PrivacyWorks Consulting Inc.

• Provide privacy advisory services related to Canadian and international privacy laws and frameworks • Understand, assess, and help address clients’ privacy challenges with practical, risk-based solutions. • Conduct Privacy Impact Assessments (PIAs) and privacy risk assessments for new and existing programs, technologies, and initiatives. • Support clients with the design, implementation, and maintenance of privacy management programs, governance frameworks, and operating models. • Advise on both organizational and technical aspects of privacy, including data lifecycle management (collection, use, disclosure, retention, and secure disposal of personal information). • Design and implement privacy strategies tailored to Canadian federal and provincial requirements, with consideration of global obligations and best practices. • Integrate privacy with adjacent domains such as AI governance, cybersecurity, enterprise risk management, and digital transformation to provide holistic client solutions. • Draft, review, and update Privacy Impact Assessments • Draft, review, and update privacy policies, procedures, notices, and supporting documentation. • Develop practical guidance, tools, and templates tailored to client environments and privacy maturity levels. • Support privacy-by-design and privacy-by-default principles in client initiatives, including digital health, research, and emerging technologies. • Contribute to the innovation, development, and continuous improvement of PrivacyWorks methodologies, tools, and service offerings. • Build and maintain strong, trusted relationships with clients and stakeholders through effective communication and delivery excellence. • Work collaboratively with client stakeholders, including legal, IT, security, program leads, clinicians, and senior management. • Translate complex privacy and regulatory requirements into clear, actionable recommendations for both technical and non-technical audiences. • Prepare reports, summaries, and presentations to communicate progress, findings, and recommendations. • Manage and contribute to multiple client engagements concurrently, ensuring deliverables are completed on time and to a high standard. • Track project hours, timelines, and dependencies, proactively identifying and escalating risks or issues. • Proactively support the planning and delivery of client work, ensuring consistent, high-quality outcomes. • Contribute to the continuous improvement of internal processes, tools, and best practices. • Coach, mentor, and support the development of team members by sharing knowledge and experience. • Contribute to the growth of individual and team expertise in privacy, data protection, and emerging areas. • Stay current with evolving regulatory, business, and economic trends impacting privacy. • Strengthen internal collaboration and contribute to the growth and reputation of PrivacyWorks.

• Reporting to the ATI Manager, the ATI Analyst will work directly with our clients and other members of the ATIS team to process access requests • Provide expert advice and disclosure recommendations • Develop access policies, resources and programs • Deliver training and otherwise support our clients to fulfil their legislated duties to give the public access to government records and information • Conduct thorough, line-by-line reviews of a wide variety of personal and general records, and provide detailed redaction and disclosure recommendations to our public-body clients in compliance with applicable legislation. • Identify and facilitate additional actions associated with ATI request processing such as consultations with other public bodies, businesses and third parties; fee estimates, waivers and payment; time extensions; full or partial transfers to other Public bodies; etc. • Liaise with client executives, operational and support staff to ensure responsive records are collected, harms and other disclosure considerations are identified, final recommendations are approved and responses are issued in compliance with applicable legislation. • Handle, produce and manage sensitive records and information with the utmost care and attention to confidentiality, security and compliance with corporate records management standards. • Assist with developing and delivering customized ATI training programs, policies, processes and program reviews.