FIPPA sets out rules for protecting the privacy of personal information held by the hospital. Personal information may only be collected where there is authority to do so and steps must be taken to ensure it is accurate. Once collected, it must be protected from unauthorized access, use and disclosure.
The hospital may only use your personal information for the purpose for which it was collected or for a consistent purpose, or with your consent. Personal information has to be kept for a minimum of one year and it may only be disposed of in a secure manner.
Your personal information may be disclosed to others with your consent. It may also be disclosed without your consent in the following circumstances:
- to respond to an appeal to the Information & Privacy Commissioner/Ontario
- for the purpose for which the hospital collected the information or for a consistent purpose
- to hospital staff who need the information to perform their duties
- to comply with the law
- to cooperate with a law enforcement agency in Canada conducting an investigation
- to inform another in compelling circumstances affecting an individual’s health or safety
- to make contact with next or kin or a friend of an ill, injured or deceased person
- to audit a program that is cost shared with the federal or provincial government
If you have any questions about the hospital’s collection, use and disclosure practices, please contact Chris miller at 905-774-7431 ext 1337.
