Page 10 - Policies

Medical Record policy 1.40.010). If a challenge is not resolved to the satisfaction of the
individual, UHN will record the substance of the unresolved challenge in the form of a
letter from the patient, to be stored in the patient’s medical record. When appropriate,
the existence of the unresolved challenge will be transmitted to third parties having
access to the information in question.

Ensuring Safeguards for Personal Health Information

UHN will protect the safety and respect the confidentiality of PHI through appropriate
safeguards, as per Appropriate Use of Information & Information Technology
policy 1.40.012 and Information Security policy 1.40.028.

Loss of Personal Health Information

In compliance with PHIPA, UHN will inform patients of the loss, theft or inappropriate
access of their PHI as soon as reasonably possible. (See Incident Reporting & Review
policy 3.20.005.)

Employee Training & Awareness

UHN will make its employees aware of the importance of maintaining the confidentiality
of personal health information. As a condition of employment, all new UHN employees/
agents must sign a Confidentiality Agreement (form D-3236). (See UHN’s Code of
Workplace Ethics.) All existing UHN employees will be required to re-sign the
Confidentiality Agreement annually. This safeguard may also be facilitated though
contractual provisions.

Ongoing education efforts will be delivered to ensure employees, agents, and third
parties are provided with tools, training and support as appropriate to enable them to
fulfill their duties as it relates to the privacy of PHI.

UHN is also committed to protecting the privacy of its employees. Employee personal
information will only be collected, used, and disclosed as per Personal Information
Protection policy 2.10.013.

Exceptions

Any exceptions to this policy must be approved in advance by the director of Privacy and
Access and may require the involvement of other groups. The Enterprise Privacy and
Access Office may be contacted to initiate the request, by phone at 416-340-4800 ext.
6937 (14-6937) or by email to privacy@uhn.on.ca.

Any exceptions to related policies must be approved in advance by their respective
owners.

This material has been prepared solely for use at University Health Network (UHN). UHN accepts no responsibility for use of this material by
any person or organization not associated with UHN. No part of this document may be reproduced in any form for publication without
permission of UHN. A printed copy of this document may not reflect the current, electronic version on the UHN Intranet.
Policy Number 1.40.007 Original Date 08/02
Section Privacy & Information Security Revision Dates 07/05; 11/14; 11/16
Issued By Privacy Office Review Dates
Approved By Senior Vice-president & Chief Information Page 4 of 8
Officer