Dan Carter Productions and Oshawa Community Health Centre
Effective August 1st, 2008
Protecting privacy and confidentiality of information is fundamental to our overall operation and we take it very seriously. We have created this private statement to demonstrate our commitment to protecting the privacy of our customers, partners, potential customers and website visitors.
This policy deals only with personal information handled by Dan Carter Productions and its divisions (herein referred to as Dan Carter Productions). Personal information is information about an identifiable individual, excluding business contact information. The following explains how Dan Carter Productions handles personal information. We reserve the right to change this policy and it may be updated periodically. Theses changes may affect our use of your personal information. Accordingly, please check for changes regularly.
firstname.lastname@example.org Any questions about Dan Carter Production’ handling of personal information should be directed to the privacy officer. Please see below for more information about the process for referring questions about Dan Carter Productions’s handling of personal information.
Purpose of Personal information
The purpose for which Dan Carter Productions collects personal information will be identified at or before the time the information is collected. Dan Carter Productions may collect personal information for the purposes of:
Purchasing various products or services from Dan Carter Productions
Qualifying prospective clients
Servicing existing clients to serve them better
Processing and administering the above or other purposes as necessary.
Dan Carter Productions seeks consent for all personal information we collect, use and disclose through information provided to individuals prior to collection, or at the time of collection.
Limits for Collecting, Using, Disclosing & Keeping Personal Information
Dan Carter Productions does not collect, use or disclose personal information of individuals except when individuals give consent and provide the information on a voluntary basis. There may be occasions where more specific personal information is necessary for us to proceed with a request for information, or provide you with a product or service. In such cases, we will provide you with a description on the information we need. In all cases, Dan Carter Productions limits the amount and type of information collected to only the personal information that is required to provide the individual with the requested information, product, or service. We collect only information that is voluntarily provided by you and undertake that such information will be kept strictly confidential.
Any personal information that Dan Carter Productions retains is kept in such a manner as to ensure its security and confidentiality at all times.
Safeguarding Personal Information
Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot ensure or warrant the security of any information you transmit to us or receive from us electronically. This is especially true for information you transmit to us via e-mail. We have no way of protecting that information until it reaches us. Once we receive your transmission, we make our best efforts to ensure its security on our servers.
Accuracy of and Access to Personal Information Collected
Dan Carter Productions makes every effort to keep personal information as accurate, complete, current and relevant as necessary for the identified purposes. Dan Carter Productions does not routinely update personal information.
At the written request of an individual, he or she may view or edit their personal information as collected by Dan Carter Productions. Dan Carter Productions will inform them of what it is being used for and, in cases where it has been disclosed, to whom it has been disclosed.
To make a request, please send a letter, email or fax addressed to our Privacy Officer at the address indicated above. In your request, please include the following information: Name, contact details, the nature of your request, including whether you wish to view and/or edit information or inquire regarding use and/or disclosure.
Dan Carter Productions will reply to your request in no later than thirty days after receipt of the request, or if we are not able to respond by this period, we will send you a notice of extension. If we are not able to disclose all the personal information we hold on you, we will give you a reason for our inability to do so, unless prohibited by law.
Any questions or comments about Dan Carter Productions handling of personal information should be directed to our privacy officer.
1) Objective & Scope of Policy
Oshawa Community Health Centre is committed to respecting your privacy and has developed a Privacy Statement, in accordance with the new Federal Privacy Act, to inform you of our policy and practices concerning the collection, use and disclosure of personal information.
This policy statement governs personal information collected from and about individuals who are or may become clients, members or donors and those individuals outside of Oshawa Community Health Centre with whom we work. This policy does not cover aggregated data from which the identity of an individual cannot be determined. Oshawa Community Health Centre retains the right to use aggregated data in any way that it determines appropriate.
In the event of questions about: (i) access to your personal information; (ii) Oshawa Community Health Centre’s collection, use, management or disclosure of personal information; or (iii) this policy statement; please contact:
Oshawa Community Health Centre
115 Grassmere Ave.
2)The Collection, Use and Disclosure of Personal Information
This policy pertains to:
- clients (any individual who may or has used the Oshawa Community Health Centre services),
- members (any person who is or who submitted an application to become a member of Oshawa Community Health Centre), and
- donors (any person who has made a contribution or donation to the Oshawa Community Health Centre).
“Personal information” means any information, recorded in any form, about an identified individual, or an individual whose identity may be inferred or determined from such information.
At anytime a client may withdraw their consent to use their personal health information by making a formal request to their provider or to the privacy officer which would be documented and added to their record. In addition, the client’s name will be recorded on a master list indicating withdrawal of consent.
