interpret and apply legislation, policy, and standards to real-world data access scenarios.
• Experience developing and implementing privacy programs, risk assessments, and mitigation strategies.
• Excellent communication, facilitation, and stakeholder management skills; adept at consensus-building across diverse partners.
• Strong writing skills for policy, agreements, training, and executive reporting.
• Awareness of current privacy trends and challenges (e.g., AI, de-identification/anonymization, cross-jurisdictional data sharing).

Assets

• Experience on healthcare or health research data projects.
• Completion of TCPS 2: CORE-2022 (Course on Research Ethics).
• Recognized privacy certifications (e.g., CIPP/C, CIPM, CIPT) considered an asset.
• Familiarity with HDRN Canada practices and health data platform governance.

Success Indicators

• Data Access Requests completed within agreed SLAs and standards.
• Approved PIA with implementation milestones delivered on time.
• Adoption of key policies, procedures, and training across partners.
• Effective risk mitigation evidenced by reduced incidents and clear, practiced breach response.
• Positive stakeholder feedback and sustained engagement across the HRDP-SK ecosystem.

Location

Saskatchewan-based role collaborating closely with HRDP-SK (University of Saskatchewan) and eHealth Saskatchewan stakeholders.