Rosario is counsel in Osler’s Privacy and Data Management group. Bringing over 20 years of experience working within or alongside health system stakeholders, Rosario brings a unique and strategic perspective to her clients.
Rosario’s practice is focused on health privacy law, health research, privacy and data governance, information security, risk management and data ethics. She also advises clients on cybersecurity readiness, compliance program development and audits, AI frameworks and regulatory issues.
In addition to her role as strategic advisor to firm clients, Rosario is also Chief Privacy and Legal Officer at ICES — an Ontario-based analytics and research institute that uses population data to generate meaningful insights to improve policy, health care, and health outcomes. As a member of the executive team and corporate secretary to the Board, Rosario oversees a team that includes subject-matter experts in: privacy, legal, enterprise risk management, compliance and cybersecurity.
Rosario’s experience working within the health system has allowed her to gain a deep understanding of industry trends and key priorities for stakeholders that results in practical advice for how best to navigate and address the growing privacy, legal, reputational, and ethical risks in the health care and health research sectors.
Rosario previously worked with the health law group at another national law firm and within public sector agencies advising on legal and privacy matters that intersect health and data management. Following the completion of her graduate degree, Rosario was a post-grad intern at the Harvard School of Public Health. She is also a Certified Information Privacy Professional/Canada (CIPP/C) and has a Certificate in Health Law, from Osgoode Hall Law School.
Latest Insights
-
Webinar Oct 2, 2024
Monthly Privacy Call: Emerging trends in privacy, data and AI governance: a roundtable discussion among the chiefs
Adam Kardash moderates a roundtable discussion among leading privacy, data and AI experts about emerging themes and developments in privacy,...
Read more -
Osler Update Jun 28, 2024
Canada introduces sweeping bill to mandate tech and data interoperability in healthcare
On June 6, 2024, the federal Minister of Health introduced Bill C-72 — An Act respecting the interoperability of health information technology and...
Read more -
Webinar May 29, 2024
AccessPrivacy Monthly Call: Legislative Reform in the Canadian Privacy and Data Arena
In this month’s webinar, Adam Kardash is joined by Partners and Special Counsel from Osler's Privacy and Data...
Read more -
Webinar Feb 28, 2024
AccessPrivacy Monthly Call: Exploring a Governance Model for Demonstrable Accountability: Health Privacy Call
Our inaugural AccessPrivacy health privacy call will focus on the concept of demonstrable accountability, which has become a key expectation for...
Read more
Media Mentions
-
Osler News May 5, 2023
Rosario Cartagena joins Osler’s Privacy and Data Management group as counsel
Osler welcomes Rosario Cartagena to the firm’s national Privacy and Data Management group as counsel. Rosario is a leading expert in health privacy...
Read more
Community Involvement
- Hospice Palliative Care Ontario, Board of Directors (2017 – Present)
- War Child Canada, Fundraising Committee and Volunteer (2015 – 2019)
- Deputy Editor-in-Chief, Health Law in Canada Journal (2014 – 2020)
- Adjunct Lecturer, IHPME, University of Toronto (2014-2020)
- Legal Member, Sunnybrook Hospital Research Ethics Board (2012 – 2018)
Speaking and Writing
Speaking Engagements
Monthly Privacy Call: Emerging trends in privacy, data and AI governance: a roundtable discussion among the chiefs
Read moreAccessPrivacy Monthly Call: Legislative Reform in the Canadian Privacy and Data Arena
Read moreAccessPrivacy Monthly Call: Exploring a Governance Model for Demonstrable Accountability: Health Privacy Call
Read morePublished Work
Publications
“Machine MD: Law and Ethics of Health-Related A.I. Case Study 2: The Suicide Artificial Intelligence Prediction Heuristic” (Toronto: CIFAR, 2023).