Clients also have the right to instruct that a part of their personal health information not be shared with other providers or external agencies. This is referred to as the lockbox provision. Procedures dealing with the “Lock Box” provision are detailed below in 2.1 “Lock Box” Provision.
Oshawa Community Health Centre uses the personal information provided verbally or in writing by clients, members, or donors in order to:
- Provide clients with health and health related services and programs;
- Manage our relationship with clients;
- Manage our relationship with members and donors;
- Meet any legal or regulatory requirement; and
- Such other purposes consistent with the foregoing purposes.
Oshawa Community Health Centre’s use of personal information is limited to these purposes, Oshawa Community Health Centre does not sell, trade, barter or exchange for consideration any personal information it has obtained. Unless permitted by law, no personal information is collected about a client, member or donor without first obtaining the consent of the individual to the collection, use and dissemination of that information.
Personal information will be collected, to the extent possible, directly from the individual concerned. In order to meet client needs, personal information provided by clients may be shared between personnel of the various service areas of Oshawa Community Health Centre. In the event of a client being incapable of giving consent, effort will be made to obtain consent from a substitute decision maker.
Where a client is transferred to another health care provider not working for or with Oshawa Community Health Centre, the client’s written consent will be obtained prior to disclosing the client’s personal information.
Oshawa Community Health Centre may disclose personal information of clients, members or donors to organizations or individuals that perform services on behalf of Oshawa Community Health Centre. Using contractual or other arrangements, Oshawa Community Health Centre shall ensure that agents, contractors or third party service providers, who may receive personal information in the course of providing services to Oshawa Community Health Centre, agree to use such information solely for the purposes of providing services to Oshawa Community Health Centre and under the instruction of Oshawa Community Health Centre and, with respect to that information, to act in a manner consistent with the relevant principles articulated in this policy.
Please note that there are circumstances where the use and/or disclosure of personal information may be justified or permitted or where Oshawa Community Health Centre is obliged to disclose information without consent. Such circumstances may include:
- Where required by law or by order or requirement of a court, administrative agency or other governmental tribunal;
- Where Oshawa Community Health Centre believes, upon reasonable grounds, that it is necessary to protect the rights, privacy, safety or property of an identifiable person or group;
- Where it is necessary to permit Oshawa Community Health Centre to pursue available remedies or limit any damages that Oshawa Community Health Centre may sustain; or
- Where the information is public.
Where obliged or permitted to disclose information without consent, Oshawa Community Health Centre will not disclose more information than is required.
2.1 “Lock Box Provisions”
If a client instructs a provider not to release a part of his/her health information to another service provider, the provider must advise the other service provider or agencies that some relevant information has been withheld at the direction of the client.
Procedure to lock:
- A client may verbally, or in writing, ask their provider to “lock” specific and/or all of their personal health information from other service providers. It is preferred that the client provide the request in writing regarding which information and which provider/agency the information is to be withheld from as to ensure proper diligence. It should be pointed out to the client that in doing so their quality of health care may be affected.
- The client’s primary provider will complete a “Lock Box” form with all appropriate details and insert into client’s chart.
- The client’s chart will be marked on the outside front cover that it contains “locked” information.
- If information is “locked” from internal providers/staff, the primary provider who completed the “Lock Box” form is responsible to inform those “locked out” staff.
Procedure to change/revoke lock by client:
- Instructions to change/revoke locked information must be directed to the primary provider in writing.
- Provider will document in progress notes and written of client will be kept in progress notes of chart.
- Marking on outside of client’s chart will be removed/revised if applicable.
Procedure to unlock on request by third party:
- Requests for locked information must be directed to the primary provider in writing.
- The primary provider will explore the matter of the “locked” personal health information with the individual and seek his/her consent to access the locked information.
- Written consent will be obtained and placed in the client’s chart prior to any information being released.
If the provider believes that disclosure is necessary to eliminate or reduce significant risk of serious bodily harm to person or persons, he/she must: Disclose the personal health information to the third party. Note the disclosure and circumstances surrounding it in client’s chart and, if appropriate, informs the client that disclosure has occurred.
3) Accurate Information
Oshawa Community Health Centre endeavours to ensure that any personal information provided by it’s Clients and Members and in its possession is as accurate, current and complete as necessary for the purposes for which Oshawa Community Health Centre uses that data. Information contained in files that have been closed is not actively updated or maintained.
