Search

Displaying 81 - 92 of 92

Part X of CYFSA: What should I do if there is a privacy breach?

Part X of CYFSA: What should I do if there is a privacy breach? … A privacy breach happens when personal information is stolen or lost — or is collected, used or disclosed without authority. If a privacy breach occurs, immediately notify the relevant staff in your organization, identify the scope …

CYFSA FAQ

- Published on May 14, 2019

What do I need to tell the public about my organization’s information practices?

What do I need to tell the public about my organization’s information practices? … All service providers must have a publicly-available written statement about their information practices. This could be included on your website or on posters or brochures in your workplace. Your public statement …

CYFSA FAQ

- Published on May 14, 2019

I received a correction request — how should I respond?

I received a correction request — how should I respond? … Individuals can request correction of records they’ve received from service providers. Service providers must respond to correction requests within 30 calendar days and cannot charge fees. In limited cases, you may extend the deadline for a …

CYFSA FAQ

- Published on May 14, 2019

I received an access request — how should I respond?

I received an access request — how should I respond? … Child and family service providers must respond to access requests within 30 calendar days   and cannot charge fees. In limited cases, you may extend the deadline for a full response by up to 90 days. If you plan to extend the deadline, you …

CYFSA FAQ

- Published on May 14, 2019

What rights do individuals have to access their records?

What rights do individuals have to access their records? … All individuals, regardless of age, have a right to access records of their personal information from child and family service providers that relate to services they received under the CYFSA. There are a few exceptions to the right of …

CYFSA FAQ

- Published on May 14, 2019

Who can make decisions about personal information on behalf of individuals?

Who can make decisions about personal information on behalf of individuals? … Substitute decision-makers can consent on behalf of an individual to the collection, use or disclosure of the individual’s personal information. They can also give instructions and make requests, including access …

CYFSA FAQ

- Published on May 14, 2019

How do I get consent?

How do I get consent? … Child and family service providers must get consent before collecting, using or disclosing personal information — except in certain cases permitted by the act. Consent to collect, use or disclose personal information must: be given by the individual — or their substitute …

CYFSA FAQ

- Published on May 14, 2019

When can I collect, use and disclose personal information?

When can I collect, use and disclose personal information? … As a service provider, you must have an individual’s consent to collect, use or disclose personal information — except in certain cases permitted by the act. Even when you have consent, there are limits on when and how much personal …

CYFSA FAQ

- Published on May 14, 2019

What kinds of records are covered by Part X?

What kinds of records are covered by Part X? … Part X applies to personal information held by child and family service providers. If a record contains no information about an identifiable individual, Part X does not apply. The personal information must relate to a service provided or funded under …

CYFSA FAQ

- Published on May 14, 2019