Text size
Search

Privacy Policy

Introduction

Our privacy policy at Joseph Brant Hospital (JBH) reflects our commitment to safeguarding personal information, particularly within the healthcare sector in today's digital landscape. Aligned with federal and provincial privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Personal Health Information Protection Act - PHIPA, this policy outlines how we collect, use, disclose, and retain personal information.

Joseph Brant Hospital's Commitment to Privacy

At Joseph Brant Hospital, we prioritize the confidentiality and security of all personal information under our care, custody, and control. It is our commitment to ensure that such information is accessible only to authorized individuals. Within legislative boundaries and exceptions, patients/clients (or their legal representatives) have the right to access their personal information held by JBH.
We also recognize our duty to maintain the confidentiality of personal information concerning our employees, medical staff, and volunteers.

Principle 1 - Accountability of Personal Information

Joseph Brant Hospital (JBH) is responsible for personal information under its custody or control and is accountable for compliance with the principles of this policy and legislation governing privacy. The Director of Health Information Services has been designated the hospital’s Chief Privacy Officer and is responsible to oversee and facilitate compliance with privacy principles and related policies and procedures. Electronic version is the most current. Printed copies are only valid for the day they are printed.

Principle 2 - Identifying Purposes for the Collection of Personal Information

At or before the time personal information is collected, JBH will identify the purposes for which personal information is collected. The primary purposes are the delivery of direct patient care, the administration of the health care system, research, teaching, statistics, fundraising, and meeting legal and regulatory requirements.

Principle 3 - Consent for Collection, Use, and Disclosure of Personal Information

The knowledge and consent of the individual are required for the collection, use, or disclosure of personal information, except where inappropriate. Note: In certain circumstances personal information can be collected, used, or disclosed without the knowledge and consent of the individual. For example, legal, medical, or security reasons may make it impossible or impractical to seek consent. These situations are limited and in accordance with legislative standards.

Principle 4 - Limiting Collection of Personal Information

JBH will limit the collection of personal information to that which is necessary for the purposes identified. Information will be collected by fair and lawful means.

Principle 5 - Limiting Use, Disclosure, and Retention of Personal Information

Personal information will not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal information will be retained only as long as necessary for the fulfillment of those purposes.

Principle 6 - Accuracy of Personal Information

Personal information will be as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used.

Principle 7 - Safeguards for Personal Information

Personal information will be protected by security safeguards appropriate to the sensitivity of the information. The methods of protection will include:

  • Organizational measures: JBH will make its employees aware of the importance of maintaining the confidentiality of personal health information through training, awareness campaigns, and confidentiality agreements
  • Physical measures including but not limited to locked filing cabinets and restricted access to offices to prevent loss, theft, unauthorized access, disclosure, copying, use and modification of personal information, regardless of its format.
  • Technological measures including but not limited to the use of passwords, encryption, and access controls.

Care will be taken in the disposal or destruction of personal information to prevent unauthorized access.

Principle 8 - Openness about Privacy Policy

JBH will make readily available to individuals specific information about its policies and practices relating to the management of personal information. A statement of information practices is posted on JBH’s external website.

Principle 9 - Individual Access to Personal Information

Written requests for access to hospital records must be submitted to JBH's Health Records Department. JBH has processes in place for access and disclosure of mental health records in compliance with PHIPA and the Mental Health Act (MHA). Individuals must provide sufficient information for JBH to confirm the existence, use, and disclosure of their personal information, Upon request, an individual will be informed of the existence, use, and disclosure of his or her personal information and will be given access to that information. JBH may opt to provide sensitive medical information through a medical practitioner. In certain situations, JBH may not be able to provide access to all personal information about an individual. Exceptions to the access requirement will be limited and specific.

An individual will be able to challenge the accuracy and completeness of the information and have it amended as appropriate. If an individual proves the inaccuracy or incompleteness of personal information to JBH's satisfaction, amendments may be made in accordance with professional and organizational standards, with clinical information and opinions retained in the health record.

Principle 10 - Challenging Compliance with the Privacy Policy

An individual will be able to address a challenge concerning compliance with the above principles to the Chief Privacy Officer. JBH will investigate all complaints. If a complaint is found to be justified, the Hospital will take appropriate measures, including, if necessary, amending its policies and practices. C. Definitions and Terms Personal health information (PHI): Any identifying information about an individual relating to the individual’s health or to the provision of health care to the individual. For example, an individual’s health number and/or medical record would be considered personal health information, subject to the Personal Health Information Protection Act (PHIPA). Personal information (PI): Identifying information about an individual that does not contain health care information. Examples include an individual’s age, religion, address and telephone number. Records that contain PI may be subject to the Freedom of Information and Protection of Privacy Act (FIPPA).

Cookie Settings

JBH website utilizes "cookie" messages to improve online visitor experiences, tracking usage and preferences. Stored in the user's browser and read upon return visits, cookies aid in analyzing website usage and content. Users can reject or cancel cookies by adjusting web browser settings.

Updating Privacy Policy

This policy will be regularly reviewed and updated as required.

Contact information

Question, concerns or complaints relating to the JBH’s privacy policy on the treatment of personal information should be directed to: Chief Privacy Officer (905)632-3737 ext. 1277
Mailing Address:
Addressed to:
Privacy Office
Joseph Brant Hospital
1245 Lakeshore Road
Burlington, Ontario
L7S 0A2
905-632-3737 ext.

Further information on privacy and personal information may be found on the website of the Privacy Commissioner of Canada at https://www.priv.gc.ca/en/

References