Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Saskatchewan: OIPC releases guidance on eCommunication and PHI
The Office of the Saskatchewan Information and Privacy Commissioner ('OIPC') announced, on 12 April 2019, in a blog post, that it had released guidance ('the Guidance') on how to protect personal health information ('PHI') when using eCommunication tools and comply with the Health Information Protection Act 1999 ('HIPA'). In particular, the Guidance recommends conducting privacy impact assessments to determine whether the use of eCommunication tools would be secure, appropriate and necessary, and whether the benefits outweigh the risks. In addition, it states that it is important to be aware of which eCommunication tools are being used, and implement safeguards to ensure the security of PHI, in relation to policies and procedures, retention schedules, access restrictions, securing data transmission, consent forms, privacy agreements, and privacy training.