INQ Consulting

Managing Principal and Co-Founder

Owner and operator of a legal and management consulting firm specializing in the development and delivery of privacy consulting services to public and private sector clients.

Principal Consultant

INQ Law

Partner

University of Toronto

Co-teaching the Privacy and Data Governance course in the Global Professional LLM program.

Adjunct Professor

University of Windsor Faculty of Law

Instructor for the inaugural Privacy Law in Canada course.

Sessional Instructor

Cancer Care Ontario

Directed Privacy and Access Office for multi-billion dollar Provincial agency, tasked with ensuring privacy of personal health information of Ontarians under its prescribed statuses under the Personal Health Information Protection Act, 2004, and compliance with the Freedom of Information and Protection of Privacy Act. Accomplishments include:

Led drafting and ensured adherence to Data Sharing Agreements, resulting in increased compliance with terms by Informatics department and streamlining of process.

Managed relationship with external stakeholders with respect to privacy and access, including IPC, Ministry of Health and Long-Term Care, ICES, CIHI, POGO, hospitals, and other data partners.

Strengthened governance and accountability by establishing a Privacy Risk and Compliance managerial function, establishing privacy governance bodies across the organisation, and developing performance reporting for both privacy services as well as privacy office performance.

Director, Privacy and Access

Chief Privacy Officer (Acting)

Retirement Homes Regulatory Authority

Chief Of Staff

Courtyard Group

Led the operations of the Access to Care (ATC) Portfolio Office, which involved directing the work of other Portfolio Office resources, providing strategic direction to ATC Director, creating and coordinating the creation briefings and presentations, liaising with key stakeholders,  risk management, and ensuring visibility into procurement across the ATC Portfolio.  Primary focus: ER/ALC Information Strategy.  
Co-facilitated a strategic retreat with the Executive Directors of the 14 CCACs to set the foundation for a new eHealth strategy for the OACCAC
Managed a capacity review of the HSAP Division of the Ministry of Health and Long-Term Care to assess the capacity of the Division to deliver on key priorities of the government, the Minister, the Deputy Minister and the HSAP Assistant Deputy Minister over three years – resulted in the delivery of a roadmap of priority objectives for the Assistant Deputy Minister
Managed the identification of future needs and assessment of gaps in services/programs for the Ontario Regional Cancer Programs - final report outlined actionable recommendations to advance the progress of the regional cancer programs across Ontario 
Led the development of an organizational review of SIMS at UHN, presenting practical advice to senior executives 
Selected to work directly with Managing Partner to develop corporate strategy for an international organization with over $30M in revenue 
Conceived and implemented a contract management process and delegation policy for an international consulting
Helped manage risks of a growth organization through the development of a Privacy Policy.  Acted as Deputy Privacy Officer, supporting Canada, the US and the UK
Led the annual operational planning process of an international company, managing all senior partners in the creation of their client account plans, budgets, and targets
Coached and mentored junior analysts on leadership development and solutions to address specific client engagements

Consultant

-	Contributed to the research and writing on an edited volume on health and human rights
-	Collaborated with a team of lawyers in the development of a skills building workshop for the 2006 International AIDS Conference, which was well-received by participants
-	Annotated recent case law and developed materials for the national and International approaches to Reproductive and Sexual Health Law class at the University of Toronto Faculty of Law, which continues to be used

Reproductive and Sexual Health Law Fellow

Heenan Blaikie LLP

	Conducted research regarding privacy issues, actively participated in corporate transaction closings, summarized contracts, reviewed scripts and films for copyright and trademark infringements, participated in due diligence processes, reviewed corporate by-laws and minute books, and translated contracts from French to English
	Investigated human rights issues in labour and employment law; authored papers regarding the duty to accommodate, globalization and international trade agreements, summarized case law for newsletters, drafted termination letters and researched memos analyzing legal issues such as insubordination, fraud, strikes and lockouts, pension benefits and occupational health and safety
	Wrote memoranda on topics including the enforcement of oral contracts, quantifying damages for loss of vision, and various issues under the Employment Standards Act
	Drafted settlement letters, assignments of copyright, and reviewed shareholder agreements and leases

Articling Student

CTV News

Played an integral role in a major transaction by managing the acquisition of documents, preparing the data room, while supervising the performance of, and contributing to, the due diligence process
Researched memoranda including issues regarding the scope of PIPEDA

Summer Student

I make privacy program management simple

Samara is a results-oriented strategic privacy leader, lawyer and consultant, who leverages operational privacy leadership experience into practical strategies for program and project success. Samara is the founder of Drawbridge Consulting.

For Drawbridge, privacy is our business. We believe that “privacy” means individual control over decisions made about data, not complete secrecy. We ask the right questions. 

We understand the importance of good governance and criteria-based decision-making about personal information. We know that strong practical organizational privacy practices reduce risk. We enable access to data using privacy best practices for both private and public sector clients, from IT implementations that help your company’s efficiency to research and innovation technologies that improve health outcomes. 

