Privacy

Our Commitment and Laws

We are committed to protecting your privacy whether you are browsing for information or conducting business with Ontario Health electronically.

For information on how we protect the privacy of individuals whose personal information and personal health information we receive see the following pages:

Cancer Care Ontario’s Privacy Page, which includes information related to Ontario Health’s roles as a prescribed person in respect of the Ontario Cancer Screening Registry and as a prescribed entity.
eHealth Ontario’s Privacy Program, which includes information related to Ontario Health’s role as a prescribed organization.
CorHealth’s Privacy Program which includes information related to Ontario Health’s role (formerly CorHealth) as a prescribed person in respect of its registry of cardiac and vascular services.
Ontario Telemedicine Privacy Centre
Health Shared Services Ontario Privacy
Health Quality Ontario’s Privacy Policy
HealthForceOntario’s Website
Trillium Gift of Life Network

Privacy Responsibilities

Ontario Health has privacy obligations under the following laws and their regulations:

The Personal Health Information Protection Act (PHIPA), including as:

a prescribed entity
a prescribed person
a prescribed organization
a health information network provider
an electronic service provider
a researcher

The Freedom of Information and Protection of Privacy Act (FIPPA)

The Gift of Life Act (GOLA)

As a prescribed entity, Ontario Health collects personal health information for health system management and planning from organizations that are involved in the care and treatment of patients.

With respect to the Cancer Screening Program, Ontario Health operates as a prescribed person, allowing us to play a more direct role in the provision of health care.

As a prescribed organization, Ontario Health has the power and duty to develop and maintain the electronic health record (EHR) for the province in accordance with Part V.1 of PHIPA and Ontario Regulation 329/04.

Annual Privacy Report

Ontario Health Annual Privacy and Security Report, 2022/2023

The Annual Privacy and Security Report describing Ontario Health’s privacy and security programs and highlighting its legislative framework and milestones achieved in 2020/21.

Information and Privacy Commissioner Review Documents

Refer to the review and approval documents below, or you can also find the documents on the Information and Privacy Commissioner website.

Approval Letters

Ontario Health 2023 Prescribed Entity, Prescribed Person and Prescribed Organization Approval Letter

The 2023 approval letter from the Information and Privacy Commissioner of Ontario approving our practices and procedures as a prescribed entity, prescribed person and prescribed organization as set out in our 2023 Triennial Reports and Sworn Affidavits.

Ontario Health 2021 Prescribed Organization Approval Letter

The 2021 approval letter from the Information and Privacy Commissioner of Ontario after initial review of our practices and procedures as a prescribed organization.

Ontario Health 2020 Prescribed Entity/Prescribed Person Approval Letter

Letter from the Information and Privacy Commissioner of Ontario approving our practices and procedures as a prescribed entity and prescribed person as set out in our 2020 Triennial Report and Sworn Affidavit.

CorHealth 2020 Prescribed Person Approval Letter

The 2020 approval letter from the Information and Privacy Commissioner of Ontario on the 3-year review of CorHealth’s registry of cardiac and vascular services.

CorHealth Transfer Approval Letter to Ontario Health

The 2021 approval letter from the Information and Privacy Commissioner of Ontario regarding the transfer of CorHealth’s practices and procedures as a prescribed person under PHIPA.

Triennial Reports and Sworn Affidavits

Ontario Health 2022 Triennial Report and Sworn Affidavit - Prescribed Person / Prescribed Entity

Our 2022 report submission to the Information and Privacy Commissioner and signed affidavit on how we protect the privacy of individuals whose personal information we collect as a prescribed entity and prescribed person for the Ontario Cancer Screening Registry under PHIPA.

Ontario Health 2020 Triennial Report and Sworn Affidavit – Prescribed Entity/Prescribed Person

Our 2020 report submission to the Information and Privacy Commissioner and signed affidavit on how we protect the privacy of individuals whose personal health information we collect as a prescribed entity and prescribed person for the Ontario Cancer Screening Registry under PHIPA (519 pages).

CorHealth 2022 Triennial Report and Sworn Affidavit - Prescribed Person

CorHealth’s 2022 report submission to the Information and Privacy Commissioner of Ontario with respect to its registry of cardiac and vascular services.

CorHealth 2020 Triennial Report – Prescribed Person

CorHealth’s 2020 report submission to the Information and Privacy Commissioner of Ontario with respect to its registry of cardiac and vascular services.

Ontario Health 2022 Triennial Report and Sworn Affidavit - Prescribed Organization

CorHealth Sworn Affidavit – Prescribed Person

Read the signed affidavit related to CorHealth’s registry of cardiac and vascular services.

Privacy Review

Review of Ontario Health: The Prescribed Organization Under the Personal Health Information Protection Act

The 2020 report of the Information and Privacy Commissioner of Ontario on their review of our practices and procedures as a prescribed organization.

Contact the Privacy Office

*Inquiries submitted to Ontario Health by email may not be secure. Please do not include personal health information including health card numbers in your correspondence.

Privacy complaints or inquiries can be submitted to:

Email: privacy@ontariohealth.ca

Phone: 1-877-280-8538

Mail:

Chief Privacy Officer
525 University Avenue, 5th Floor
Toronto, ON M5G 2L3

Also see: Freedom of Information Requests