Rosario G. Cartagena

Rosario G. Cartagena

Special Counsel, Privacy and Data Management

Key Contact: Privacy and Data Management

Contact Information

tel: 416.862.6753



Bar Admission

Ontario, 2010


Osgoode Hall Law School, LL.M. (Business Law)

University of Ottawa, J.D. (cum laude)

University of Alberta, M.Sc., (Public Health Sciences)

Brandon University, B.Sc.


English, Spanish

Rosario is counsel in Osler’s Privacy and Data Management group. Bringing over 20 years of experience working within or alongside health system stakeholders, Rosario brings a unique and strategic perspective to her clients.

Rosario’s practice is focused on health privacy law, health research, privacy and data governance, information security, risk management and data ethics. She also advises clients on cybersecurity readiness, compliance program development and audits, AI frameworks and regulatory issues.

In addition to her role as strategic advisor to firm clients, Rosario is also Chief Privacy and Legal Officer at ICES – an Ontario-based analytics and research institute that uses population data to generate meaningful insights to improve policy, health care, and health outcomes. As a member of the executive team and corporate secretary to the Board, Rosario oversees a team that includes subject-matter experts in: privacy, legal, enterprise risk management, compliance and cybersecurity.

Rosario’s experience working within the health system has allowed her to gain a deep understanding of industry trends and key priorities for stakeholders that results in practical advice for how best to navigate and address the growing privacy, legal, reputational, and ethical risks in the health care and health research sectors. 

Rosario previously worked with the health law group at another national law firm and within public sector agencies advising on legal and privacy matters that intersect health and data management. Following the completion of her graduate degree, Rosario was a post-grad intern at the Harvard School of Public Health. She is also a Certified Information Privacy Professional/Canada (CIPP/C) and has a Certificate in Health Law, from Osgoode Hall Law School.

  • Hospice Palliative Care Ontario, Board of Directors (2017 - Present)
  • War Child Canada, Fundraising Committee and Volunteer (2015 - 2019)
  • Deputy Editor-in-Chief, Health Law in Canada Journal (2014 - 2020)
  • Adjunct Lecturer, IHPME, University of Toronto (2014-2020)
  • Legal Member, Sunnybrook Hospital Research Ethics Board (2012 - 2018)

  • Law Society of Ontario
  • International Association of Privacy Professionals (IAPP)
  • Ontario Bar Association (Privacy Section, served on the executive for several years)
  • Association of Corporate Counsel
  • Canadian Hispanic Bar Association


Machine MD: Law and Ethics of Health-Related A.I. Case Study 2: The Suicide Artificial Intelligence Prediction Heuristic” (Toronto: CIFAR, 2023). 

“Modernizing Ontario’s Personal Health Information Protection Act: Recommendations for a Data-Driven Health System” (April 2023)

“Essential requirements for the governance and management of data trusts, data repositories, and other collaborations” (Submitted Manuscript: 2023)

“Pivoting data and analytic capacity to support Ontario’s COVID-19 response” IJPDS (2021)

“Essential requirements for establishing and operating data trusts: practical guidance co-developed by representatives from fifteen Canadian organizations and initiatives.” International Journal of Population Data Science, 5:1:31. (2020)

“Exploring the Collection and Use of Health Data for Smart Cities Initiatives”, International Journal of Population Data Science, 5(5). (2020)

“ICES: Data, Discovery, Better Health”, International Journal of Population Data Science: Vol. 4 No. 2: IJPDS Special Issue: Data Centre Profiles. (2019)

“Building Ontario’s Next-Generation Smart Cities Through Data Governance. Part 1: Health Data Safe Haven” Compute Ontario, ORION. (2019)

Using Prescribed Entity Data for Healthcare Delivery and Public Health Management. Health Law in Canada. 40(1): 1-55. (2019)

“Health Data Protection Law in the Era of Big Data: Risks and Opportunities for Modernization.” Health Law in Canada. 40(1): 1-55. (2019)

Understanding the Relationship between Suffering and Capacity at the End-Of-Life: A Pilot Study” Law Commission of Ontario. [Award/Commissioned Paper] (2016)

“Strategic Analytics: Towards Fully Embedding Evidence in Healthcare Decision-Making” Healthcare Qtly. (2015)

“Regulation and Oversight of Independent Health Facilities” Health Law in Canada. (2014)

“Part 1 of IMGs in Canada: A Success Story” Health Law in Canada. (2014)

Previous Speaking Engagements

Moderator, Dr. Teresa Scassa, Future of AI in Canada, HDRN (2023)

Speaker, Osgoode Certificate in Privacy and Information Management, Osgoode Hall Law School (2023)

Speaker, Data Governance Frameworks, University of Toronto Lecture, IHPME (2022)

Speaker, Privacy and Demonstrable Accountability, IAPP (2022)

Speaker, HDRN Canada and Pan Canadian Research and Data Governance, ICES (2022)

Speaker, The CISO vs. CPO: How Can they Coexist? Managed Privacy Canada (2022)

Speaker, Osgoode Certificate in Privacy Law, Osgoode Hall Law School (2022)

Speaker, 2021 Legal Guide to Privacy and Information Management, Osgoode Hall Law School (2021)                              

Speaker, Privacy and Human Rights, University of Toronto Lecture, IHPME (2021)

Speaker, Privacy Session, EXCITE Department of Family & Community Medicine, University of Toronto (2021)

Speaker, Osgoode Certificate in Privacy Law, Osgoode Hall Law School (2021)

Speaker, Risk Management & “Helping Leaders Sleep Better at Night” Alliance for Healthier Communities (2021)

Speaker, Osgoode Certificate in Privacy Law, Osgoode Hall Law School (2020)

Speaker, Practising Privacy During the Pandemic and Beyond, LinkedIn Panel/Drawbridge (2020)

Speaker, Data Trusts: Data Access, Data Sharing and Data Governance, Compute Ontario, ICES & MaRSDD (2019)

Speaker, A2J Data & Design Symposium, Law Foundation of Ontario (2019)

Speaker, Big Data & Health: Balancing Opportunities and Risks, 6ix Speakers (2019)

Speaker, Big Data TechTalk: Opportunities, Challenges & Risks, TechinMotion (2019)

Speaker, Cybersecurity & Privacy Track, Big Data & AI (2019)

Speaker, Health Data & Analytics, U of T, HPME Research Day (2019)

Speaker, Smart Cities and a Model for a Health Data Trust, Compute Ontario

Speaker, Health Data Protection Law in the Era of Big Data, Health Law in Canada  (2019)

Speaker, EMRs and the Role of Government, Public and Private Partnerships, IPDLN (2018)

Speaker, Privacy, Big Data and AI, Vector Institute (2018)

Speaker, Consent in an Era of Big Data, Joint Centre for Bioethics, University of Toronto (2018)

Co-Chair / Privacy Law Summit, Ontario Bar Association  (2018)

Regulating Creation, Health Law in Canada / U of T Faculty of Law (2018)

Co-Chair / Privacy Law Summit, Ontario Bar Association  (2017)

Co-Chair / Privacy and Compliance in a World of Mobile Technology, Ontario Bar Association (2016)

Physician-Assisted Dying: Legal Considerations for Health Care Facilities, HPCO    (2016)

Legalizing Physician Assisted Dying – An Open Conversation, U of T, Faculty of Law (2016)

A Roundtable on the Canada Health Act: 2.0, Health Law in Canada, Canadian Medical Association (2016)