CHIMA’s Emerging Privacy Management Practices in Health Care series

Posted on July 30, 2020 by Meghan in Blog

Emerging Privacy Management Practices in Health Care

I'm tickled pink to be the facilitator for CHIMA's new continuing education series.

The Canadian Health Information Management Association (CHIMA) recently launched a live, 5-part privacy series, Emerging Privacy Management Practices in Health Care, beginning on August 6, 2020.

Telehealth and virtual care implementation has advanced 10 years in the last 3 months in response to the coronavirus (COVID-19) pandemic. This series covers the critical aspects of implementing modern privacy management practices in your health care organization. This series is suitable for individuals with privacy-related roles (e.g., managers, vendors, or employees) across the continuum of health care (e.g., acute, primary, long-term or community care).

Each module will cover a privacy-related topic area including privacy awareness, release of information (ROI), access and disclosure, security/cybersecurity, and breach management. Environment overviews are shared throughout the series along with new opportunities for health information professionals in both traditional and emerging roles. By keeping current with these trends, health information professionals will be better prepared to assume new roles within privacy management.

Attend the live webinars to participate in a Q&A period with series facilitator and industry expert Jean L. Eaton.

Learn more at echima.ca/privacy-series

Speakers:

Jean L. Eaton, Your Practical Privacy Coach and Practice Management Mentor with Information Managers Ltd.

Jean L. Eaton is a Certified Health Information Management (CHIM) professional, and privacy awareness training facilitator.

She has had the honour of sharing her passion for practical privacy and confidentiality advice with hundreds of medical clinics, health care practices, and organizations across Canada and the United States.

Jean has over 20 years of experience in health information management and health care administration and over 15 years in her independent privacy consulting practice. She makes practical recommendations for thousands of independent health care providers to help them comply with privacy legislation and create efficient practices.

Jean is also a keynote speaker on the topic of privacy breach management and serves as an on-demand ‘virtual privacy officer’.

The live webinars will occur on the first Thursday of each month from August to December.

Module	Date	Time
1. Privacy awareness	August 6, 2020	12:00 – 1:30 pm EST
2. Release of information	September 3, 2020	12:00 – 1:30 pm EST
3. Access and disclosure in patient portals, information sharing, and health information exchange environment	October 1, 2020	12:00 – 1:30 pm EST
4. Security/cybersecurity	November 5, 2020	12:00 – 1:30 pm EST
5. Privacy breach management	December 3, 2020	12:00 – 1:30 pm EST

Purchase Your Series Pass Here!

access, cybersecurity, health care, Health Information Management, healthcare, medical, privacy, privacy awareness, privacy management, security, telehealth, virtual care

Can You Access Your Personal Information?

Posted on October 23, 2016 by Jean Eaton in Blog

October is Cyber Security Awareness Month! Information Managers is celebrating by hosting our annual 15 Day Privacy Challenge. The 15 Day Privacy Challenge is a fun, no cost educational opportunity on privacy and security.

Privacy Challenge #9 Right to Access Your Own Personal Information

Our right to the privacy of our personal information is very important.

In our organizations, when we collect personal information from our employees and clients, they have the right to access this information from us. They may want to do this to ensure the information is correct, complete, and has been used only for the purpose to which they agreed.

A privacy charter is a useful document that communicates your position on the collection, disclosure, and use of private information. It informs your clients of their rights and explains your commitment to keeping their information safe.

Here is a sample privacy charter that you can modify for your use:

To help you, we need to ask you for your personal information.
We will ask you before we share your information.
It is our job to keep your personal information safe.
We will tell you why we need to collect your personal information, before the information is collected.
Only with your agreement will we collect, use, and share personal information about you. You may change your mind at any time.
We will only ask you for the personal information that is needed to help you.
We will use your personal information only for purposes to which you agreed.
If you have any questions, speak to our Privacy Officer.
- Used with permission from NWC FASD Network

Can a patient have a copy of their own health record?

Patient Access to Health Records

Under most privacy legislation, including Alberta’s Health Information Act, a patient has the right to access their own records about themselves. The information that a patient provides to the healthcare provider belongs to the patient. The healthcare provider is responsible to maintain the information on paper or in a computer and ‘owns’ the documents.

Watch the Video Patient Access to Health Records

Do you want to enjoy the benefits of the internet without the fear of cyber attacks and privacy breaches?

