Your privacy is important to us!
We are subject to the requirements of the Personal Health Information Protection Act, 2004 (PHIPA), which mandates the protection of the privacy of your personal health information.
We are committed to the principles set out in this legislation, which requires that we safeguard and protect your information. As part of our commitment, we believe that our patients should know what personal health information we collect, how we use it, how we protect it, and how to contact us.
Concerns regarding the collection of personal information are overseen by:
Ada Agamah, Privacy Officer and Manager Health Records
613-745-8124 ext. 5952
toll-free 1.866.902.5446 x 5952
What is personal health information?
Personal Health Information includes information about your health status, health history, health card number, eligibility for health-care services, and care needs that includes identifying information about you, such as your name.
Your Privacy Rights
You have the right to know how we collect your information
We collect, use and share personal and health information with other health-care providers involved in your care, for the provision of in-home health and support services, in-school support services and to facilitate placement in a long-term care home.
These activities will only take place with your consent. In some cases, we rely on your implied consent.
Implied consent means that when you seek health care from us, we assume that we have your permission to collect, use and share your personal health information with the other health-care providers that will be involved in your care. To provide you with these services, we share information with:
- our contracted service providers that provide health care, equipment and supplies;
- other health partners that assist in providing health care (such as hospitals or long-term care homes, community support services agencies, or hospices); and
- our authorized staff.
In addition, we may use your information in order to:
- monitor quality of services that you are receiving;
- educate our staff; and
- plan and evaluate services.
As our patient, you have the right to restrict or to withdraw this permission at any time by contacting your Care Coordinator.
Your personal health information is also made available to the ConnectingOntario Electronic Health Record (EHR) program administered by eHealth Ontario. Participating health care organizations share your health information for the purpose of providing you with health care and treatment, or to reduce a significant risk of serious bodily harm. All health care organizations involved with ConnectingOntario handle your personal health information in accordance with Ontario's health privacy law (Personal Health Information Protection Act, 2004), as well as other applicable laws, the ConnectingOntario security policy and electronic health record privacy policies. Every patient has the right to contact eHealth Ontario or any participating health care organization for any privacy and security questions, complaints or requests, or for any of the following privacy-related reasons:
- Consent and blocking a record
- Viewing or obtaining a copy of your personal health information
- Correcting personal health information
- Questions or complaints about ConnectingOntario's practices
EHealth Ontario Contact Information:
eHealth Ontario, privacy office 777
Bay Street, Suite 701, Toronto, Ontario
Furthermore, in order to evaluate, plan and improve the home and community health services, processes, tools and organizations that provide care to you, your personal health information will be shared with a number of provincially prescribed organizations, as follows:
- With the Ontario Ministry of Health and Long Term Care:
- Home care service delivery information via the Home Care Database;
- Anonymized long term care home placement application information via the Client Profile (CPRO) database;
- Portions of contact assessment and home care assessment information via the Integrated Assessment Repository;
- For more detailed information please see the Ontario Health Planning Data Guide
- Summarized home care service and placement information with the federal government's Canadian Institute for Health Information (CIHI),
- Anonymized contact and home care assessment information with the Canadian arm of the InterRAi research consortium; and
- Anonymized home care services delivery information with Cancer Care Ontario for service wait times evaluation.
We share aggregate data and anonymized/de-identified data wherever possible and use data sharing agreements that require all of our partners keep your privacy a priority. If you wish more information regarding our sharing practices, please contact our Privacy Officer or your Care Coordinator.
You have the right to access your information
You have the right to access the personal health information contained in your record, and to have this information corrected or amended. You also have the right to change or remove your consent. To do so, please contact our Privacy Officer.
You have the right to voice your concerns
If you believe any of your privacy rights have been violated in any way, please contact our Privacy Officer.
If our Privacy Officer has not resolved your concerns to your satisfaction, you have a right to file a complaint with the Information and Privacy Commissioner/Ontario (IPC).
The IPC may be reached by:
Phone: 416-326-3333 or 1-800-387-0073
Information and Privacy Commissioner/Ontario
2 Bloor Street East, Suite 1400
Toronto, Ontario M4W 1A8
Champlain CCAC adheres to the 10 internationally accepted privacy principles that guide us in safeguarding personal health information.
Champlain CCAC has assigned an individual to serve as Privacy Officer and has privacy policies and procedures in place.
- Identifying Purposes
Champlain CCAC ensures that individuals know the purpose for which personal information is required prior to collection, use, or disclosure of the information.
Consent is sought and obtained for the collection, use, or disclosure of any personal health information as required under legislation.
- Limiting Collection
The collection of personal health information shall be limited to that which is necessary for the purposes identified by us. Information shall be collected by fair and lawful means.
- Limiting Use, Disclosure and Retention
Personal health information will not be used or disclosed for other than those purposes for which it was collected without the consent of the individual or as required by law. Your personal health information is retained for at least 10 years after your file is closed, and for a child, the record is kept 10 years past the 18th birthday if the file is no longer active.
We will ensure that personal health information is as accurate, complete and up-to-date as is necessary for the purposes for which it is to be used. Individuals have the right to request to have inaccurate information corrected.
Appropriate security controls, for both technology and staff, are in place and maintained to ensure there is no unauthorized use or disclosure of personal information. This includes implementing privacy practices that align with provincial and federal law, standard privacy and security training for all staff, utilizing up-to-date firewall and encryption protections and routine auditing of client records.
We will readily make available to individuals the policies and procedures that support our commitment to privacy.
- Individual Access
We have a process for individuals, upon request, to access their personal health information and to challenge its accuracy.
- Challenging Compliance
An individual may challenge compliance to these principles through our Privacy Officer.
If you correspond with us via e-mail, the postal service, facsimile, or other form of communication, we may retain such correspondence and the information contained therein and use such to respond to your inquiry.
Importantly, e-mail and postal address information is never sold, given, or otherwise disclosed to third parties, except as set forth herein or in accordance with applicable laws.
Please limit the type of personal health information you include in an e-mail or text as it may be stored by a telecommunications provider (external third party) where the information is not encrypted or protected.