Privacy Policy
Lakeridge Health (LH) is committed to protecting the privacy of our patients’ health information and places the highest value on maintaining the confidentiality and security of personal health information (PHI). We recognize that the health information of our patients must be treated with respect and sensitivity.
We strive to protect the privacy of our patients’ health information and do so in accordance with all applicable laws. We take steps to ensure PHI is protected against theft, loss and unauthorized use or disclosure, and to ensure that the records containing the information are protected against unauthorized copying, modification or disposal.
We also believe that it’s important that you know how your personal health information is used, how it is protected and how you can access it.
Please explore the information below to find out more about our Privacy initiatives. Any questions or concerns about the content of this info or our information handling practices can be directed to the Privacy Officer, 905-576-8711 x2663 or by email to privacy@lakeridgehealth.on.ca
Personal Health Information Privacy Policy
Lakeridge Health has a robust Corporate Privacy Policy which outlines our commitment to collecting, using, disclosing and retaining personal health information in accordance with applicable legislation and the Canadian Standards Association’s internationally recognized set of information privacy principles. Our privacy commitment is based on the following 10 principles.
Accountability - Lakeridge Health has identified an Information Privacy Officer who is responsible for managing privacy and confidentiality issues within the corporation.
Identifying Purposes - Personal information is collected within the organization only for certain, specified purposes. Data is not collected for other purposes unless it is explained and consent is obtained from the patient.
Consent – A patient’s implied consent is obtained through a notification process prior to collecting, using or disclosing personal information.
Limiting Collection - Collection of personal health information is limited to the information required for the purposes identified.
Limiting Use, Disclosure and Retention - Personal health information is only used, disclosed and retained for the purposes identified except where required by law or with the consent of the patient. Personal Information is not kept longer than is required for the purposes identified.
To provide you with the best possible care, it is important that you share with us all the information needed to diagnose and treat you.
If you do not wish us to collect or disclose certain information about you, please inform us and we will discuss with you any consequences this may have for your health care or treatment and if we are able to comply with your request.
Accuracy - Personal Information is kept as accurate as possible for the purposes identified.
Safeguards - Lakeridge Health has numerous safeguards in place to ensure that personal health information is protected and only individuals who need to know the information to perform their work duties access personal information. Safeguards can be technical (ex. password protection), organizational (ex. limiting access on a need to know basis) and physical (ex. locked filing cabinets).
Openness - Lakeridge Health’s privacy policy is available to the public, and members of the community can contact the Information Privacy Officer or their care provider if they have specific privacy questions or concerns.
Individual Access - Patients have the right to request access to Lakeridge Health’s record of their care. If an individual believes that the information contained in the record is inaccurate, changes may be requested.
Challenging Compliance - Concerns relating to Information Privacy at Lakeridge Health can be directed to the Information Privacy Officer.
Frequently Asked Questions
What is privacy?
Privacy is an individuals right to be aware of, and limit, how personal information is being collected, used and disclosed.
What is the Personal Health Information Protection Act (PHIPA)?
The Personal Health Information Protection Act, 2004 (PHIPA) is Ontario’s health-specific privacy legislation. PHIPA governs the manner in which personal health information may be collected, used and disclosed within the health care system. It also regulates individuals and organizations that receive personal information from health care professionals and confirms a patient's right to access one's own personal health information.
PHIPA requires that hospitals obtain an individual's consent to collect, use and disclose his/her personal health information. How will Lakeridge Health obtain such a consent?
PHIPA states that it is reasonable to believe that an individual knows the purposes of the collection, use or disclosure of personal health information about the individual by a hospital if the hospital posts or makes available a notice describing the purposes for doing so. These notices are posted in areas where it is likely to come to the individual’s attention.
What is the difference between express and implied consent?
Express consent - given directly by an individual to a health information custodian for the collection, use or disclosure of his/her personal health information. It may be given verbally, in writing or by electronic means.
Implied consent - permits a health care custodian to presume from the surrounding circumstances that an individual would reasonably agree to the collection, use or disclosure of his/her personal health information.
Express consent is always required:
- Where personal health information is disclosed to an individual or organization, such as a lawyer or insurance company, that is not a health information custodian.
- Where information is disclosed by one health care provider to another for a purpose other than providing or assisting in providing health care.
- Express consent is also required where a custodian:
- Collects, uses or discloses personal health information other than an individual’s name and mailing address for fundraising purposes;
- Collects personal information for marketing research or activities; and
- Collects, uses or discloses personal information for research purposes, unless certain conditions and restrictions are met.
- Collects, uses or discloses personal health information other than an individual’s name and mailing address for fundraising purposes;
Why does Lakeridge Health collect personal health information about me?