“Modernizing Ontario’s Personal Health Information Protection Act: Recommendations for a Data-Driven Health System” (April 2023)
“Essential requirements for the governance and management of data trusts, data repositories, and other collaborations” (Submitted Manuscript: 2023)
“Pivoting data and analytic capacity to support Ontario’s COVID-19 response” IJPDS (2021)
“Essential requirements for establishing and operating data trusts: practical guidance co-developed by representatives from fifteen Canadian organizations and initiatives.” International Journal of Population Data Science, 5:1:31. (2020)
“Exploring the Collection and Use of Health Data for Smart Cities Initiatives”, International Journal of Population Data Science, 5(5). (2020)
“ICES: Data, Discovery, Better Health”, International Journal of Population Data Science: Vol. 4 No. 2: IJPDS Special Issue: Data Centre Profiles. (2019)
“Building Ontario’s Next-Generation Smart Cities Through Data Governance. Part 1: Health Data Safe Haven” Compute Ontario, ORION. (2019)
Using Prescribed Entity Data for Healthcare Delivery and Public Health Management. Health Law in Canada. 40(1): 1-55. (2019)
“Health Data Protection Law in the Era of Big Data: Risks and Opportunities for Modernization.” Health Law in Canada. 40(1): 1-55. (2019)
Understanding the Relationship between Suffering and Capacity at the End-Of-Life: A Pilot Study” Law Commission of Ontario. [Award/Commissioned Paper] (2016)
“Strategic Analytics: Towards Fully Embedding Evidence in Healthcare Decision-Making” Healthcare Qtly. (2015)
“Regulation and Oversight of Independent Health Facilities” Health Law in Canada. (2014)
“Part 1 of IMGs in Canada: A Success Story” Health Law in Canada. (2014)
Previous Speaking Engagements
Moderator, Dr. Teresa Scassa, Future of AI in Canada, HDRN (2023)
Speaker, Osgoode Certificate in Privacy and Information Management, Osgoode Hall Law School (2023)
Speaker, Data Governance Frameworks, University of Toronto Lecture, IHPME (2022)
Speaker, Privacy and Demonstrable Accountability, IAPP (2022)
Speaker, HDRN Canada and Pan Canadian Research and Data Governance, ICES (2022)
Speaker, The CISO vs. CPO: How Can they Coexist? Managed Privacy Canada (2022)
Speaker, Osgoode Certificate in Privacy Law, Osgoode Hall Law School (2022)
Speaker, 2021 Legal Guide to Privacy and Information Management, Osgoode Hall Law School (2021)
Speaker, Privacy and Human Rights, University of Toronto Lecture, IHPME (2021)
Speaker, Privacy Session, EXCITE Department of Family & Community Medicine, University of Toronto (2021)
Speaker, Osgoode Certificate in Privacy Law, Osgoode Hall Law School (2021)
Speaker, Risk Management & “Helping Leaders Sleep Better at Night” Alliance for Healthier Communities (2021)
Speaker, Osgoode Certificate in Privacy Law, Osgoode Hall Law School (2020)
Speaker, Practising Privacy During the Pandemic and Beyond, LinkedIn Panel/Drawbridge (2020)
Speaker, Data Trusts: Data Access, Data Sharing and Data Governance, Compute Ontario, ICES & MaRSDD (2019)
Speaker, A2J Data & Design Symposium, Law Foundation of Ontario (2019)
Speaker, Big Data & Health: Balancing Opportunities and Risks, 6ix Speakers (2019)
Speaker, Big Data TechTalk: Opportunities, Challenges & Risks, TechinMotion (2019)
Speaker, Cybersecurity & Privacy Track, Big Data & AI (2019)
Speaker, Health Data & Analytics, U of T, HPME Research Day (2019)
Speaker, Smart Cities and a Model for a Health Data Trust, Compute Ontario
Speaker, Health Data Protection Law in the Era of Big Data, Health Law in Canada (2019)
Speaker, EMRs and the Role of Government, Public and Private Partnerships, IPDLN (2018)
Speaker, Privacy, Big Data and AI, Vector Institute (2018)
Speaker, Consent in an Era of Big Data, Joint Centre for Bioethics, University of Toronto (2018)
Co-Chair / Privacy Law Summit, Ontario Bar Association (2018)
Regulating Creation, Health Law in Canada / U of T Faculty of Law (2018)
Co-Chair / Privacy Law Summit, Ontario Bar Association (2017)
Co-Chair / Privacy and Compliance in a World of Mobile Technology, Ontario Bar Association (2016)
Physician-Assisted Dying: Legal Considerations for Health Care Facilities, HPCO (2016)
Legalizing Physician Assisted Dying – An Open Conversation, U of T, Faculty of Law (2016)
A Roundtable on the Canada Health Act: 2.0, Health Law in Canada, Canadian Medical Association (2016)
Credentials
Education
Languages
- English
- Spanish
Professional Affiliations
- Law Society of Ontario
- International Association of Privacy Professionals (IAPP)
- Ontario Bar Association (Privacy Section, served on the executive for several years)
- Association of Corporate Counsel
- Canadian Hispanic Bar Association