Review of the Smart Systems for Health Agency (SSHA): An Electronic Goods and Services Provider to Health Information Custodians under the Personal Health Information Protection Act, 2004

This report summarizes the findings of the IPC after reviewing the administrative, technical and physical safeguards, practices and procedures that have been put in place by SSHA to protect both the privacy of individuals in relation to whose personal health information it provides services and confidentiality of such information and that permit compliance with PHIPA by custodians that rely on the services supplied by SSHA and permit SSHA to comply with section 6 of the Regulation.

PHIPA
10(4)
Regulation 329/04 s. 6.1
Regulation 329/04 s. 6