In order for Lakeridge Health to provide you with the best quality care, we collect personal health information from you or someone who has been designated your substitute decision-maker. Examples of personal and health information include: your name, address, date of birth, Health Card Number, health history, test results etc. LH may also access personal health information from other health care organizations and professionals that are involved in your current episode of care.
How does Lakeridge Health use my health information?
We use your health information for the following purposes:
- To provide you with healthcare services. Your visit to the hospital may include a number of assessments, tests and treatments. All of this information is recorded in the health record and made available to those involved in your care. LH keeps a history of your health information for future care.
- To comply with legal and regulatory requirements. For example, we collect your health insurance number because it is required to fund health care services.
- To perform Continuous Quality Improvement activities (ex. patient satisfaction surveys).
- To support LH’s research programs. Researchers working on approved studies can have access to health information, provided that consent and privacy issues have been addressed.
- To support LH’s educational activities. Health information is used for teaching purposes with measures taken to protect privacy and confidentiality.
Who does Lakeridge Health share my personal health information with?
Lakeridge Health may disclose (share) your personal health information to:
- A relative, friend or potential substitute decision-maker if you are injured, incapacitated, ill or unable to give consent personally.
- Other healthcare providers involved in your care.
- Health regulatory agencies (for example, OHIP for billing).
- Public authorities as permitted and required by law.
- Any third party, provided you have consented to the disclosure or as required by law.
We are also permitted to disclose information to:
- Visitors or callers so they can locate you in the hospital. Information is limited to the confirmation that you are a patient, your general health status and your location within Lakeridge Health.
- Foundations supporting Lakeridge Health. The Foundations raise money for equipment, hospital redevelopment and regional programs. Information is limited to your name and contact information.
- A religious or spiritual advisor who may visit you in the hospital. Information is limited to your name and location within Lakeridge Health.
If you do not want information disclosed for these purposes, please advise the staff member registering you, a member of the healthcare team or contact the Privacy Officer by phone (905-576-8711 x2663) or by email privacy@lakeridgehealth.on.ca.
How does Lakeridge Health protect your personal health information?
- We audit/monitor the electronic health record regularly.
- We investigate any complaints about our privacy practices and take appropriate measures to resolve such complaints.
- Privacy awareness training is provided to all new staff in orientation and is available to existing staff through a variety of forums.
- All staff wear photo identification badges to protect against unauthorized individuals accessing information.
- Your health records are kept in controlled areas with limited access.
- We have security measures such as user names and passwords for all electronic records.
Our goal is to make sure that everyone working with us understands their privacy responsibilities and is aware of the rules and regulations.
Does Lakeridge Health sell patient information?
No. Lakeridge Health does not sell, barter or trade any patient information with anyone.
How do I access my personal information?
We respect your right to access your own health information. To access your information contact the Health Information Management Department through:
Release of Information Specialist
Oshawa/Whitby
- (905) 576-8711 ext. 4174
Bowmanville
- (905) 623-3331 ext. 1340
Port Perry
- (905) 985-7321 ext. 5546
R.S. McLaughlin Durham Region Cancer Center
- (905) 576-8711 ext. 4519
How do I report a privacy concern?
Privacy concerns can be reported directly to the Privacy Officer. The concern will be investigated and we will determine if a breach has occurred and follow-up with staff as needed. Please review the Concern/Issue Reporting Procedure below for more detail.
Concern/Issue Reporting Procedure
Any individual with a Privacy concern may contact the Privacy Office to discuss issues relating to Lakeridge Health’s information handling procedures by phone, email or in writing.
Mail Privacy Officer
Lakeridge Health Oshawa
1 Hospital Court, Room 18LG
Oshawa, ON
L1G 2B9
Phone: 905-576-8711 ext. 2663
Fax: 905-721-4833
All complaints will be addressed in less than 30 days, unless there are specific circumstances requiring 30 additional days. If an extension is required, the complainant will be notified as soon as possible.
Information required from the individual:
- Name
- Contact information (by phone or mail)
- Nature of the concern including a detailed description of the suspected violation/breach
Issues will be reviewed by the Privacy Office including conducting systems audits and consulting with other staff as appropriate.
Individuals have the right to raise their concerns with the Information and Privacy Commissioner of Ontario if they are not satisfied with the response from Lakeridge Health. You can reach the Commissioner's Office at:
Information and Privacy Commissioner/Ontario
2 Bloor Street East, Suite 1400
Toronto, Ontario
M4W 1A8
Phone: 1-800-387-0073
Resources
For more general information on health privacy legislation, please refer to the Information and Privacy Commissioner’s website at: www.ipc.on.ca
Last updated on: November 21, 2008