Week 3: Information privacy, confidentiality, and security

Question 1

Act that governs health care information privacy in Ontario
requires that PHI be kept confidential and secure
Client’s right to control how PHI is collected, used, disclosed
sets consistent rules for management of PHI and outlines client’s rights regarding PHI

Answer 1

PHIPA

Question 2

When can PHI be collected without consent?

Answer 2

When client cannot provide it; can get from family

Question 3

When can practitioners disclose PHI without patient consent?

Answer 3

• if need to provide health care and consent cannot be quickly obtained
• to contact relative/friend of an injured, incapacitated or ill client
• to confirm that a client is a resident or client in a facility
• to eliminate or reduce significant risk of serious bodily harm to another person or the public*

Question 4

Situations where the patient has expressly restricted their health information custodians from disclosing specific PHI to others - even to others involved in the patient’s circle of care

Answer 4

Lock Boxes

Question 5

What are the 6 P’s of social media use?

Answer 5

Professional
positive
patient/person free
protect yourself
privacy
pause before you post

Question 6

What are some legal consequences for privacy breaches?

Answer 6

Charges under PHIPA (statute law)
Professional misconduct under CNO
Potential civil litigation