Access and Privacy Specialist

Reporting to the Director, Risk, Privacy & Compliance, the Access & Privacy Specialist is responsible for supporting enterprise-wide compliance and operational alignment with Manitoba’s Freedom of Information and Protection of Privacy Act (FIPPA) and Personal Health Information Act (PHIA) within a Crown corporation environment. Operating within a highly regulated, publicly accountable organization, the Specialist ensures that access to information and privacy practices are consistent, defensible, citizen-focused, and aligned with statutory obligations, corporate policy, and public sector expectations for transparency and trust . The role provides advisory services, coordinates access requests, supports privacy risk management, and works collaboratively across business units to embed compliant practices into programs, services, and technology initiativ es Responsibiliti es:Responsible for coordinating, preparing, and responding to all requests, forms, and Requests for Access under FIPPA and PHIA, and acts as a main point of contact for external and internal contac ts.Serves as a first point of contact to the public and an access and privacy resource to all areas within Manitoba Public Insurance (MPI) by coordinating and monitoring the assembly and review of material relevant to formal responses to all Request for Access under FIPPA and requests for access under PHIA, includi ng:Coordinating with applicable departments for the assembly of records and required documentat ionReviewing records and documentation and determining whether the records sought are accessible under the legislation, whether any of the statutory exemptions to disclosure apply, and whether any records can be released with severi ng.Documenting the application of exemptions (as require d).Determining whether an application should be transferred to another public body and, if so, arranging the trans ferMonitoring the progress of the response process and providing a formal response within the legislated time fra mesDetermining whether an extension of time is required to respond and, if so, arranging the extens ionPreparing estimates of costs as requi redCommunicating with the applicant or affected third parties regarding the scope and nature of the inquiry, timing, and any follow-up requir ed.Receives, investigates, tracks, and responds in a timely fashion to “refusal of access” and privacy complaints lodged with the Manitoba Ombudsman under both FIPPA and PH IA.Ensures the implementation of any remedial action recommended by the Ombudsman as a result of a complai nt.Prepares quarterly and annual summary reports for senior management on access and information request volumes, metrics, and tren ds.Coordinates, assists or responds to other information requests for records received directly or by other business are as.Investigate and coordinate responses to reports and allegations of privacy breaches of personal information under FIPPA and personal health information under PHIA and make recommendations for immediate and long-term corrective measures as necessary to protect the confidentiality, integrity and security of all personal information and personal health information, as well as sensitive corporate and business informati on.Develops, maintains, and provides privacy training to employees and other members of the MPI communi ty.Coordinates privacy impact assessments (PIAs) to be conducted as required and provides advice on initial and periodic privacy risk assessments of information handling practices and conducts related ongoing compliance monitoring activiti es.Drafts policies and procedural changes governing various access and privacy issu es.Works with Information & Technology to align information handling and privacy practices with current and emerging processing and security technologi es.Works with legal counsel, management, key departments, and committees to ensure that M PI:has available, and routinely uses, customer consent and authorization forms which comply with the relevant legislat ionprovides readily accessible notices and information to the public regarding its privacy and information handling policies and practi cesWorks with MPI’s legal counsel to ensure that all contractual arrangements between MPI and third parties comply with the applicable statutory requirements regarding processes and responsibilities for ensuring and respecting privacy. As required, assists in drafting Memoranda of Understanding as part of the contractual arrangements and participates in the ongoing compliance and monitoring of these arrangemen ts.Works with Human Resources and other business units to ensure compliance with information handling and privacy practices throughout MPI, and to ensure the consistent application of sanctions for failure to comply with those practic es.Remains up-to-date on changes and amendments to applicable legislation and regulations, and on applicable court and administrative tribunal decisions having access or privacy implicatio ns.Provides advice to MPI divisions and departments regarding access to information, and protection of personal priva cy. Qualificati ons:Educat ion:Post-secondary degree in social sciences, public or business administration or other relevant discipl ine. Experi ence:Five years of related experience working with access and privacy is sues.Related education, training and experience may be consid ered. Technical Knowledge and S kills:Knowledge and understanding of FIPPA and PHIA and, to a lesser extent, the access and privacy provisions of The Mental Healt h Act.Demonstrated strong judgment, diplomacy and political acumen, specifically regarding sensitive inqu iries.Good understanding of internationally recognized principles and standards for “fair information hand ling”.Demonstrated organizational, facilitation, and presentation s kills.Knowledge and understanding of the records management provisions of The Manitoba Public Insurance Corporation Act (MPIC Act), The Drivers and Vehicles Act (DVA), and The Highway Traffic Act (HTA).General familiarity with The Archives and Recordkeeping Act, and with the Personal Information Protection and Electronic Documents Act (Ca nada).

The Specialist coordinates and responds to all access requests under FIPPA and PHIA while managing privacy complaints and investigations. They also provide advisory services, conduct privacy impact assessments, and develop policies to ensure organizational compliance with privacy legislation.

Candidates must hold a post-secondary degree in social sciences, public administration, business administration, or a related field. At least five years of related experience in access and privacy issues is required, along with strong knowledge of Manitoba privacy legislation.

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• FIPPA Compliance
• PHIA Compliance
• Privacy Risk Management
• Access to Information Requests
• Privacy Impact Assessments
• Records Management
• Policy Drafting
• Regulatory Compliance
• Data Privacy
• Stakeholder Management
• Legal Advisory
• Information Handling
• Privacy Training
• Diplomacy
• Political Acumen
• Reporting

• Legal
• Government & Public Sector
• Management & Leadership

Formation minimale

Baccalauréat

Expérience minimale

5+ ans

Postuler avant le

20 août 2026

Langue de l’offre

anglais

Heures de travail

40 heures par semaine

Niveau d’expérience

Mid-Senior level

Mode de candidature

La candidature directe est offerte