PATIENT PRIVACY AND CONFIDENTIALITY
PROTECTING PERSONAL HEALTH INFORMATION
Developmental Disabilities Consulting Program (DDCP) is committed to protecting your privacy and the confidential nature of the information you share. This statement outlines the personal health information practices we use to protect your privacy, and your rights under Ontario law, known as PHIPA (Personal Health Information Protection Act, 2004). This statement applies to individuals accessing physical and mental health care services from a doctor, nurse, occupational therapist, personal counsellor, social worker, psychologist, psychotherapist, or psychiatrist at DDCP.
Collection and Use of your Information
To provide you with quality health care, we keep a record of information about your health status and of the care that we have provided to you. The team of health care providers at DDCP uses the health record to document the provision of care. Personal health information is collected, used, and disclosed by DDCP as permitted or required by law. Your personal health information is only to be accessed by a DDCP health care provider or staff member as part of fulfilling their job duties and providing or assisting in the provision of health care.
Consent to Use and Share your Information to Provide You with Health Care
In almost all cases, your consent is required to collect, use, and disclose your personal health information. Consent means you are knowledgeable and informed about the collection, use and disclosure of your personal health information. Consent can be implied (assumed) or explicit (verbal or written).
When you seek health care from us, we assume that we have your permission to collect, use and share your personal health information among the health care providers and administrative staff at DDCP who provide or assist in providing health care to you. The sharing of personal health information among the DDCP team streamlines and enhances the care provided to you (e.g. a doctor may ask a nurse to call you with lab results; a counsellor may consult a manager etc.)
We also rely on implied consent to share your personal health information on a ‘need-to-know’ basis with other health care providers outside of DDCP who are directly involved in your health care (e.g. fax a prescription to your pharmacist, or send a referral to a specialist).
We also rely on implied consent to share personal health information with health insurance providers (e.g. OHIP) for billing-related purposes.
In most cases, your verbal or written consent is required to disclose personal health information from or with anyone who is not directly involved in providing or assisting in providing health care services to you (e.g. a family member). See below.
Limits to Confidentiality and Requirement of Consent to Receive or Disclose Information
We must also meet legal requirements to disclose personal health information in specific circumstances without your consent (i.e. situations where you are thought to be at risk of harm to yourself or others; a request from a legal authority; in cases of suspected child abuse, elder abuse in a long-term care facility, and sexual abuse by a Regulated Health Care Professional; in cases when a medical condition significantly impairs your ability to operate a motor vehicle).
Withdrawing or Restricting Consent (“Lockbox”) to Access to Personal Health Information
You have the right to withdraw or restrict partial or complete access (other than to those with legal authority under PHIPA) to the personal health information within our health record. If you have concerns related to your privacy or the confidentiality of your information, please speak to your health care provider and we will work with you to address those concerns. Written instructions from you are required to restrict access to your file. Requesting a lockbox may result in implications for your health care, and possible risks will be reviewed with you individually should you request a lockbox from DDCP. To execute a lockbox, please forward written instructions with signature to our office via mail or email at email@example.com.
Security and Protection of your Information
We will take reasonable steps to keep accurate records of your health information and will follow all legal requirements and Queen’s security standards and best practice for the security, retention and destruction of these records. All medical records are kept for a period of time determined by the medical licensing authority or other professional oversight body.
All healthcare professionals and administrative staff at DDCP work under PHIPA and adhere to the privacy and security policies of DDCP. If you become aware of any inappropriate use of your personal health information or a breach of confidentiality, please inform us immediately. Under PHIPA, you may also file a written complaint to Ontario’s Information and Privacy Commissioner.
Access to your Health Record
Unless there are unusual circumstances, you have the right to review and/or obtain copies of your health record. If access or copies are provided, our clinic may charge a reasonable fee to cover our expenses.
Changes to your Health Record
You can request a change to the information in your health record if you think that there is an error or an omission in the record. The health care practitioner will consider your request and either grant or refuse it based on their review. We will place a notation on your health record that you requested the amendment, along with the details of the decision made.
Third Party Consent
If there are individuals in your life whom you wish to have involved in your health care while receiving services, we will ask you to sign a DDCP Consent regarding Personal Health Information form for each person. Please note you can choose what type of personal health information you want us to receive or disclose and you can withdraw consent at any time.
Should you have any questions, concerns or wish to discuss our policy on privacy/confidentiality in regards to our services, please contact: