P1-Privacy-Policy-in-Respect-of-HHS-as-a-Prescribed-Person - Privacy Policy

Oct 4, 2026

Uploaded by Putri

Privacy policy outlining how Hamilton Health Sciences (HHS)/CritiCall Ontario operate the Critical Care Information System (CCIS) as a prescribed person under Ontario’s Personal Health Information Protection Act (PHIPA). It describes the scope covering employees and agents, the purpose covering collection, use, and disclosure of personal health information (PHI), and the CCIS background as a provincial health registry generating aggregate reports to support resource allocation and bed management. The policy states commitment to PHIPA, its regulation, and the CSA Model Code, including accountability as the first listed privacy principle.

LanguageEnglish

CategoryHealthcare

FormatPDF

Pages17

Reading Time43 min

AccessFree to download

Applies To

Purpose

Background

Status Under the Act

Policy Statement

Principle 1 – Accountability

| Hamilton Health Sciences | Critical Care Information System–Privacy | | --- | --- | | Title: P1-Privacy Policy in Respect of HHS as a Prescribed Person | | | Posting Date: July 7, 2014 | | | Approved By: Legal Counsel and Chief Privacy Officer, HHS; Michelle Leafloor, Chief Information Officer, HHS; Isabel Hayward, Executive Director, CritiCall Ontario | | | Date of Initial Approval: June 24, 2014 | Date of Last Review: April 11, 2024 | | Date of Next Review: June 1, 2026 | | | Version History | | | | | --- | --- | --- | --- | | Version No. | Date | Summary of Change | Changed By | | 1.1 | 2015-07-10 | Refined privacy training statement Clarified where FAQs are available | Christine Moon, CritiCall Privacy Lead | | 1.2 | 2016-05-10 | No major changes
Simplified “Applies to” language | Christine Moon, CritiCall Privacy Lead | | 1.3 | 2016-09-30 | Revised Privacy Committee responsibilities and reporting requirements of CritiCall Privacy Lead | Mary Wall, Director Privacy and FOI, HHS | | 1.4 | 2017-07-27 | No changes | Christine Moon, CritiCall Privacy Lead | | 1.5 | 2021-03-15 | Updated new Legal Counsel & Chief Privacy Officer, HHS, Executive Director, CritiCall Ontario, Chief Information Officer. Clarification edits to the policy. | Lori Sutherland, CritiCall Privacy Lead | | 1.6 | 2022-05-13 | Clarification to process edits applied. | Lori Sutherland, CritiCall Privacy Lead | | 1.7 | 2023-06-22 | Updated CPO Approver at HHS. | Lori Sutherland, CritiCall Privacy Manager | | 1.8 | 2024-02-12 | Updated to align with new manual, RE: Practices, triennial policy review, update CCIS data elements (ILI/RSV/COVID), updating PHIPA references, updating HHS agent accountabilities regarding use and breach, revised compliance of policy, removal of reference to personal information. | Stephanie Piper, CritiCall Privacy Lead and Rosalyn Reid, CritiCall Privacy Manager | | | | | | | --- | --- | --- | --- | Applies To: This policy applies to all Hamilton Health Sciences (HHS)/CritiCall Ontario (CritiCall) employees and anyother agents of HHS/CritiCall 1 and hospitals that support the ongoing operation, management, and maintenance of the Critical Care information System (CCIS) . Purpose The purpose of this policy is to outline the privacy practices for HHS as a Prescribed Person (PP) in respect of the CCIS under the Personal Health Information Protection Act, 2004 (PHIPA or the Act) as it relates to the collection, use and disclosure of personal health information (PHI) . Background On January 30, 2006, the Ontario Ministry of Health and Long-Term Care announced a $90 million Critical Care Strategy to ensure Ontario remains a global leader in providing critical care services and to improve access, quality and system integration in healthcare. The strategy identified seven components as priorities for provincial investment, including: (1) establishing Critical Care Response Teams (“CCRT”s) to improve patient safety; (2) enhancing the skills of existing health care providers; (3) establishing anew Critical Care Information System (CCIS) to provide key data; (4) working together to improve performance and quality; (5) exploring ethical and legal issues with stakeholders; and (6) training more critical care physicians and nurses. One of the essential components of the strategy was the development of the provincial CCIS to collect and report on data supporting the information needs of the entire strategy. The CCIS is a health registry that contains critical care data collected from hospital critical care units across Ontario through a web-portal that, in turn, generates aggregate statistical reports on critical care services (i.e. bed availability, Admission/Discharge/Transfer (ADT) data and Critical Care Response Team (CCRT) activity) in order to facilitate resource allocation and bed management decision-making. University Health Network (UHN)/Critical Care Services Ontario (CCSO) was appointed by the Ministry of

FAQs

Who does this privacy policy apply to?

It applies to Hamilton Health Sciences (HHS)/CritiCall Ontario employees and other agents acting on behalf of HHS/Crit iCall in respect of personal health information for CCIS purposes.

What is the purpose of the policy?

It outlines HHS’s privacy practices as a prescribed person regarding the CCIS, covering the collection, use, and disclosure of personal health information under PHIPA.

How does the policy relate to PHIPA and required privacy principles?

HHS is prescribed under PHIPA and is required to have privacy policies and procedures approved by the Information and Privacy Commissioner of Ontario every three years. The policy states commitment to PHIPA, its regulation, and the CSA Model Code privacy principles.

Oct 4, 2026

Uploaded by Putri