Oshawa Community Health Centre retains personal information as long as Oshawa Community Health Centre believes it is necessary to fulfill the purpose for which it was collected and properly disposed of when personal information is no longer used or needed as pertains to our document retention chart.
Oshawa Community Health Centre endeavours to maintain adequate security with respect to its offices and information stored at it facilities so as to prevent any loss, misuse, unauthorized access, disclosure, or modifications of personal information. If personal information of a client has been lost, stolen, improperly disclosed or had unauthorized use the individual(s) will be notified.
Oshawa Community Health Centre further protects personal information by restricting access to it to those employees that the management of Oshawa Community Health Centre has determined need to know that information in order that Oshawa Community Health Centre may provide its services. Oshawa Community Health Centre has strict policies in regards to confidentiality of information for both employees and volunteers.
6) Access to Personal Information
Oshawa Community Health Centre permits access to and review of personal information held and owned by Oshawa Community Health Centre about an individual by the individual concerned. All requests must be supplied in writing and sufficient information is required to confirm the identity of the person making the request before granting access or making corrections to personal information. Appropriate Oshawa Community Health Centre staff will be present during the review to address any issues that may arise.
If an individual believes any personal information concerning that individual is not correct, that person may request an update of that information by sending a request to the Privacy Officer. Oshawa Community Health Centre reserves the right not to change any personal information but will append any alternative text the individual concerned believes appropriate. An individual may also request that Oshawa Community Health Centre delete an individual’s personal information from Oshawa Community Health Centre’s system and records. However, due to technical constraints and the fact that Oshawa Community Health Centre backs up its systems, personal information may continue to reside in Oshawa Community Health Centre’s systems after deletion. Individuals, therefore, should not expect that their personal information would be completely removed for Oshawa Community Health Centre systems in response to an accepted request for deletion.
Clients may have access to their health information by requesting the information from their provider in writing. Oshawa Community Health Centre will endeavor to provide the information in question within a reasonable time and no later than 30 days following the request.
Procedure to access Personal Information:
- The client submits the request in writing to the provider detailing the following:
- A description of what information or records is requested.
- The signature of the client.
- The signature of a witness to the authorized person’s signature
- The date the written request was signed.
- The written request shall be placed in the client’s chart.
- A notation shall be made in the client’s record stating:
- What information or records were disclosed
- When the information or records were disclosed
- By whom the information or records were disclosed>
- Before records are copied, each page must be numbered.
Oshawa Community Health Centre reserves the right to decline access to personal information where the information requested:
- Would disclose the personal information of another individual or of a deceased individual;
- Is subject to solicitor-client or litigation privilege;
- Could reasonably result in:(i) serious harm to the treatment or recovery of the individual concerned; (ii) serious emotional harm to the individual or another individual; or (iii) serious bodily harm to an individual;
- May harm or interfere with law enforcement activities and other investigative or regulatory functions of a body authorized by statute to perform such functions
- Is not readily retrievable and the burden or cost of providing would be disproportionate to the nature or value of the information; or
- Does not exist, is not held or cannot be found by Oshawa Community Health Centre
Where information will not or cannot be disclosed, the individual making the request will be provided with the reasons for non-disclosure.
Where information will be disclosed, Oshawa Community Health Centre will endeavor to provide the information in question within a reasonable time and no later than 30 days following the request.
7) Amendment of Oshawa Community Health Centre Practices and this Policy
This statement is in effect as of January 1, 2004. Oshawa Community Health Centre will review and revise its privacy practices and this Policy Statement as part of a yearly review. In the event of any amendment, an appropriate notice will be communicated to Clients, Members and Donors in an appropriate manner. Policy changes will apply to the information collected from the date of the revised Policy Statement as well as to existing information held by Oshawa Community Health Centre.
8 ) Handling Inquiries or Complaints
Any questions, comments or complaints about our privacy policies and procedures are to be directed to our Privacy Officer, Mr. Brian Joyce, at the contact information provided in section 1 of this policy statement. The Oshawa Community Health Centre’s Privacy Officer will make all efforts to address concerns however, if the client is not satisfied with the response, he/she may contact the Information and Privacy Commissioner in writing at 2 Bloor Street East, Toronto, Ontario M4W 1A8.
9) In Summary
When you provide Oshawa Community Health Centre with personal information, you consent and agree to the following:
- The collection, use and disclosure of personal information from or about you as described in Section 2 and to your right to access and correct data as described in Section 6.
- Your acceptance of the risks concerning the transmission of information to Oshawa Community Health Centre as described in Section 5.
- The amendment of this Policy Statement as described in Section 7.
Last revision: January 2008