Privacy Legislation Flashcards

1
Q

Why was the Personal Information Protection and Electronic Documents Act (PIPEDA) created?

A
  • to protect personal information from being used for another purpose other than what it was collected for
  • ensure that personal information is protected by the appropriate safeguards
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the purpose of the Federal Privacy Act?

A

extend the present laws of Canada that protect the privacy of individuals with respect to personal information held by government institutions as well as providing individuals the right to access that information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the purpose of the anti-spam legislation (CASL)?

A

-protect consumers and businesses from the misuse of digital technology (includes spam and electronic threats)
- help businesses stay competitive in a global digital marketplace

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the Personal Health Information Protection Act of Ontario (PHIPA)?

A

Ontario’s health-specific privacy legislation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the purpose of PHIPA?

A
  • governs how personal health information may be collected, used, and disclosed within the health sector
  • creates a consistent approach to protecting information across the health sector
  • gives individuals greater control over how their personal information is collected, used, or disclosed as well as the right the access and request corrections to their information
  • provides a means for review and resolution of complaints when privacy rights have been violated
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Who does PHIPA regulate?

A

health information custodians, individuals, and organizations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How does PHIPA define collect?

A

gather, acquire, receive, or obtain the information by any means from any source

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How does PHIPA define use?

A

view, handle, or otherwise deal with the information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How does PHIPA define disclose?

A

make the information available to another health information custodian or another person

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is a health information custodian (HIC)?

A

person who operates an organization that delivers healthcare as a solo practice, group practice, or organization that has a reason to know personal health information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is a agent of a HIC?

A

person that acts for or on behalf of the custodian

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is considered personal health information?

A

information that can identify an individual that relates to:
- physical or mental health
- family health history
- care provided to the individual
- payment
- eligibility
- health card number
- donation or testing of body parts/body substances
- identification of the substitute decision maker
- non-health care related personal information

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How many PHIPA principles are there?

A

10

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is PHIPA principle 1?

A

Accountability - HIC’s must take steps to ensure that records are kept in a manner that ensures that legislation and professional standards are respected

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is PHIPA principle 2?

A

Identifying purpose - HIC’s and agents must ensure that the purpose for collecting, using, disclosing, or retaining personal health information is clear to the individual

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is PHIPA principle 3?

A

Informed consent - there must be informed consent by the individual or by their substitute decision-maker when information is being collected, used, or disclosed

17
Q

What is PHIPA principle 4?

A

Limiting collection - HIC’s must ensure that all forms of personal health information are collected for:
a) the purposes for which they are required
b) the purposes for which individuals provide consent

18
Q

What is PHIPA principle 5?

A

Limiting, use, disclosure, and retention - HIC’s must ensure that use, disclosure, and retention policies and standards are followed

19
Q

What are legally permitted uses of personal health information?

A
  • for the purposes that is was created/collected
  • for planning, delivering, or monitoring services for which the custodian allocates funding or other resources
  • for risk management or other activities to maintain quality of care
  • for educating agents
    for obtaining payment and verifying or reimbursing claims
  • for research conducted by the custodian
20
Q

What are legally permitted disclosures of personal health information?

A
  • within the circle of care
  • outside the circle of care with consent of the patient
  • to the substitute decision maker
    within the organization for audit or accreditation purposes
  • to a successor
21
Q

What is PHIPA principle 6?

A

Accuracy - HIC’s are responsible for ensuring records are accurate, complete, and up to date

22
Q

What is PHIPA principle 7?

A

Safeguards - HIC’s must take steps against theft, loss, and unauthorized use or disclosure as well as ensuring records are protected against unauthorized copying, modification, or disposal

23
Q

What is PHIPA principle 8?

A

Transparency - HIC’s must display/have an available written public statement about their privacy policies and patient/client rights

24
Q

What is an example of a privacy breach?

A
  • records are seen by someone who should not see them
  • emails, texts, phone calls are sent to the wrong person
  • paper records are stolen
  • electronic records are accessed by people who should not have access
  • conversations being overheard by people outside of the circle of care
25
Q

What is PHIPA principle 9?

A

Individual access - HIC’s must provide individuals with access to their information upon request

26
Q

What is PHIPA principle 10?

A

Challenging compliance

27
Q

What are an R.Kin’s obligations in the event of a privacy breach?

A
  • notify the individual whose information has been stolen/lost/used/disclosed
  • notify the Information Privacy Commissioner of Ontario if required
  • inform the HIC if the individual who caused the breach is an agent of a HIC
28
Q

When should an R.Kin make a report to the appropriate regulatory college in the event of a privacy breach?

A
  • if disciplinary action is taken against a member of the college who is an employee of agent of the HIC
  • if the employee of agent of the HIC resigns and there is reasonable ground to believe resignation is related to investigation or other action
29
Q

What is the purpose of the Health Care Consent Act?

A
  • provide rules with respect to consent to treatment that apply in all settings
  • facilitate treatment for persons lacking the capacity to consent
  • enhance the autonomy of people who are found to be incapable of providing consent
  • promote communication and understanding
30
Q

Health practitioners can only provide treatment if…

A

consent if obtained

31
Q

What are the requirements of consent?

A
  • be related to the treatment being proposed
  • be informed
  • be voluntary
  • not be obtained through misrepresentation or fraud
32
Q

What information needs to be provided before obtaining consent?

A
  • nature of the treatment
  • expected benefits of the treatment
  • alternative courses of action
  • risks/side effects of having treatment
  • consequences of not having treatment