Personal Health Information Protection Act (2004)
As a provider of services to permit health care providers to use electronic means to collect, use, disclose, modify and retain personal health information, as described in Ontario's Personal Health Information Protection Act (PHIPA) regulations, xwave has implemented safeguards to protect the confidentiality of patient personal information that is collected through the CMS system and stored in the SSHA data centre.
Pursuant to applicable regulations under PHIPA, xwave takes steps to:
 |
|
|
| • | Notify the responsible health care provider of any privacy breaches; | |
| • | Perform risk and privacy assessments; | |
| • | Provide an audit trail; | |
| • | Ensure that third parties engaged by xwave to perform the CMS services on its behalf comply with applicable restrictions on the use and disclosure of personal health information; | |
| • | Make publicly available information about the CMS services to the custodian. |
Additional information on PHIPA can be found at www.health.gov.on.ca or www.ipc.on.ca.