Join us for the Free 15 Day Privacy Challenge for more tips, tools, and templates that you can use right away!

We are proud to be a Champion of National Cyber Security Awareness Month #CyberAware #15DayPrivacyChallenge

#15DayPrivacyChallenge, #CyberAware, access, patient access to health records, Practical Privacy Coach

7x Your Professional Education – for Members of Information Managers Network

Posted on April 7, 2016 by Jean Eaton in Practice Management Nugget Interview

In this FREE 30-minute Practice Management Nugget Webinar with Dustin Rivers you will get a behind-the-scenes peak at the upcoming 2016 Saskatchewan Connections conference.

The Connections events are each regionally based conferences designed for Access, Privacy, Security and Information / Records Management professionals working for public agencies.

Through a series of plenary, breakout and workshop sessions, delegates will gain a clearer understanding of access to information, protection of privacy, information security, and records management issues that arise in organizations subject to FOIP, LAFOIP, and HIPA. More importantly, discussion focuses on the connections between these disciplines.

25+ sessions and 35+ speakers over 2 days

Regina SK May 10-11, 2016

Learn how you can 7x your professional education starting with listening to this interview with Dustin Rivers, Executive Director, Verney Conference Management right now!

The 2016 Saskatchewan Connections: Access, Privacy, Security, Records Management & Health IM Conference, is also part of a series of regionally based conferences, all based on similar themes. They are the only multi-disciplinary, cross-jurisdictional, and community-based developed events for the greater public service across Canada. As a value-added bonus, participants of this event also receive access to the presentations from these Connections events in the same calendar year!

Verney Conference Management

www.ontarioconnections.ca

www.manitobaconnections.ca

www.maritimeconnections.ca

www.nlconnections.ca

www.skconnections.ca

Whether you are a new attendee, have attended many times in the past, are new to the field or are a seasoned veteran…this event will offer something for everyone.

Recorded Thursday, April 7, 2016

7x Your Professional Education

This conference is for you if you are an

Access & Privacy Professional
Information Technology and Information Security Expert
Academic
Lawyer
Human Resources Professional
FOIP/LAFOIP Officer
Federal Public Servant
Communications Manager
Information / Records Manager
Municipal Employee
Service Delivery Personnel
Chief Privacy Officer
Chief Counsel
Security Officer

You should also attend if:

You are a member of your organization's library community and are concerned with how information is categorized and retrieved
You are an archivist and are responsible for managing legal and historically significant information
You are a manager responsible for program and/or client records of all kinds, including personal, secure and classified information
You are a knowledge manager responsible for designing and leveraging the information management practices of your organization
You are interested in managing information for the purposes of:
- Service Improvement
- Service Transformation
- Management Accountability Framework response
- Departmental Audit
- Program Management
- Information Technology Deployment and Optimization

Dustin Rivers Executive Director Verney Conference Management

Dustin Rivers

Dustin Rivers is the Executive Director of Verney Conference Management.

Since 2002, Dustin and Verney have been providing Conference Management Solutions across Canada.

hosted by Jean Eaton of Information Managers Ltd.

Your Practice Management Mentor and Practical Privacy Coach

Register for the 2016 Saskatchewan Connections event

access, access and privacy confernce, Health IM, privacy, Records Management, Regina, Saskatchewan, security, Verney Conference Management

7x Your Professional Education

Posted on April 5, 2016 by Jean Eaton in PMN Replay

In this FREE 30-minute Practice Management Nugget Webinar with Dustin Rivers you will get a behind-the-scenes peak at the upcoming 2016 Saskatchewan Connections conference.

The Connections events are each regionally based conferences designed for Access, Privacy, Security and Information / Records Management professionals working for public agencies.

Through a series of plenary, breakout and workshop sessions, delegates will gain a clearer understanding of access to information, protection of privacy, information security, and records management issues that arise in organizations subject to FOIP, LAFOIP, and HIPA. More importantly, discussion focuses on the connections between these disciplines.

25+ sessions and 35+ speakers over 2 days

Regina SK May 10-11, 2016

Learn how you can 7x your professional education starting with listening to this interview with Dustin Rivers, Executive Director, Verney Conference Management right now!

The 2016 Saskatchewan Connections: Access, Privacy, Security, Records Management & Health IM Conference, is also part of a series of regionally based conferences, all based on similar themes. They are the only multi-disciplinary, cross-jurisdictional, and community-based developed events for the greater public service across Canada. As a value-added bonus, participants of this event also receive access to the presentations from these Connections events in the same calendar year!

