Skip to main content

Privacy

At Trillium Health Partners, we recognise that your Personal Health Information deserves to be treated with the same respect, dignity and sensitivity with which we treat you, our patient. You can trust that we respect you right to access your personal health information, to ensure it remains secure and confidential, and that it is accurate.

The way the hospital collects, uses, and discloses personal information is governed by the Freedom of Information and Protection of Privacy Act (FIPPA). The hospital ensures that your personal health information is available to you, held in securely in confidence, and is accurate in accordance with the Personal Health Information Protection Act , 2004 (PHIPA). 

Information and Privacy Office

The hospital ensures compliance with FIPPA and PHIPA through the Information and Privacy Office. The Information and Privacy Office provides advice, guidance and training to hospital staff in the practical application of privacy laws and the delivery of health care.

Contact Information

If you have any questions about privacy, or believe that your personal information has been used or disclosed inappropriately, please do not hesitate to contact us.

Telephone: 905-848-7580 x:7548
Email: privacy@trilliumhealthpartners.ca
Mailing Address:
Privacy Office
The Credit Valley Hospital
Room1F648 – Health Information Management
​ 2200 Eglinton Avenue West
Mississauga, ON
L5M 2N1​


Frequently Asked Questions

1
Q.
What is privacy?
 
A.
Privacy is your right as a patient to determine when, how, and to what extent you share information about yourself with others.  You will be able to make this determination because we will notify you regarding the purposes for which we collect, use or disclose your personal health information, and we will ask you for permission to collect, use or disclose your personal health information where applicable.  Privacy is best addressed at or before the time we collect your information. 
2
Q.
What is confidentiality?
 
A.
Protecting your information after it is collected.  This means that staff members, physicians and volunteers must not talk about or disclose your personal health information to anyone other than you, your substitute decision maker where applicable, or other staff or healthcare team members that have a need to know.
3
Q.
What is security?
 
A.
Physically and technologically protecting your information after it is collected.  This means that staff members, physicians and volunteers will physically protect your information by (for instance) locking their file cabinets. The hospital will technologically protect your information by (for instance) ensuring that your information can only be accessed by those with a need to know.
4
Q.
The Statement of Information and Privacy Practices provides me with some information about who the hospital discloses my personal health information to.  Can you provide me with a few more details?
 
A.
  • Other members of your healthcare team, such as physicians, nurses and others involved in the provision of your healthcare.
  • The Provincial Ministry of Health and Long Term Care (billing information), the Canadian Institute for Health Information (statistical information), Health Canada (public health surveillance), and Cancer Care Ontario (pathology reports) – to ensure that the healthcare system is running optimally.
  • Private insurance companies regarding incidental costs not covered by provincial health insurance.  The Hospital will always obtain permission from the patient in this instance.
  • Collection agencies to collect on unpaid costs which were not covered by provincial health insurance.
  • Researchers whose studies have been approved through the hospital’s Research Committee.
5
Q.
Does the hospital share any of my information with other organizations, for reasons other than to provide me with healthcare?
 
A.
Not without your consent, or unless we are legislated to do so.
6
Q.
Does the Hospital ever sell or lease my personal health information to drug companies, or anyone else?
 
A.
No. 
7
Q.
The Statement of Information and Privacy Practices tells me that I can contact the Information and Privacy Office (905-848-7580 x:7548 ​) if I have any privacy-related inquiries or complaints.  However, if I am providing information at any point during my visit (for example at registration, or when I am in the Health Information Management department) and have a question about why certain information is being collected or how it is being used, can’t the staff member I’m dealing with answer the question?
 
A.
All of our staff are trained to respond to your questions to the best of their ability at the time.  However if the staff member is unable to respond to the question, they will seek assistance as soon as possible or if necessary they may refer you to our Information and Privacy Office (905-848-7580 x: 7548​) for further assistance.
8
Q.
What should I include in my request to access to my personal health information record?
 
A.
The written request for health records must include your name, date of birth, and mailing address as well as the type of information you are requesting.  The request must be dated, witnessed and signed by one other person.
9
Q.
How long is my personal health information kept?
 
A.
The Public Hospitals Act says that if you are eighteen years of age or older, we must keep your personal health information for at least ten years after your last visit.  If you are under eighteen years of age, we must keep your personal health information for at least ten years after you turn eighteen. 
10
Q.
Can my family see my personal health information?
 
A.
Not without your consent, or the consent of your substitute decision maker as applicable.
11
Q.
Can you provide me with some examples of when I may be required to provide consent, and tell me what happens if I am unable to provide consent?
 
A.
Some examples are consent for researchers to store and use your personal health information for clinical studies, or consent to disclose your personal health information to your private insurance company to facilitate payment of your bill. If you are unable to provide consent directly to the hospital, the consent decision falls to your appointed substitute decision maker (such as a parent or guardian).  The person is bound by law to act on your behalf and to make decisions based on their belief of what you would wish to be done if you were able to decide for yourself.
12
Q.
Can all hospital staff access my personal health record?
 
A.
  • Healthcare professionals directly involved in your care may access your personal health information. 
  • Staff members in other areas of the Hospital that are not involved in your healthcare may have access to your personal health information for the purposes of managing the healthcare system.  For instance, the finance department has access to your information to facilitate payment of your bill.
13
Q.
Will the hospital share information about my hospital visit with my family physician?
 
A.
Family physicians with hospital privileges have computer access to view personal health information belonging to their patients, and we will provide copies of key reports to your family physician if he/she is listed in your chart. 
14
Q.
If I am a youth, do I need parental consent if I wish to access my personal health information record?
 
A.
No, you do not need parental consent to access your personal health information record, although if you are unable to consent the hospital may require consent from your custodial parent (or your access parent if your custodial parent is unavailable), or guardian.
15
Q.
What happens if I am inquiring about records for a deceased patient?
 
A.
To obtain records for individuals who are deceased or incapable of signing a consent, proof of executorship or legal signing authority must be submitted with the request.
16
Q.
Many areas of the hospital are open and patients, visitors and staff in general can sometimes overhear physicians talking to patients or family about health information.  Is this a breach of patient privacy?
 
A.
Staff make every effort to discuss personal health information in a confidential manner by lowering their voice when discussing patient information in a public area (so that no-one else can overhear the conversation).