top of page

Policies

Policy Briefs

Select a policy brief to learn more

Privacy and eConsult

eConsult aheres to existing privacy legislation

Position Statement
The purpose of this page to clarify the definition of privacy as it pertains to eConsult services and highlight key steps for providers and service implementers to ensure patient information remains
secure.

​

Ensuring patient privacy – key steps for providers
Patients have a right to ensure that their personal health information remains private and confidential. As such, providers must be able to confirm that any eConsult service they use in providing patient care has sufficient protocols in place to protect patients’ privacy. Providers who wish to confirm an eConsult service’s security may take the following steps:

 

  • Ask the service provider to verify the presence of appropriate safeguards. Providers may wish to confirm that these safeguards are matched by their own administrations.

  • Review the privacy legislation enacted in their jurisdiction (see Table).

  • Consult a provincial/territorial privacy commissioner if there are any concerns.


Elements of a secure eConsult service – key steps for service implementers
In order for an eConsult service to function, patients must be able to rely on it to protect their personal health information. In developing an eConsult service, innovators must ensure that:

 

  • All data is transmitted through a secure network and stored on a secure Canadian server.

  • The service meets the minimum standards for privacy.

  • Everyone who uses or has access to patient data has sufficient training and certification to ensure the information is handled in a safe and professional manner. Only providers or their delegates should be able to access the account.

  • The innovation adheres to all pieces of privacy legislation in effect in its jurisdiction. A privacy impact assessment can ensure that all aspects of such legislation are met.

  • The role of the health information custodian is clearly defined.

Table: Personal Health Information Protection Acts for all provinces/territories

Region
Act
Latest Version
View
BC
Personal Information Protection Act
2016
View Here
AB
Personal Information Protection Act
2014
View Here
SK
The Freedom of Information and Protection of Privacy Act
2019
View Here
MB
Personal Information Protection Act
2014
View Here
ON
Personal Health Information Protection Act
2022
View Here
QC
An Act Respecting the Protection of Personal Information in the Private Sector
2021
View Here
NB
Personal Health Information Privacy and Access Act
2022
View Here
NS
Personal Health Information Act
2022
View Here
PEI
Freedom of Information and Protection of Privacy Act
2022
View Here
NL
Personal Health Information Act
2019
View Here
YK
Access to Information and Protection of Privacy Act
2019
View Here
NT
Access to Information and Protection of Privacy Act
2022
View Here
NU
Access to Information and Protection of Privacy Act
2021
View Here
bottom of page