An initiative by the Government of Prince Edward Island to enhance the digital health literacy skills of residents.
Custodians: Protecting your personal health information
Today, more and more of our health care happens online. We book appointments on websites, get test results through apps or online services such as MyHealthPEI, and even talk to health care providers on a video call. In all of these digital activities, some of your Personal Health Information (PHI) is collected and shared, and it needs to be kept safe.
That’s where custodians come in.
What Is a custodian?
The role of a custodian involves being trusted with the care and protection of something important, in a variety of settings.
When it comes to your personal health information, a custodian is any person or organization that is trusted to collect, store, protect, and manage this information to provide your care, deliver programs and support the health system.
Who (or what) can be a health information custodian?
Custodians can include Health PEI, the Department of Health and Wellness, virtual care platforms (such as Maple), private clinics or health care providers (such as physiotherapists or dentists), and community pharmacies.
What do custodians have to do?
No matter who the custodian is – a private clinic or a larger health service organization – they must follow strong privacy laws. These rules help keep your personal health information (PHI) from being lost, stolen, or accessed or shared without authorization.
Custodians must:
- Keep information secure by using tools like encryption, secure logins, and firewalls.
- Limit access so only people involved in your care and those who have a need to know are permitted to access your information.
- Ask for your consent before sharing your information for purposes other than your care, unless the law requires it.
- Allow you to access your health information upon request (receive a paper copy or view through online services where available).
- Use your information only for your care and purposes related to care, unless you agree to something else.
It’s important to remember that if you choose to share your PHI with someone who is not a health care provider or a custodian, the custodian is no longer responsible for how that information is handled.
Resources
- Log in to post comments