Confidentiality and Privacy

1105 Words5 Pages
Collection, use and disclosure of personal health information General limitations and requirements The Act sets out some general principles that apply to the collection, use and disclosure of personal health information. These principles are important as they apply to most collections, uses or disclosures of personal health information, even those that the Act permits without consent. The Act must be read with these principles in mind: • a custodian may only collect, use or disclose personal health information if the individual consents or the collection, use or disclosure is permitted or required by the Act; • a custodian must not collect, use or disclose personal health information if other information will serve the purpose; • a custodian must not collect, use or disclose more personal health information than is necessary to meet the purpose; • express consent is required to collect, use or disclose personal health information for marketing purposes; Fundraising • a custodian may collect, use or disclose personal health information for fundraising if the individual expressly consents. If the information consists only of the individual’s name and mailing address (or those of the individual’s substitute decision-maker), consent may be implied for fundraising purposes; • The following requirements and restrictions apply to fundraising: · Personal health information may only be collected, used or disclosed for activities undertaken for a charitable or philanthropic purpose related to the custodian’s activities; · Consent may be inferred where: · the custodian has provided a brief statement that the individual’s name and contact information will be used for fundraising purposes, unless the individual requests otherwise, together with information about how to opt-out of future fundraising solicitations, and · the individual has not opted out
Open Document