Archive (Tag: PHI)
Privacy Audits (updated)
Your organization has undertaken a privacy impact assessment (PIA) as part of its process of designing and implementing a new program. So, what’s next? Once the new program has gone live, your organization should plan regular privacy audits to ensure that the program is operating in a manner that complies with applicable access and privacy... read more
Collection/Disclosure; A Two-Step Analysis (updated)
When personal information or personal health information (information) is shared by one public body with another, the issue arises as to who has the authority to disclose and who has the authority to collect. Many collections of information happen when you or I visit a public body, apply for a service or benefit and fill... read more
Should you provide your child’s HSN to their school?
Have you ever filled out a form for your child’s school and wondered if they really need all the information they are asking for? Among other personal information, your child’s school might request their health services number (HSN). The Commissioner has not yet dealt with this issue in a formal report so this is just... read more
Who signs for an adult?
Two of my staff were giving a presentation to an organization who has both children and adults in its care. Questions were asked about who could sign for the adult (18 or older) when that adult may not have capacity to sign or consent. This question took me back to the work I did for... read more