Administrative Monetary Penalties: Guidance for the Health Care Sector … As of January 1, 2024, the IPC has the discretion to issue administrative monetary penalties as part of its enforcement powers for violations of the Personal Health Information Protection Act (PHIPA). Download the guidance …
Frequently Asked Questions: Health Cards and Health Numbers … Our frequently asked questions on health cards and health numbers clarify who may collect, use or disclose health numbers for health care purposes, as well as the use of health cards as a proof of identity. Originally published November …
Use and Disclosure of Personal Health Information for Broader Public Health Purposes … Use and Disclosure of Personal Health Information for Broader Public Health …
Avoiding Abandoned Health Records: Guidance for Health Information Custodians Changing Practice … Avoiding Abandoned Health Records: Guidance for Health Information Custodians Changing …
Responding to a Health Privacy Breach: Guidelines for the Health Sector … This publication replaces the guidance document, What to do When Faced With a Privacy Breach: Guidelines for the Health Sector . This new, updated guide highlights the importance of having a detailed privacy breach protocol …
Administrative monetary penalties under the Personal Health Information Protection Act … The Office of the Information and Privacy Commissioner of Ontario (IPC) is committed to protecting personal health information using a flexible and balanced approach that addresses privacy violations while …
Annual Reporting of Privacy Breach Statistics to the Commissioner - Requirements for the Health Sector … Annual Reporting of Privacy Breach Statistics to the Commissioner - Requirements for the Health …
Fact Sheet: Communicating Personal Health Information by Email … This fact sheet describes the risks of using email and custodians’ obligations under the Personal Health Information Protection Act . It outlines some of the technical, physical and administrative safeguards needed to protect personal …
Circle of Care: Sharing Personal Health Information for Health-Care Purposes … This document was thoroughly reviewed and updated in August, 2015, introducing clear and easy to understand gender-neutral language. Updated: August 2015 … Circle of Care: Sharing Personal Health Information for …
Planning for Success: Privacy Impact Assessment Guide … Ontario public sector institutions must meet high standards of care and trust whenever collecting, using and disclosing personal and other sensitive information. Any public institution considering new information technologies, systems, and …
Best Practices for Protecting Individual Privacy in Conducting Survey Research … As governments and public sector organizations strive to become more efficient, accountable and customer focused, they frequently seek input from the public about their programs and services. One of the most …
Detecting and Deterring Unauthorized Access to Personal Health Information … Unauthorized access continues to be a growing problem in the health sector in Ontario. The province’s Personal Health Information Protection Act, (PHIPA), permits health information custodians (HIC) to collect, use and …
De-identification Protocols: Essential for Protecting Privacy … Information is becoming far more valuable as businesses seek to learn more about their customers and those of their competitors, and as advertisers seek to gain a competitive advantage by finding new and innovative ways to use …
IPC Practices No. 26: Safe and Secure Disposal Procedures for Municipal Institutions … Tip sheet for government insitutions on handling information. … IPC Practices No. 26: Safe and Secure Disposal Procedures for Municipal …
Privacy Diagnostic Tool (PDT) Workbook … The PDT is an instrument that uses a series of questions to give businesses a 'read' on how well they manage their customers' personal information. The PDT uses internationally recognized fair information practices as its basis. … Privacy Diagnostic Tool …
Guidelines for Protecting the Privacy and Confidentiality of Personal Information When Working Outside the Office … Provides best practices and tips to assist government organizations in developing policies that address the privacy obligations of employees who are working in locations outside the …
IPC Practices No. 22 - Routine Disclosure/Active Dissemination (RD/AD) of Government Information … Tip sheet for government organizations on information management. … IPC Practices No. 22 - Routine Disclosure/Active Dissemination (RD/AD) of Government …
IPC Practices No. 25 - You and Your Personal Information at the Ministry of Transportation … Tip sheet for government institutions on handling personal information. Revised July, 2009. … IPC Practices No. 25 - You and Your Personal Information at the Ministry of …