Duties of Laurentian University’s Information and Privacy Coordinator

The President of Laurentian University of Sudbury (the “University”) will delegate the responsibilities assigned to the University under the Freedom of Information and Protection of Privacy Act (FIPPA) and other relevant privacy legislation to the Information and Privacy Coordinator, who will be responsible for the following:

• ensuring the University’s compliance with FIPPA, PHIPA and PIPEDA and their  regulations, the University’s policies, and any other contractual or legal obligations or best practices;
   
• coordinating and administering the University’s activities related to the applicable privacy legislation;),
   
• ensuring compliance with the University’s Policy on Freedom of Information and Protection of Privacy,
   
•  working proactively with other university departments to facilitate responses to access to information requests for both general and personal information or personal health information in accordance with the University’s Procedures for Handling Access to Information and Correction Requests,
   
• working proactively with other university departments to facilitate responses to correction requests in accordance with the University’s Procedures for Handling Access to Information and Correction Requests
   
• investigating and responding to privacy complaints and privacy breaches in accordance with the University’s Procedure for Handling Privacy Complaints and Privacy Breach Protocol,
   
• overseeing the operational responsibilities of the University’s Information and Privacy Analyst(s), and any other staff that may report to the Information and Privacy Coordinator,
   
• developing and delivering training sessions for University staff on the University’s access to information and privacy policies and procedures,
   
• exercising delegated powers and duties under FIPPA and other relevant privacy legislation,
   
• advising members of the University community on access to information and privacy matters,
   
• establishing, reviewing, and updating privacy policies, notices, guidelines, and procedures across the University on an as-needed basis for approval of the Senior Leadership Group,
   
• conducting privacy impact assessments for new programs or initiatives involving personal information, or reviewing privacy impact assessments conducted by project managers,
   
• maintaining a directory of Personal Information Banks,
   
• reporting on activities and statistics relevant to access to information and privacy to the Senior Leadership Group through the General Counsel; preparing and submitting the University’s annual report for the Office of the Information and Privacy Commissioner of Ontario, as required by FIPPA,
   
• assisting the University’s Health Information Custodians in satisfying their obligations under the Personal Health Information Protection Act, as may be required,
   
• representing the University in interactions with the Office of the Information and Privacy Commissioner of Ontario and with the Office of the Privacy Commissioner of Canada as applicable,
   
• fulfilling any assigned responsibilities detailed in the University’s privacy and accessrelated policies and procedures,
   
• monitoring and evaluating compliance with the University’s information and privacy legislative obligations and policies to report on compliance to the Senior Leadership Group,
   
• oversee breach of personal information response in accordance with the Breach Response Protocol, and,
   
• other tasks as assigned and agreed upon.