Dr. Jeff Curtis is the Chief Privacy Officer for Sunnybrook Health Sciences Centre, one of Canada’s preeminent acute care, research and teaching hospitals located in Toronto.
Jeff is a Director in the Hospital’s Information Services Group, responsible for information privacy assurance, freedom of information compliance, IT governance and risk management, and corporate strategic planning activities. Jeff was also seconded as the Privacy and Security Officer for the Hospital Diagnostic Imaging Repository Services (HDIRS) in Ontario, a diagnostic imaging repository for 35 hospitals across four local health regions.
Jeff was the Privacy and Security Lead for eHealth Ontario’s Diagnostic Imaging Common Services project, was a member of eHealth’s Identity, Access and Privacy Advisory Panel and has consulted to Canada Health Infoway on its Consent Management Advisory Panel and on its recent Blueprint Refresh Committee. Jeff is currently a member of eHealth Ontario’s Connecting Ontario privacy Committee.
Jeff has been a member of the Advisory Panel and a guest lecturer for the Osgoode Hall Law Society’s Certificate in Health Law, and regularly presents in public forums on IT governance, information technology risk, and the privacy and security implications for health care providers and patients. Jeff is currently a member of the Steering Committee to establish the Health Sector Critical Infrastructure and Cyber Security Network in conjunction with the Public Health Agency of Canada’s Office of Emergency Response Services. Jeff is currently Vice Chair for the Canadian Mirror Committee for development of the proposed ISO 23485 standard for “Consumer protection: privacy by design for consumer goods and services”.
Jeff has worked in the information technology sector for the past 25 years and is a Certified Information Systems Security Professional (CISSP), is Certified in the Governance of Enterprise IT (CGEIT) and is Certified in Risk and Information Systems Control (CRISC). In 2013 Jeff was recognized as a “Privacy by Design Ambassador” by the Information and Privacy Commissioner of Ontario.
Dr. Curtis has an undergraduate degree in Economics and an MBA from the University of Toronto, a MSc. in Business Management Research and a DBA from the University of Reading, U.K. His research focus is on decision-making under uncertainty applied to information privacy and security control design and selection.