Accurate health information is essential to make sure you get appropriate care. Each time you visit the hospital we collect information. We record and maintain information about your current condition and care, including the results of tests, procedures and therapies. Information such as your name, address and date of birth is recorded for the purposes of identification, contact and billing. PHIPA allows for additional collections and uses of a patient’s health card number for identity verification purposes and to link records of personal health information. Your personal information whether stored on paper or electronically is kept safe and secure. We adopt collection, storage and security practices to protect against unauthorized access, disclosure and destruction. Information is collected, retained and destroyed in compliance with hospital policy. We conduct routine audits of our health information system to ensure your Personal Health Information is viewed by those based on need to know.
Policies and procedures are in place that protect how your information is collected and used. We will share your health information with your family doctor, specialist or other health care providers who are involved in your care. Staff have access to your information on a need to know basis to do their work. All staff are bound by a confidentiality agreement. Your information is protected by administrative, physical and technical safeguards. You may request that your health information not be shared with your health care providers. Your consent is required to share your health information with third parties such as lawyers, insurance companies or police.
How is Information Used:
To receive payment for the care we provide
To meet legal and regulatory requirements
To improve the quality and efficiency of care
To support research and educational opportunities
Unless you tell us not to, we may also disclose your information to visitors or callers so they can reach you in the hospital.
Further information about how the hospital collects, uses and discloses health information can be obtained from the Your Health Information and Your Privacy in Our Hospital pamphlet available to all visitors and staff.
PHIPA and its regulations provide special rules for fund raising. The hospital may disclose your name and mailing address for fund raising activities for purposes related to operations of the hospital. To opt out, contact the Privacy Office.
The privacy office consists of a Chief Privacy Officer who is a resource for privacy information, for policy development and leading education to staff, patients and visitors.
We conduct privacy training routinely for staff, volunteers and students. All staff, volunteers and students are required to sign a pledge of confidentiality. Privacy policies provide rules for the collection, use, disclosure and retention of health information. It is based on 10 internationally recognized privacy principles.
Principle 1 – Accountability for Personal Information
NWHC is responsible for personal information under its custody or control and has designated an individual, the Chief Privacy Officer, who is accountable for NWHC’s compliance with the following principles.
Principle 2 – Identifying Purposes for the Collection of Personal Information
NWHC, at or before the time personal information is collected, will identify the purposes which personal information is collected. The primary purposes are the delivery of direct patient care, the administration of the health care system, to conduct research and statistics and to comply with legal and regulatory requirements.
Principle 3 – Consent for the Collection, Use and Disclosure of Personal Information
The knowledge and consent of the individual are required for the collections, use or disclosure of personal information, except where inappropriate.
Principle 4 – Limiting Collection of Personal Information
The collection of personal information will be limited to that which is necessary for the purposes identified by NWHC. Information will be collected by fair and lawful means.
Principle 5 – Limiting Use, Disclosure and Retention of Personal Information
Personal information will not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal information will be retained only as long as necessary for the fulfilment of those purposes.
Principle 6 – Ensuring Accuracy of Personal Information
Personal information will be accurate, complete and up-to-date as is necessary for the purposes for which it is to be used.
Principle 7 – Ensuring Safeguards for Personal Information
Security safeguards appropriate to the sensitivity for the information will protect personal information.
Principle 8 – Openness about Personal Information Policies and Practices
NWHC will make readily available to individuals’ specific information about its policies and practices relating to the management of personal information.
Principle 9 – Individual Access to their own Personal Information
Upon request, an individual will be informed of the existence, use and disclosure of his or her personal information and will be given access to that information. An individual will be able to challenge the accuracy and completeness of the information and have it amended as appropriate.
Principle 10 – Challenging Compliance with NWHC’s Privacy Policies and Practices
An individual will be able to address a challenge concerning compliance with the above principles to the Corporate Privacy Officer.
Statements may be updated at any time. The date is reflected.
Last updated: August 5, 2021