Are You A Health Information Custodian? Track All Privacy Breach Statistics for Your Practice!

Spring 2018

By Marnie Lofsky, Director of Professional Practice

As of March 1st, 2019, Massage Therapists and all other regulated health professionals who are a Health Information Custodian (HIC)1 will be required to provide an annual report to the Information and Privacy Commissioner (IPC). The annual report must identify the number of times, in the preceding calendar year, personal health information in the HIC’s custody or control was stolen, lost, used without authority, and/or disclosed without authority (examples include: loss of paper client records, misdirected fax or emails, a health professional who does not provide care to a client reading the client’s record).

In order to prepare for this reporting requirement, HICs must track any privacy breach statistics as of January 1st, 2018. To learn more about the requirements please click here.

For more information on the IPC, please visit:

1 The IPC defines a HIC as a person or organization who has custody or control of personal health information as a result of, or in connection with, performing the duties or the work of providing healthcare. The person must be a health care practitioner or a person who operates a group practice of health care practitioners. The HIC is responsible for identifying what information will be collected, used and disclosed; ensuring clients have access to their personal health information; facilitating corrections or amendments of the personal health information; and ensuring safe storage, retention and disposal of health information. You may be a HIC if you are in independent practice or work as an independent contractor within a multi-disciplinary clinic/spa. You need to understand your obligations based on your contract or employment arrangement.

Social media & sharing icons powered by UltimatelySocial