Clinical Resources (Third Party)

Personal Health Information Act (PHIA)

In 2008, the House of Assembly passed the Personal Health Information Act. The Act applies to public and private custodians of personal health information and establishes the rules related to health information collection, use and disclosure. All custodians of personal health information including physicians, are required to be informed about the Act and their roles and responsibilities as defined in the Act.

The Department of Health and Community Services has developed resources (see below) to inform physicians about their roles and responsibilities as custodians of personal health information. 

OIPC Privacy Checkups for Physicians

The Office of the Information and Privacy Commissioner (OIPC) invites physicians to undertake a “Privacy Check-Up” designed to help physician custodians and their staff evaluate their level of compliance with PHIA. This educational initiative consists of a short nine-question checklist (with additional follow-up points) that will help Custodians determine whether they have “reasonable security measures” in place to protect personal health information as required by PHIA. The questions also seek to remind Custodians of their additional obligations under PHIA with respect to collection, use and disclosure of personal health information. The OIPC is encouraging all Custodians to contact their office to arrange a short site visit (20 minutes) during which an Access and Privacy Analyst will come to your office and talk with physicians and staff about the checklist and if necessary, discuss ways to improve practices and procedures to become PHIA compliant. For questions, more information, or to set up a visit, contact the OIPC at (709) 729-6309 or [email protected].