Corporate Privacy Officer
Region of Durham
Whitby, ON

Reporting to the Manager, Information Management, the Corporate Privacy Officer will be responsible for the development, implementation and ongoing administration of the Corporate Privacy Office within the Legislative Services Division.

The incumbent will:

  • Structure, design and manage the Privacy Program including policies, procedures, training, monitoring, auditing, evaluating and ongoing administration
  • Oversee the administration of the provisions of the Municipal Freedom of Information and Protection of Privacy Act and the Personal Health Information Protection Act (long-term care homes only) with respect to requests for information
  • Provide leadership and ongoing direction to the Privacy Analyst(s) in the response to and resolution of complex, escalated applications for information
  • Establish, review and revise policies, processes, and implement program controls governing the collection, access to and maintenance of personal information
  • Establish and implement cross-organization internal audit and assurance programs to monitor compliance with program controls and demonstrate due diligence
  • Ensure risk assessment tools remain robust and conduct privacy impact assessments
  • Develop and implement programs and training modules in a variety of media to ensure that all employees and affiliates (volunteers, elected officials) are aware of and appropriately trained to act on the Region's privacy obligations
  • Represent the Region in the event of a complaint investigation by the Office of the Information Privacy Commissioner of Ontario
  • Establish, review and revise procedures and protocols for managing a personal information breach
  • Attend at Council, Committee and senior leadership meetings as subject matter expert and program resource, anticipating information needs, providing advice and credible recommendations

The successful applicant will possess:

  • A degree in Law, Public Administration or a related discipline
  • Certified Information Privacy Professional (CIPP/C) is required
  • A minimum of five years' experience leading and undertaking policy development, privacy impact assessments, ideally in a municipal environment
  • Experience supervising staff in a unionized envionment
  • A demonstrated understanding of municipal, provincial and federal laws and regulations concerning information privacy and security, a thorough understanding of the Municipal Freedom of Information and Protection of Privacy Act, the Personal Health Information and Privacy Act, related regulations and procedures, sound knowledge of the principles of adult education, training and development, change management, risk management technologies and an understanding of information systems
  • Sound policy and technical research skills
  • Strong verbal and written communication skills with the ability to communicate complex, legal and technical information to a wide variety of audiences
  • Ability to develop and deliver work plans to achieve Corporate and Departmental objectives

Salary: $81,822 to $102,278 per annum

To learn more about this opportunity, please visit our website at www.durham.caand apply online directly to Job ID#12237 no later than October 18, 2019.

We thank all applicants; however, only those to be considered for an interview will be contacted. __

Job Types: Full-time, Permanent

Salary: $81,000.00 /year


  • leading and undertaking policy development: 5 years (Required)
  • privacy impact assessments: 5 years (Required)


  • Bachelor's Degree (Required)


  • Certified Information Privacy Professional (CIPP/C) (Required)


  • English (Required)