Policies
Policy Briefs
Select a policy brief to learn more
Privacy and eConsult
eConsult aheres to existing privacy legislation
Position Statement
The purpose of this page to clarify the definition of privacy as it pertains to eConsult services and highlight key steps for providers and service implementers to ensure patient information remains
secure.
​
Ensuring patient privacy – key steps for providers
Patients have a right to ensure that their personal health information remains private and confidential. As such, providers must be able to confirm that any eConsult service they use in providing patient care has sufficient protocols in place to protect patients’ privacy. Providers who wish to confirm an eConsult service’s security may take the following steps:
-
Ask the service provider to verify the presence of appropriate safeguards. Providers may wish to confirm that these safeguards are matched by their own administrations.
-
Review the privacy legislation enacted in their jurisdiction (see Table).
-
Consult a provincial/territorial privacy commissioner if there are any concerns.
Elements of a secure eConsult service – key steps for service implementers
In order for an eConsult service to function, patients must be able to rely on it to protect their personal health information. In developing an eConsult service, innovators must ensure that:
-
All data is transmitted through a secure network and stored on a secure Canadian server.
-
The service meets the minimum standards for privacy.
-
Everyone who uses or has access to patient data has sufficient training and certification to ensure the information is handled in a safe and professional manner. Only providers or their delegates should be able to access the account.
-
The innovation adheres to all pieces of privacy legislation in effect in its jurisdiction. A privacy impact assessment can ensure that all aspects of such legislation are met.
-
The role of the health information custodian is clearly defined.
Table: Personal Health Information Protection Acts for all provinces/territories
Region | Act | Latest Version | View |
---|---|---|---|
BC | Personal Information Protection Act | 2016 | View Here |
AB | Personal Information Protection Act | 2014 | View Here |
SK | The Freedom of Information and Protection of Privacy Act | 2019 | View Here |
MB | Personal Information Protection Act | 2014 | View Here |
ON | Personal Health Information Protection Act | 2022 | View Here |
QC | An Act Respecting the Protection of Personal Information in the Private Sector | 2021 | View Here |
NB | Personal Health Information Privacy and Access Act | 2022 | View Here |
NS | Personal Health Information Act | 2022 | View Here |
PEI | Freedom of Information and Protection of Privacy Act | 2022 | View Here |
NL | Personal Health Information Act | 2019 | View Here |
YK | Access to Information and Protection of Privacy Act | 2019 | View Here |
NT | Access to Information and Protection of Privacy Act | 2022 | View Here |
NU | Access to Information and Protection of Privacy Act | 2021 | View Here |