Samara can be contacted at samarastarkman@drawbridgeconsulting.com
Http://www.drawbridgeconsulting.com

Samara Starkman

Info-Tech Research Group

AI Instructor

Standards Council of Canada (SCC)

Volunteer Member - contributing to the ISO/IEC JTC 1/SC 27 – Information security, cybersecurity and privacy protection Canadian Standard

ISO/IEC JTC 1/SC 27 – Information security, cybersecurity and privacy protection

Designing Privacy

Strategic Digital Leader, Privacy Advisor, Specialist , Educator & Founder of Designing Privacy,

- Certificate Lead (as of May 1, 2019), co-author and instructor for the "Privacy Management in the Digital Enterprise" Certificate  Program with University of Toronto, School of Continuing Education (https://learn.utoronto.ca/programs-courses/certificates/privacy-management-digital-enterprise)
- co-author "IT Risk Management and Cybersecurity" & co-Instructor 
- Providing industry and subject mater expertise to develop and teach content for the Enterprise IT Risk Management course part of the U of T SMEIT certificate.
*Featured Instructor in 2018 (https://www.linkedin.com/feed/update/urn:li:activity:6419975061146607616/)
    -  http://learn.utoronto.ca/courses-programs/business-professionals/certificates/strategic-management-of-enterprise-it
    - Currently lecturer for the School of Continuous Studies: SCS_3373  IT Risk Management and Cybersecurity  and SCS_3468 Privacy Foundations
     * http://learn.utoronto.ca/interactive-course-search#/profile/3373
     * https://learn.utoronto.ca/interactive-course-search#/profile/3468
https://learn.utoronto.ca/courses-programs/business-professionals/certificates/cyber-security-management
https://learn.utoronto.ca/courses-programs/business-professionals/certificates/strategic-management-of-enterprise-it)

Lecturer and Advisor, CIPM, CPIT, PMP, CRISC, CISM

IAPP - International Association of Privacy Professionals

Certified Privacy Professional

Managed Privacy Canada (MPC)

- Co-Founder Managed Privacy Canada; Global privacy & data protection compliance expert
- Academic Programs Lecturer and Advisor
- CDPSE (ISACA Data Privacy Solutions Engineer) -  certification number: 2000363
- Certified professional in Privacy, IT Risk and Controls, Information Security Management, Project Management (PMP, CISM, CIPT, CRISC, CIPM, CPDSE)
- Highly skilled in working with the C Level Compliance suite, formulating and driving strategy and execution 
- Using NIST, ISO and other standards and/or frameworks - ability to create a risk based program of scale, matching any size organization's corporate objectives, capabilities and risk appetite
- Worked with Fortune 500 and 1000 companies with Laws mapping to the Nymity Privacy Framework for GDPR, HIPAA, FERPA, GLBA, GAPP (SOC2), NIST, ISO 27701, PIPEDA, CASL, PHIPA, BCRs etc.
- IT professional with an Audit and Compliance background
- Author of University level Courses for mature learners
- Academic Programs Advisor with University of Toronto, School of Continuous Studies

Co-Founder

ISACA Toronto

Program Lead - Privacy Mentoring ISACA Toronto Chapter at ISACA Toronto

Program Lead - Privacy Mentoring ISACA Toronto Chapter (Volunteer role)

KnowledgeFlow Cybersafety Education

Supporting the community through anti-bullying, anti-cyber bullying, anti-harassment and cyber safety programs and knowledge delivered to school boards, parents, children and educators.

Educate, Innovate, Empower

Vice President, Education

Canadian Chamber of Commerce (Canada)

Participation in important discussions related to Bill C-11, Bill C-64, Digital Economy and impact on Canadian SMBs, interactions with the OECD - Organization for Economic Co-operation and Development

Managed Privacy Canada - Digital Economy Committee Member  with the  Canadian Chamber of Commerce

TrustArc

Privacy Accountability Solutions - Lead Implementation Advisor, CIPM,CIPT,CRISC,CISM,PMP

Amalia is a passionate leader in AI, IT Risk and Information Governance, and Digital Risk Management. For the past 30 years her mission was educate businesses and their staff on responsible adoption of frontier technologies that align business goals with corporate reputation and resilience.  

Amalia has over 20 year experience in building privacy management and compliance programs with Chief Privacy and Compliance Officers, General Counsel  and CISOs  in the health/Pharma, banking, telecom, FinTech industries and Tech. /Cloud companies, retail, advertising/marketing, aerospace and public sector around the world, in alignment with internal GRC and CyberSecurity efforts.

As a strategic digital leader, Amalia has co-authored The Digital Leader series: from The Digital Savvy Leader to The Digital Leader with Visible Impact - available through www.decodeseries.com

Amalia has authored/ co-authored and is currently teaching business courses at University of Toronto in the areas of IT Risk Management, Cybersecurity Risk Governance and Management and Privacy.

Amalia served on the Canadian IAPP Advisory Board, PMI (as Director on the Board of Directors of the Southern Ontario Chapter - SOC, now Toronto Chapter),  and as an Advisor to the ISACA Toronto Chapter where she is actively managing a Mentoring program (as a volunteer) meant to help young privacy professional enter the profession.

■ Strategic enabler of good governance and best practices for frontier tech

■ Strategic enterprise training and awareness for privacy and security 

■ Expert practitioner in Privacy by Design and Privacy by Default

■ Author, conference speaker and collaborator of white papers addressing privacy issues 

■ Information Management, Privacy and Risk assessment
• privacy and compliance governance review & maturity assessment
• privacy impact assessment (PIA); threat and risk assessment (TRA)
• Breach/Incident management

■ Collaborator- SME  on Strategic IT Management Audit and Assurance guidance, CMMI AND SOC2/GAPP assurance for privacy programs (ISACA)

taplio

The Battle

Samara Starkman

Amalia Barthel, CIPM, CIPT, CRISC, CISM, PMP, CDPSE

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?