PHIPA Requirments

What are the requirements for corrections to PHI?

- Individual submit written request to HIC—HIC must respond within 30 days - HIC may refuse to correct PHI if HIC did not record information or information is a professional opinion or observation of a health care provider—HIC must inform individual of refusal and reason and the person's right to file a complaint with IPC, and can attach statement of disagreement to record.

Under what circumstances can a custodian disclose PHI?

A custodian cannot disclose PHI to a non-custodian, including to a non-custodian for whom the custodian is working, unless: i) the individual has given express consent ii) the disclosure is permitted or required by PHIPA iii) the disclosure is permitted or required by another law

What is an Agent?

Any person who is authorized by a HIC to perform services or activities on the HIC's behalf. Example - receptionist, assistant, accountant

Responsibilities of HIC's working for Non-HIC's are.....

Ensure they do not collect, use or disclose PHI unless: i) they have the individual's consent and the collection, use or disclosure is necessary for a lawful purpose ii) the collection, use or disclosure is permitted or required by PHIPA Take reasonable steps to safeguard PHI including: i) protect against theft, loss and unauthorized use or disclosure ii) protect against unauthorized copying, modification, or disposal iii) notify the individual at first reasonable opportunity if PHI is stolen, lost or accessed by unauthorized individuals. **"Do you consent to have the spa to take responsibility for your medical files" If you put that on the end of the intake while working for NON-Hics you're covered for not having to keep the files if you leave the spa.

What is circle of care?

HICs and their agents who are permitted to rely on an individual's implied consent when collecting, using or disclosing PHI to provide health care

What is a HIC?

Health Information Custodian (HIC) = an individual or organization who has custody or control of personal health information

What does PHIPA stand for?

Personal Health Information Protection Act, 2004

What is PHI?

Personal health information = identifying information about an individual (oral or recorded), including information re an individual's health or health care history

True or false - You have to make available to the public a written statement of information practices and other information specified by PHIPA?

True, obvi!

Can an individual or other Health Care Provider have access to PHI and how long does the HIC have to respond?

Yes, with verbal or written permission and the HIC must respond w/in 30 days, also we can charge a fee but if you waive the fee you have to provide an estimate