GMCH Privacy Policy
GMCHS’ privacy standards are outlined in a new Privacy Policy and related Procedures. These documents are posted here on this website and in the "GMCH Administrative Manual" under Privacy of Personal Information.
All staff are expected to be familiar with the new Privacy Policy and its accompanying procedures.
At GMCH, many privacy standards are already well established. The new policy will strengthen our ability to keep our patients’ information private.
All staff will be requested, in the near future, to read and sign an updated "Confidentiality Agreement", which outlines the Hospital privacy policy and staffs’ responsibilities.
Staff Personal Information
GMCH is also responsible for ensuring the protection of personal information of past, current and prospective staff members. This information is also subject to the "need-to-know" principle.
Personal information related to the Hospital’s staff members is collected, used, shared and retained for the following primary reasons: human resource management, benefit and payroll administration, administration of the hospital, and complying with legal and regulatory requirements.
Individuals must express consent for personal information to be shared in the following situations
- For Employee Health Services to disclose any personal health information to any other department, individual or external agency,
- For the Human Resources Department and Payroll to disclose personal information to external organizations or individuals (such as banks, lawyers, insurance companies).
Monitoring Privacy at GMCH
Staff who notice breaches of GMCHS’ Privacy Policy are expected to report them to their supervisor or manager.
All breaches of privacy will be investigated. Depending on the nature of the breach, the severity of the breach and the number of occurrences, the investigation may result in disciplinary action up to and including termination or loss of privileges.
Protecting Our Patients' Right to Privacy
At GMCH, an important part of our commitment to provide health services to our patients is our respect for their right to privacy.
"Need-To-Know" Principle
Patient and staff personal information is only used or shared on a "need-to-know" basis to perform your job duties.
Consent
The information obtained from our patients is only obtained or used with their permission (ie., consent).
Patient personal information will not be used for a new purpose without their prior consent, unless required by law. Patient consent can be either express or implied.
Implied Consent
By requesting health care services at GMCH, patients imply consent for their personal information to be used for the following purposes:
- Providing health care and treatment.
- Meeting GMCH administrative needs.
- Complying with legal and regulatory requirements (such as providing Public Health with information about contagious diseases).
- Addressing Ministry of Health reporting requirements.
- Meeting legal standards to supply health care registries such as the Ontario Cancer Registry or the Ontario Cardiac Care Network.
- Making fundraising requests. (name and address only)
Express Consent
In any other situation, GMCH will first obtain express consent from the patient to use or share their personal information. This consent may be verbal or written, depending on the situation.
For example, in the following situations express consent must be obtained from a patient:
- Sharing health information with family members or others who have an interest in the patient’s well-being.
- Participating in clinical research.
Know Your Responsibilities
When using or sharing patient (or staff) personal information GMCH staff are expected to:
- Ensure the "need-to-know" principle is being met.
- Consider whether you require express consent from an individual prior to collecting, using or sharing any personal information.
- >Avoid speaking about private information in a public area. However, if necessary, for example at a nursing station, speak in a low voice or seek out a private area for any private conversation.
- Know which existing legislation overrides the privacy policy and permits information to be shared without consent (eg., Child & Family Services Act or the Substitute Decisions Act ).
- >Respond to all privacy inquiries from patients. If you need help, contact your manager, or the Information Services department, or the Chief Privacy Officer.
Computer Security
Information and communication technologies are provided to GMCH staff to conduct Hospital business.
Communications sent and received through these systems are the property of the Hospital. To ensure the security of personal information, GMCH monitors these systems regularly.
Staff can take the following actions to maintain the security of GMCH’s electronic communications systems:
- Sign off computer terminals after completing one’s work.
- Don’t share passwords.
- Use Hospital equipment only for work-related purposes.
- Comply with copyright and/or patent laws when copying or transmitting documents.
- When sending email, make a notation on any confidential or sensitive information.
Information sessions, presentations at departmental meetings and other communication strategies will be used to support staff to become familiar with new privacy practices.
Chief Privacy Officer
The hospital has appointed the Manager of Information Services as the Chief Privacy Officer. If you have any questions, contact your supervisor or manager, or the Chief Privacy Officer:
Lyn Schmeler, Manager of Information Services
Phone: 519.843.2010 ext 213
Email: This e-mail address is being protected from spambots. You need JavaScript enabled to view it