Subscribe to RSS Feed
Printer friendly interface
Job Number:
Job Title:
Director, Privacy and Risk and In-house Legal Counsel
Permanent Full Time
Privacy Office
Job Category:
Patient Experience, Quality & Risk
Number Of Positions:

Southlake is building healthy communities through outstanding care, innovative partnerships, and amazing people. We deliver a wide range of healthcare services to the communities of northern York Region and southern Simcoe County. Our advanced regional programs include Cancer Care and Cardiac Care and serve a broader population across the northern GTA and into Simcoe-Muskoka.

Our team of nearly 6,000 staff, physicians, volunteers, students and Patient and Family Advisors are committed to creating an environment where the best experiences happen. As a recognition of our commitment to quality and patient safety, we have received the highest distinction of Exemplary Standing from Accreditation Canada.

Job Summary

Reporting to the Vice President, Clinical Transformation, and Patient Experience & Chief Nursing Executive, this exciting opportunity is for a person whose values align with Southlake’s strategic direction. As the In-House Counsel and Director, you will provide a full spectrum of legal services using strong conceptual thinking and decision-making skills to ensure operational needs are balanced with strategic priorities.

Primary Responsibilities

• Provide sound and ethical legal advice to the organization on matters related to:
o General corporate services, including drafting or review of corporate by-laws, policies, procedures;
o Contract law, including drafting or review of contracts for supplies and services;
o General retail and commercial matters, including property management, lease agreements, landlord/tenant issues;
o Consent, capacity, and substitute decision making;
o Employment and labour relations, including drafting and review of correspondence; contracts and agreements as required;
o Physician relations and privilege issues;
o The Board of Directors (including drafting corporate governance materials, e.g., resolutions, board policies, committee mandate, bylaws, and terms of reference);
• Oversee and ensure effective management of legal claims and external legal counsel to lower the legal costs;
• Ensure that legal costs are submitted and reimbursed from HIROC, where applicable;
• Support and deliver education to management, Board of Directors, and other Hospital stakeholders.

• Lead the corporate Integrated Risk Management (IRM) program and activities;
• Identify potential risk/opportunity areas and make recommendations on risk tolerance; and mechanisms to manage risk/opportunity;
• Advise on the impact of decisions and the best methods of handling high-risk contentious issues;
• Responds to more sensitive or controversial queries that potentially impact Hospital operations;
• Gather and analyze data/trend information, identifying possible improvement/study areas and the impacts of their implementation.
• Oversee hospital-wide risk assessments
• Build a strategic and comprehensive privacy program that defines, develops, and maintains policies and procedures that enable consistent and effective privacy practices;
• Provide general privacy/risk management advice to senior leadership, including advice on information disclosure, data or security breaches, whistleblower allegations, and internal investigations;
• Ensure regular privacy audits are competed and appropriately investigated;
• Oversee the Freedom of Information (FOI) requests and ensure all requests are aligned with legislative requirements;
• Oversee and occasionally perform privacy impact assessment (PIA);
• Oversee and maintain the ongoing privacy training;
• Maintain current knowledge of applicable privacy laws, including, but not limited to, the Public Hospitals Act, Personal Health Information Protection Act (PHIPA), Freedom of Information and Protection of Privacy Act (FIPPA), Health Care Consent Act, Substitute Decision Maker Act, and Mental Health Act.


• Completion of an LLB/JD and admission to practice law in Ontario, and in good standing with the Law Society of Ontario;
• Three (3) to five (5) years related experience in corporate and health law, required;
• Expertise in the areas of Health, Privacy, IT, Labour, Risk Management, Infrastructure, Construction, Environmental, and Public Procurement law;
• P3 experience is an asset (i.e., experience with Design-Build-Finance-Maintain hospital agreements);
• Strong drafting skills and experience negotiating various commercial agreements;
• Excellent problem-solving, sound judgment, critical thinking, and decision-making skills;
• Strong time management, planning, and organizational skills;
• Excellent communication, report-writing, and presentation skills; and
• Superior professional judgment, diplomacy, and relationship-building skills.

As a condition of employment, you are required to submit proof of COVID-19 vaccination to the Hospital’s Occupational Health and Safety department. Successful candidates will be required to submit proof of COVID-19 vaccination (two doses) from the Ontario Ministry of Health website or other authorized source directly to the Occupational Health and Safety department. In the event that you are unable to be vaccinated as a result of a ground protected under the Human Rights Code, you may submit a written explanation of the ground and any supporting documentation to determine if you are exempt from this requirement to the recruitment team. A recruitment representative may follow up with you for further information if necessary.

At Southlake, we are committed to fostering an inclusive and accessible environment. We are dedicated to building a workforce that reflects the diversity of the community in which we live and serve, including those with disabilities. Southlake is committed to providing accommodations in all parts of the hiring process. If you require an accommodation, we will work with you to meet your needs.

It is the responsibility of all Southlake employees to work in a safe manner and promote health and safety in the workplace.