It is the policy of the Belleville Nurse Practitioner-Led Clinic (BNPLC) to act in full compliance of the Personal Health Information Protection Act. It is understood that as a Nurse Practitioner-Led Clinic, funded by the Ministry of Health and Long Term Care, the agency is defined as a Health Information Custodian.
Overview of Privacy Compliance
Collection, use and disclosure of BNPLC patient information is subjected to the provisions of applicable Ontario laws including the Personal Health Information Protection Act, the Health Care Consent Act, and the Mental Health Act, R.S.O.
The Personal Health Information and Protection Act, is based on ten privacy principles, which are derived from the Canadian Standards Association’s Model Code for Protection of Personal Information. This privacy legislation is based on these ten principles:
1. Accountability
BNPLC has designated the Administrative Lead to assist the agency in meeting privacy obligations, and to deal with privacy-related inquiries and complaints.
2. Identifying Purposes of Information Collection
The BNPLC staff must inform patients of the purpose for which their personal information is collected, used and disclosed.
3. Obtaining Patient Consent
The BNPLC staff relies on implied consent, where appropriate, or obtains express consent from patients when collecting, using or disclosing their personal information.
4. Limiting Collection of Patient Personal Information
The BNPLC limits the collection of personal information from patients to that which is necessary for providing services, except for purposes that the law permits or requires.
5. Limiting Use and Disclosure of Patient Personal Information
The BNPLC limits the use and disclosure of patients’ personal information to providing client service, unless further consent is obtained, or the use or disclosure is permitted or required by law.
6. Accuracy
The BNPLC takes reasonable steps to ensure that patients’ personal information is as accurate, complete and up-to date as is necessary for the purposes for which it is used and disclosed.
7. Safeguards
The BNPLC staff is informed of privacy and confidentiality requirements. The BNPLC implements appropriate technical, administrative and physical safeguards to protect patients’ privacy and the confidentiality of their information.
8. Openness
The BNPLC has and makes available its statement on information practices (e.g. collection, use and disclosure of information)
9. Access
In a timely manner the BNPLC gives patients access to, and the ability to correct their personal records if they meet the requirements of the Act.
10. Challenging Compliance
The BNPLC has a simple complaint procedure for individuals to challenge our privacy practices.