Rosario G. Cartagena

Rosario is counsel in Osler’s Privacy and Data Management group. Bringing over 20 years of experience working within or alongside health system stakeholders, Rosario brings a unique and strategic perspective to her clients.

Rosario’s practice is focused on health privacy law, health research, privacy and data governance, information security, risk management and data ethics. She also advises clients on cybersecurity readiness, compliance program development and audits, AI frameworks and regulatory issues.

In addition to her role as strategic advisor to firm clients, Rosario is also Chief Privacy and Legal Officer at ICES – an Ontario-based analytics and research institute that uses population data to generate meaningful insights to improve policy, health care, and health outcomes. As a member of the executive team and corporate secretary to the Board, Rosario oversees a team that includes subject-matter experts in: privacy, legal, enterprise risk management, compliance and cybersecurity.

Rosario’s experience working within the health system has allowed her to gain a deep understanding of industry trends and key priorities for stakeholders that results in practical advice for how best to navigate and address the growing privacy, legal, reputational, and ethical risks in the health care and health research sectors. 

Rosario previously worked with the health law group at another national law firm and within public sector agencies advising on legal and privacy matters that intersect health and data management. Following the completion of her graduate degree, Rosario was a post-grad intern at the Harvard School of Public Health. She is also a Certified Information Privacy Professional/Canada (CIPP/C) and has a Certificate in Health Law, from Osgoode Hall Law School.


Latest Insights

  • Osler Update Jun 28, 2024

    Canada introduces sweeping bill to mandate tech and data interoperability in healthcare

    On June 6, 2024, the federal Minister of Health introduced Bill C-72 — An Act respecting the interoperability of health information technology and...

    Read more
    Canada introduces sweeping bill to mandate tech and data interoperability in healthcare
  • Webinar May 29, 2024

    AccessPrivacy Monthly Call: Legislative Reform in the Canadian Privacy and Data Arena

    In this month’s webinar, Adam Kardash is joined by Partners and Special Counsel from Osler's Privacy and Data...

    Read more
    AccessPrivacy Monthly Call: Legislative Reform in the Canadian Privacy and Data Arena
  • Webinar Feb 28, 2024

    AccessPrivacy Monthly Call: Exploring a Governance Model for Demonstrable Accountability: Health Privacy Call

    Our inaugural AccessPrivacy health privacy call will focus on the concept of demonstrable accountability, which has become a key expectation for...

    Read more
    AccessPrivacy Monthly Call: Exploring a Governance Model for Demonstrable Accountability: Health Privacy Call
  • Webinar Jun 28, 2023

    AccessPrivacy Monthly Call: De-identification and anonymization developments: The OPC’s investigation into PHAC’s use of mobility data

    De-identification and Anonymization Developments: Reflections on the OPC's investigation into the use of de-identified mobility data during the...

    Read more
    AccessPrivacy Monthly Call: De-identification and anonymization developments: The OPC’s investigation into PHAC’s use of mobility data
View all Insights

Media Mentions

  • Osler News May 5, 2023

    Rosario Cartagena joins Osler’s Privacy and Data Management group as counsel

    Osler welcomes Rosario Cartagena to the firm’s national Privacy and Data Management group as counsel. Rosario is a leading expert in health privacy...

    Read more

Community Involvement

  • Hospice Palliative Care Ontario, Board of Directors (2017 – Present)
  • War Child Canada, Fundraising Committee and Volunteer (2015 – 2019)
  • Deputy Editor-in-Chief, Health Law in Canada Journal (2014 – 2020)
  • Adjunct Lecturer, IHPME, University of Toronto (2014-2020)
  • Legal Member, Sunnybrook Hospital Research Ethics Board (2012 – 2018)

Speaking and Writing

Speaking Engagements

speaker 29/5/2024
AccessPrivacy Monthly Call: Legislative Reform in the Canadian Privacy and Data Arena
Read more
speaker 28/2/2024
AccessPrivacy Monthly Call: Exploring a Governance Model for Demonstrable Accountability: Health Privacy Call
Read more
speaker 17/11/2023
Inaugural Health Privacy Symposium: Respectfully Unlocking Data to Transform our Health Care System
Read more
speaker 28/6/2023
AccessPrivacy Monthly Call: De-identification and anonymization developments: The OPC’s investigation into PHAC’s use of mobility data
Read more
speaker 08/6/2023
An AI Primer for In-House Counsel
Read more

Published Work

Publications

Machine MD: Law and Ethics of Health-Related A.I. Case Study 2: The Suicide Artificial Intelligence Prediction Heuristic” (Toronto: CIFAR, 2023).

“Modernizing Ontario’s Personal Health Information Protection Act: Recommendations for a Data-Driven Health System” (April 2023)

“Essential requirements for the governance and management of data trusts, data repositories, and other collaborations” (Submitted Manuscript: 2023)

“Pivoting data and analytic capacity to support Ontario’s COVID-19 response” IJPDS (2021)

“Essential requirements for establishing and operating data trusts: practical guidance co-developed by representatives from fifteen Canadian organizations and initiatives.” International Journal of Population Data Science, 5:1:31. (2020)

“Exploring the Collection and Use of Health Data for Smart Cities Initiatives”, International Journal of Population Data Science, 5(5). (2020)

“ICES: Data, Discovery, Better Health”, International Journal of Population Data Science: Vol. 4 No. 2: IJPDS Special Issue: Data Centre Profiles. (2019)

“Building Ontario’s Next-Generation Smart Cities Through Data Governance. Part 1: Health Data Safe Haven” Compute Ontario, ORION. (2019)

Using Prescribed Entity Data for Healthcare Delivery and Public Health Management. Health Law in Canada. 40(1): 1-55. (2019)

“Health Data Protection Law in the Era of Big Data: Risks and Opportunities for Modernization.” Health Law in Canada. 40(1): 1-55. (2019)

Understanding the Relationship between Suffering and Capacity at the End-Of-Life: A Pilot Study” Law Commission of Ontario. [Award/Commissioned Paper] (2016)

“Strategic Analytics: Towards Fully Embedding Evidence in Healthcare Decision-Making” Healthcare Qtly. (2015)

“Regulation and Oversight of Independent Health Facilities” Health Law in Canada. (2014)

“Part 1 of IMGs in Canada: A Success Story” Health Law in Canada. (2014)
Previous Speaking Engagements

Moderator, Dr. Teresa Scassa, Future of AI in Canada, HDRN (2023)

Speaker, Osgoode Certificate in Privacy and Information Management, Osgoode Hall Law School (2023)

Speaker, Data Governance Frameworks, University of Toronto Lecture, IHPME (2022)

Speaker, Privacy and Demonstrable Accountability, IAPP (2022)

Speaker, HDRN Canada and Pan Canadian Research and Data Governance, ICES (2022)

Speaker, The CISO vs. CPO: How Can they Coexist? Managed Privacy Canada (2022)

Speaker, Osgoode Certificate in Privacy Law, Osgoode Hall Law School (2022)

Speaker, 2021 Legal Guide to Privacy and Information Management, Osgoode Hall Law School (2021)

Speaker, Privacy and Human Rights, University of Toronto Lecture, IHPME (2021)

Speaker, Privacy Session, EXCITE Department of Family & Community Medicine, University of Toronto (2021)

Speaker, Osgoode Certificate in Privacy Law, Osgoode Hall Law School (2021)

Speaker, Risk Management & “Helping Leaders Sleep Better at Night” Alliance for Healthier Communities (2021)

Speaker, Osgoode Certificate in Privacy Law, Osgoode Hall Law School (2020)

Speaker, Practising Privacy During the Pandemic and Beyond, LinkedIn Panel/Drawbridge (2020)

Speaker, Data Trusts: Data Access, Data Sharing and Data Governance, Compute Ontario, ICES & MaRSDD (2019)

Speaker, A2J Data & Design Symposium, Law Foundation of Ontario (2019)

Speaker, Big Data & Health: Balancing Opportunities and Risks, 6ix Speakers (2019)

Speaker, Big Data TechTalk: Opportunities, Challenges & Risks, TechinMotion (2019)

Speaker, Cybersecurity & Privacy Track, Big Data & AI (2019)

Speaker, Health Data & Analytics, U of T, HPME Research Day (2019)

Speaker, Smart Cities and a Model for a Health Data Trust, Compute Ontario

Speaker, Health Data Protection Law in the Era of Big Data, Health Law in Canada  (2019)

Speaker, EMRs and the Role of Government, Public and Private Partnerships, IPDLN (2018)

Speaker, Privacy, Big Data and AI, Vector Institute (2018)

Speaker, Consent in an Era of Big Data, Joint Centre for Bioethics, University of Toronto (2018)

Co-Chair / Privacy Law Summit, Ontario Bar Association  (2018)

Regulating Creation, Health Law in Canada / U of T Faculty of Law (2018)

Co-Chair / Privacy Law Summit, Ontario Bar Association  (2017)

Co-Chair / Privacy and Compliance in a World of Mobile Technology, Ontario Bar Association (2016)

Physician-Assisted Dying: Legal Considerations for Health Care Facilities, HPCO    (2016)

Legalizing Physician Assisted Dying – An Open Conversation, U of T, Faculty of Law (2016)

A Roundtable on the Canada Health Act: 2.0, Health Law in Canada, Canadian Medical Association (2016)


Credentials

Education

Osgoode Hall Law School, LL.M. (Business Law) University of Ottawa, J.D. (cum laude) University of Alberta, M.Sc., (Public Health Sciences) Brandon University, B.Sc.

Languages

  • English
  • Spanish

Professional Affiliations

  • Law Society of Ontario
  • International Association of Privacy Professionals (IAPP)
  • Ontario Bar Association (Privacy Section, served on the executive for several years)
  • Association of Corporate Counsel
  • Canadian Hispanic Bar Association