Verney Conference Management

www.ontarioconnections.ca

www.manitobaconnections.ca

www.maritimeconnections.ca

www.nlconnections.ca

www.skconnections.ca

Whether you are a new attendee, have attended many times in the past, are new to the field or are a seasoned veteran…this event will offer something for everyone.

Thursday, April 7, 2016

(replay available for a limited time)

Join us for Practice Management Nugget Webinar

7x Your Professional Education

This conference is for you if you are a an

Access & Privacy Professional
Information Technology and Information Security Expert
Academic
Lawyer
Human Resources Professional
FOIP/LAFOIP Officer
Federal Public Servant
Communications Manager
Information / Records Manager
Municipal Employee
Service Delivery Personnel
Chief Privacy Officer
Chief Counsel
Security Officer

You should also attend if:

You are a member of your organization's library community and are concerned with how information is categorized and retrieved
You are an archivist and are responsible for managing legal and historically significant information
You are a manager responsible for program and/or client records of all kinds, including personal, secure and classified information
You are a knowledge manager responsible for designing and leveraging the information management practices of your organization
You are interested in managing information for the purposes of:
- Service Improvement
- Service Transformation
- Management Accountability Framework response
- Departmental Audit
- Program Management
- Information Technology Deployment and Optimization

Dustin Rivers Executive Director Verney Conference Management

Dustin Rivers

Dustin Rivers is the Executive Director of Verney Conference Management.

Since 2002, Dustin and Verney have been providing Conference Management Solutions across Canada.

hosted by Jean Eaton of Information Managers Ltd.

Your Practice Management Mentor and Practical Privacy Coach

Register for the 2016 Saskatchewan Connections event

access, access and privacy confernce, Health IM, privacy, Records Management, Regina, Saskatchewan, security, Verney Conference Management

2016 Saskatchewan Connections Conference

Posted on March 2, 2016 by Jean Eaton in Blog

Hosted by the Saskatchewan Ministry of Justice, Access and Privacy Branch (click here to learn more about the hosts), the 2016 Saskatchewan Connections Conference – Access, Privacy, Security, Records Management and Health IM is a regionally based conference intended to assist public bodies in developing connections between these disciplines and address the associated challenges.

Access, Privacy, Security and Information / Records Management challenges are intertwined with almost everything public bodies do. Through a series of plenary, breakout and workshop sessions, delegates will gain a clearer understanding of access to information, protection of privacy, information security, and records management issues that arise in organizations subject to FOIP, LAFOIP, and HIPA. More importantly it focuses on the connections between these disciplines.

Click here to learn more about this event!

May 10-11, 2016

Regina, SK

Topics include:

Information and Privacy Commissioner of Ontario
Data Management/Governance – Director Enterprise Architecture, University of Waterloo
Joint Study with Forrester Research and ARMA International – Forrester Research
Establishing a Social Media Policy that Works for YOUR Organization – Executive Director, Tourism Saskatchewan
BIG DATA and Open Government – Cisco Systems Research Chair in Big Data and Open Government and Assistant Professor, Johnson-Shoyama Graduate School of Public Policy, University of Regina
And more!

Pre-conference workshops include “4 Step Response to a Privacy Breach” with Jean L. Eaton, Your Practical Privacy Coach with Information Managers Ltd.

Hosted by the Ministry of Justice
and
brought to you by Verney Conference Management

@SK_Connections, access, privacy, Records Management, Saskatachewan Connections, Verney Conference Management

Privacy Challenge #9 Right to Access

Posted on October 23, 2015 by Meghan Davenport in Archive

The Right to Access Your Own Personal Information

Our right to the privacy of our personal information is very important.

In our organizations, when we collect personal information from our employees and clients, they have the right to access this information from us. They may want to do this to ensure the information is correct, complete, and has been used only for the purpose to which they agreed.

A privacy charter is a useful document that communicates your position on the collection, disclosure, and use of private information. It informs your clients of their rights and explains your commitment to keeping their information safe.

Can a Patient Have a Copy of their own Health Record?

Posted on July 23, 2014 by Meghan Davenport in Members Only, Past Events, PMN Replay

Can a Patient Have a Copy of their own Health Record – Tweet This!

with Jean Eaton, Information Managers Ltd.

