Registed Nurses' Association of Ontario


Reporting health privacy breaches: Deadline March 1

According to new rules under the Personal Health Information Protection Act, health information custodians such as nurses, doctors, pharmacists and other health professionals in Ontario are now required to report statistics relating to health privacy breaches annually to the Information and Privacy Commissioner of Ontario.

The online statistics submission website is now open for health information custodians to submit their statistics for the 2018 reporting year. Health information custodians that have experienced at least one health privacy breach during the 2018 reporting year – from January to December – are required by law to complete the online questionnaire. The deadline to submit is Friday, March 1, 2019.

The statistical report will set out the number of times in 2018 that personal health information held by a health information custodian was stolen, lost, used without authority and/or disclosed without authority. The other sections of the report will focus on the case of the breach and the number of individuals affected. The report does not ask for personal health information.

Health information custodians that have zero health privacy breaches to report for 2018 should not submit a statistical report.

If you have any questions, do not hesitate to email or call the commissioner’s office at 416-326-3333.