Controversial privacy law changes take hold

Brian Bowman — Mon, 17 May 2010 15:01:14 +0000

Amendments to Manitoba’s patient privacy law are now in effect. The controversial changes to The Personal Health Information Act went largely unnoticed in the province, but will have big implications for Manitobans and the fundraising foundations that many hospitals, personal care homes or other designated health care facilities rely upon to support innovation in health research and patient care. What were these amendments and why are they controversial?

Mandatory privacy breach notification requirement inevitable

Brian Bowman — Tue, 15 Dec 2009 16:40:30 +0000

For years now, Ontario’s Personal Health Information Protection Act has contained provisions requiring health custodians to notify individuals if their personal health information is stolen, lost or accessed by unauthorized persons. Until now, such mandatory privacy breach notification provisions have been limited to the sphere of health care in Ontario. That’s about to change.

The federal Personal Information Protection and Electronic Documents Act will likely contain mandatory privacy breach notification provisions in the near future. Since 2006, Special Committees at both the Federal and Provincial (Alberta and B.C.) levels have convened and generated a series of recommendations relating to breach notification. For further information on these recommendations, see the final reports of the Federal , Alberta and B.C. committees.

The most important recommendation independently generated by each of the committees provides that organizations should be under a statutory breach notification duty. On October 27, 2009, the initial step toward implementing this recommendation was taken in the Alberta Legislature with the first reading of Bill 54: Personal Information Protection Amendment Act, 2009. The Alberta privacy breach notification provisions will soon come into force. British Columbia and the Feds are expected to follow suit and implement similar requirements in the near future. When that occurs, private sector organizations across Canada will be required by applicable law to notify affected individuals when privacy breaches occur.

The best advice is to make sure that privacy protection policies, procedures and training are implemented and enforced… now.

Posted in Personal Information, PHIA, PIPEDA, Privacy, Privacy Breach Tagged: Personal Information, PHIA, PIPEDA, Privacy, Privacy Breach

Brian Bowman - On the Cutting Edge » PHIA

Controversial privacy law changes take hold

Mandatory privacy breach notification requirement inevitable