Recorded Live Thursday July 17, 2014 12 noon to 12:30 pm MST

How you respond to patient access request is a key indicator of good customer service and business practices in your healthcare practice.

In our next Practice Management Nugget interview, we will take your questions on patient access requests. Review current best practices to respond to patient access requests

to their own health information
transfer to another healthcare provider

A patient has the right to know how their health information is being collected, used, and disclosed. A patient has the right to access their own health information. A healthcare practice that demonstrates attention to detail, courtesy to the patient, and respect for confidentiality will also have good business practices and excellent customer service.

In this Webinar, Jean will give you:

Templates
Tools and
Tips

You can use right away!

Resources:

Webinar Learning Guide

DT – Disclosure Decision Tree

DT – Privacy Statements in Plain Language

DT – Closing (or moving) a Physician Practice

Also see our article, “Patient Access to Health Records”

Sign Up for Practice Management Nuggets!

Subscribe to Privacy Nuggets Newsletter!

Live Webinar:
After the Event
Audio only

Audio and Slides

access, healthcare, patient helath records, Practical Privacy Coach, privacy

Alberta Netcare: What are your Patient Rights?

Posted on January 25, 2013 by Jean Eaton in Blog

Primary Care Providers may expect their patients to be asking more questions about Health Information in Netcare. Review this information and your policies and procedures with your staff so that you know how to respond.

In order to mark Data Privacy Day 2013 (January 28, 2013), the Information and Privacy Commissioner of Alberta, Jill Clayton, has announced a new initiative to inform Albertans about their privacy rights.

Under the authority of the Health Information Act (HIA), your health information is available through the province-wide electronic record system named Alberta Netcare. Netcare is a network of information systems that allows authorized users to see prescriptions, lab results, diagnostic images, and hospital reports. It is used throughout Alberta in hospitals, and in medical clinics and pharmacies.

Consent to have your health information in Netcare is not required by law, but you do have rights that allow you to exercise privacy control.

With the provincial electronic health record system, Alberta Netcare, you have the right to:

Know why your health information is collected and whether it is available in Netcare
Know what information about you is in Netcare by asking for a print-out
Limit access to your Netcare record by asking for your information to be masked
Know who has looked at your information in Netcare
Request that errors be corrected
Ask the Information and Privacy Commissioner to review or investigate if you are not satisfied with a decision or response you receive about any of these rights

See the OIPC webpage and contact information, visit: http://www.oipc.ab.ca/pages/HIA/NetcareKnowYourRights.aspx

To view the News Release from the OIPC, visit: http://www.oipc.ab.ca/Content_Files/Files/News/NR_Netcare_Know_Rights_Jan_2013.pdf

access, Alberta, electronic health record, Health Information Act, Netcare, OIPC, patient rights, privacy

Charges laid under the Health Information Act

Posted on October 31, 2012 by Jean Eaton in Blog

A self-reported breach by an individual to the Office of the Information and Privacy Commissioner resulted in an offence investigation being opened into suspicious access to health information. The completed investigation, after being referred to Crown prosecutors at Alberta Justice, led to thirty-one charges under the Health Information Act being laid for improperly accessing other individuals’ health information. Another charge was laid for inappropriate use of health information, another for inappropriate disclosure of health information, and one more charge for knowingly falsifying a record. In addition to these thirty-four charges under the Health Information Act, six charges were also laid under the Criminal Code.

The Calgary Herald reports that Brian Hamilton, OIPC Director for the Health Information Act, would only confirm the accused is not a doctor or other medical professional. The matter will be heard in Airdrie Provincial Court on Thursday, October 18, 2012.

The Edmonton Journal also reported that, in addition to the charges under the Health Information Act, the accused may face up to six Criminal Code charges.

Each organization has a responsibility to ensure that their employees (affiliates) receive education and training in their roles and responsibilities under the HIA. Information Managers can help you by providing training on-site and now by webinar. Click here for more information.

For more information, see:
the OIPC Website (http://www.oipc.ab.ca/Content_Files/Files/News/NR_Oct_2012.pdf)

http://www.calgaryherald.com/health/Charges+laid+improper+access+health+files/7400003/story.html

http://www.edmontonjournal.com/health/Alberta+Justice+lays+charges+improperly+accessing+health+information/7399425/story.html

access, Alberta, complaint, disclosure log, Health Information Act, HIA, improperly accessing health information, OIPC, privacy, privacy breach, training