Acts and Regulations

P-7.05 - Personal Health Information Privacy and Access Act

Full text
Information practices
49(1)A custodian shall
(a) establish and implement information practices to facilitate the implementation of, and to ensure compliance with, this Act,
(b) designate a person
(i) to assist in ensuring compliance with this Act,
(ii) to respond to inquiries about the custodian’s information practices, and
(iii) to receive complaints from the public about any alleged contravention of this Act or its regulation by the custodian,
(c) notify the individual to whom the information relates and the Ombud in the manner prescribed by the regulations at the first reasonable opportunity if personal health information is
(i) stolen,
(ii) lost,
(iii) disposed of, except as permitted by this Act, or
(iv) disclosed to or accessed by an unauthorized person, and
(d) promote openness, transparency of policies and procedures to the public.
49(2)Paragraph (1)(c) does not apply if the custodian reasonably believes that the theft, loss, disposition, disclosure or access of personal health information will not
(a) have an adverse impact on the provision of health care or other benefits to the individual to whom the information relates,
(b) have an adverse impact on the mental, physical, economic or social well-being of the individual to whom the information relates, or
(c) lead to the identification of the individual to whom the information relates.
2019, c.19, s.5
Information practices
49(1)A custodian shall
(a) establish and implement information practices to facilitate the implementation of, and to ensure compliance with, this Act,
(b) designate a person
(i) to assist in ensuring compliance with this Act,
(ii) to respond to inquiries about the custodian’s information practices, and
(iii) to receive complaints from the public about any alleged contravention of this Act or its regulation by the custodian,
(c) notify the individual to whom the information relates and the Commissioner in the manner prescribed by the regulations at the first reasonable opportunity if personal health information is
(i) stolen,
(ii) lost,
(iii) disposed of, except as permitted by this Act, or
(iv) disclosed to or accessed by an unauthorized person, and
(d) promote openness, transparency of policies and procedures to the public.
49(2)Paragraph (1)(c) does not apply if the custodian reasonably believes that the theft, loss, disposition, disclosure or access of personal health information will not
(a) have an adverse impact on the provision of health care or other benefits to the individual to whom the information relates,
(b) have an adverse impact on the mental, physical, economic or social well-being of the individual to whom the information relates, or
(c) lead to the identification of the individual to whom the information relates.
Information practices
49(1)A custodian shall
(a) establish and implement information practices to facilitate the implementation of, and to ensure compliance with, this Act,
(b) designate a person
(i) to assist in ensuring compliance with this Act,
(ii) to respond to inquiries about the custodian’s information practices, and
(iii) to receive complaints from the public about any alleged contravention of this Act or its regulation by the custodian,
(c) notify the individual to whom the information relates and the Commissioner in the manner prescribed by the regulations at the first reasonable opportunity if personal health information is
(i) stolen,
(ii) lost,
(iii) disposed of, except as permitted by this Act, or
(iv) disclosed to or accessed by an unauthorized person, and
(d) promote openness, transparency of policies and procedures to the public.
49(2)Paragraph (1)(c) does not apply if the custodian reasonably believes that the theft, loss, disposition, disclosure or access of personal health information will not
(a) have an adverse impact on the provision of health care or other benefits to the individual to whom the information relates,
(b) have an adverse impact on the mental, physical, economic or social well-being of the individual to whom the information relates, or
(c) lead to the identification of the individual to whom the information relates.