Our Privacy Policy is based on international standards for privacy protection developed by the Canadian Standards Association and adopted as the basis for Canadian federal privacy legislation.
Below are the ten principles as they apply to us:
Principle 1 - Accountability for Personal Health Information
LHSC is responsible for personal information under our control and has designated individuals (a Privacy Director, Manager and Privacy Office staff) who are accountable for compliance at all hospital sites.
Principle 2 - Identifying Purposes for the Collection of Personal Health Information
We will identify the purposes for which personal information is collected at or before the time the information is collected.
Principle 3 - Consent for the Collection, Use, and Disclosure of Personal Health Information
The knowledge and consent of the individual, or person authorized to consent on behalf of the individual, are required for the collection, use or disclosure of personal health information, except where otherwise required by law.
Principle 4 - Limiting Collection of Personal Health Information
We will limit the collection of personal information to that which is necessary for the authorized purposes identified. Information will be collected by fair and lawful means.
Principle 5 - Limiting Use, Disclosure, and Retention of Personal Health Information
Personal health information will not be used or disclosed for purposes other than those for which it was collected. Personal health information will be retained only as long as necessary for the fulfillment of those purposes.
Principle 6 - Ensuring Accuracy of Personal Health Information
Personal health information will be as accurate, complete and up-to-date as is necessary for the purposes for which it is to be used.
Principle 7 - Ensuring Safeguards for Personal Health Information
Personal health information will be protected by security safeguards appropriate to the nature and format of the information being stored.
Principle 8 - Openness About Personal Health Information Policies and Practices
LHSC will make readily available to individuals specific information about its policies and practices relating to the management of personal health information.
Principle 9 - Individual Access to Own Personal Health Information
Upon request, an individual will be informed of the existence, use and disclosure of his or her personal health information and will be given access to that information. An individual will be able to challenge the accuracy and completeness of the information and have it amended as appropriate.
Principle 10 - Challenging Compliance with the Hospital's Privacy Policies and Practices
An individual will be able to address a challenge or complaint concerning compliance with the above principles to the Chief Privacy Officer or to the provincial Information Privacy Commissioner.
