What is personal health information?
Personal Health Information is defined as information relating to an individual's physical or mental health, the provision of health care, the eligibility or payment of health care, financial information related to the provision of care and the individual's health card number. This information would include things like your name, address, gender and age in addition to your health information.
What is an Agent?
As an Agent to the CCACs, the OACCAC acts for or on behalf of the CCACs in respect of collecting, using or disclosing personal health information, for the purposes of the CCAC, and not the Agent's own purposes. For example, a CCAC may designate the OACCAC as its Agent to correct a patient record.
A CCAC may permit the OACCAC to access, collect, use, disclose, retain or dispose of personal health information on its behalf only within the limitations already imposed on the CCAC and only with the CCAC's express authorization.
As an Agent of a CCAC, the OACCAC does not make any independent decisions with respect to the handling of personal health information, but acts only in accordance with the terms of its agreement with the CCACs, and in compliance with the Personal Health Information Protection Act, 2004 (PHIPA).
What is a Health Information Network Provider (HINP)?
A Health Information Network Provider (HINP) is a person or organization that provides services to two or more Health Information Custodians where the services are provided primarily to enable the custodians to use electronic means to disclose personal health information to one another. An example would be the OACCAC providing network services to a hospital in order to share information between the hospital and a CCAC. In this case the OACCAC would be a HINP for both the hospital and the CCAC.
How does the OACCAC collect my information?
As an Agent to a CCAC, the OACCAC may collect your personal health information on behalf of a CCAC only within the limitations already imposed by the CCAC and only with the CCAC's express authorization.
As a Health Information Network Provider the OACCAC does not collect information from CCAC patients. Your CCAC will provide you with information on how they collect your information.
How does the OACCAC use my personal health information?
As an Agent to a CCAC, the OACCAC may use your personal health information on behalf of a CCAC only within the limitations already imposed by the CCAC and only with the CCAC's express authorization. For example, the OACCAC may
use your information to prepare statistical reports as authorized by the CCACs.
Statistical reports may be disclosed externally by the OACCAC as authorized by
the CCACs or as required by applicable law.
As a Health Information Network Provider, the OACCAC uses your personal and personal health information in creating or maintaining one or more electronic health records and the systems they are housed in.
View Protecting Your Privacy: Descriptions of CCAC Applications Containing Personal Health Information »
How does the OACCAC disclose my information?
As an Agent, the OACCAC may only disclose information with the authorization of a CCAC. The CCAC may disclose information without your consent for purposes permitted by law, e.g., disclosure related to risk of serious bodily harm [PHIPA S.40(1)]. In addition, the CCAC can disclose your information in situations where you have provided consent for them to do so. Only the CCAC can provide you with a summary of how your information has been disclosed.
As a Health Information Network Provider the OACCAC does not disclose personal health information.
How can I access my Personal Health information?
You have the right to access, request correction and change/withdraw consent for the personal health information contained in your health record. The OACCAC is not a Health Information Custodian and therefore cannot provide access to your personal health information or health record.
To access, request correction and change/withdraw consent for your own CCAC health record, contact your local CCAC Health Records department to learn about their access process. A written request is generally required.
Contact your local CCAC »
Who should I contact if I have a privacy complaint?
If you believe any of your privacy rights have been violated in any way, please contact the OACCAC Privacy Office. If the OACCAC Privacy Office cannot resolve your concerns, you may wish to contact the Information and Privacy Commissioner of Ontario at 416-326-3333 or 1-800-387-0073 or via their web site: http://www.ipc.on.ca
Where can I find more information about PHIPA?
You can find more information from the following links: