THE PERSONAL INFORMATION ACT
The Personal Health Information Protection Act, 2004 is a provincial law that governs the collection, use and
disclosure of personal health information within the health care system. The object is to keep personal health
information confidential and secure, while allowing for the effective delivery of health care services. Under this
legislation, health care providers and others who deliver health care services are collectively known as health
information “custodians.”
What is personal health information?
Personal health information includes any identifying information about an individual’s health or health care
history, such as your family medical history, details of a recent visit to your doctor, or your Ontario health card
number
Do health information custodians need my permission to access my personal health information?
Custodians are permitted to collect, use and disclose your personal health information, on the basis of implied
consent, for providing your health care.
What are heath information custodians required to do? Under PHIPA, health information custodians are
required to: 1) collect only the information they need to do their job 2) take steps to safeguard your personal
health information 3) take reasonable steps to ensure your health records are accurate and complete for the work
they do 4) provide a written description of the practices they use to protect your information, and the name of the
person to contact if you have any questions or concerns about your personal health records. What are your
rights under PHIPA?
PHIPA gives you the right to: 1) give permission (consent) to how your personal health information is collected,
used and shared 2) request access to your health records 3) make corrections to your records
For more information of your personal health information rights under PHIPA: Service Ontario Information
Line: 1-866-532-3162 (Toll-free)
. PERSONAL INFORMATION AND CONSENT NOTICE
This Notice and Consent is intended to inform you how we will collect, use, disclose, and destroy your personal
information.
Your personal information may be collected formally, in writing, and informally. Only necessary information will
be collected about you. We will collect, use, and disclose information about you for the following purposes: To
develop plans of care and practice case management of your file; To enable accurate referrals are made; For
anonymous statistical analysis of programs and services. The storage, retention, and destruction of your personal
information complies with this agency’s policy, applicable legislation and privacy protection protocols. We are
willing to provide a copy of our policy to you at your request.
Your consent may be withdrawn at any time by written notice to this agency. You may access you own personal
information or request corrections through a written request to this agency. This consent form will serve for all
agency programs you access, with one program designated as your primary provider and your original consent
kept in that program file.