Page 9 - Policies

1.2 Rules for the Use and Disclosure of PHI for the Purpose of Providing
Patient Care

1.2.1 Patient Requests for Access to Records

Patients may access some of their PHI collected for clinical care electronically using the
UHN patient portal, myUHN. Through myUHN, patients can access upcoming and past
appointments, as well as completed results, notes, reports, and other records.

Patients may also contact UHN Health Record Services (HRS) from myUHN or via email
at HealthRecordServices@uhn.ca to request access to, or copies of, their clinical
records of PHI.

Patients requesting copies of their records for themselves or for third parties (such as
lawyers or insurance companies) should complete the Authorization for Disclosure of
Personal Health Information form (form 2323) or other equivalent written request which
may include documentation by a care provider in the health record. (Form 2323 is
available on the myUHN portal and the UHN website.)

Refer to Patient Access to the Medical Record policy 1.40.003 for more information
about patients’ rights to access their records of PHI, including the right to access their
original records and/or their chart during an inpatient admission.

1.2.2 Accuracy of Records

Patients may contact HRS to challenge the accuracy and completeness of their
information as contained within their medical record, and to request a correction. If a
challenge/correction request is not resolved to the satisfaction of the patient, they have
the right to appeal UHN’s decision to the Information and Privacy Commissioner of
Ontario (IPC), and/or to submit a statement of disagreement, which UHN will store in the
patient’s medical record.

HRS may send corrected information or the statement of disagreement, at the request of
the individual, to the persons to whom UHN has disclosed the information with respect to
which the individual requested the correction of the record, except if the correction
cannot reasonably be expected to have an effect on the ongoing provision of healthcare
or other benefits to the individual.

Refer to Patient Requests for Correction to Medical Record policy 1.40.010 for more
information.

1.2.3 Patient-Requested Audits

Patients may contact UHN Privacy to request an audit log of accesses to their electronic
medical record. (Refer to the Audit Request Form.)

This material has been prepared solely for use at University Health Network (UHN). UHN accepts no responsibility for use of this material by
any person or organization not associated with UHN. No part of this document may be reproduced in any form for publication without
permission of UHN. A printed copy of this document may not reflect the current, electronic version on the UHN Intranet.
Policy Number 1.40.007 Original Date 08/02
Section Privacy & Information Security Revision Dates 07/05; 11/14; 11/16; 11/23
Issued By Privacy Office Review Dates
Approved By Vice-president & Chief Legal Officer Page 2 of 16