January 2019

Reporting privacy breach statistics

Patients expect their health care information to be kept confidential. Protecting the privacy of patients’ personal health information is one way nurses maintain patient trust.

To help with this, there are new rules under the Personal Health Information Protection Act, 2004. Now, health information custodians are required to provide the Information and Privacy Commissioner of Ontario (IPC) with an annual report of statistics related to health privacy breaches.

IPC has opened its online statistics submission website, so custodians can submit statistics for 2018. If you are a health information custodian who has experienced at least one health privacy breach from January to December 2018, you are required by law to complete the online questionnaire. The deadline to submit is Friday, March 1, 2019.

If you do not have any health privacy breaches to report for 2018, you do not have to submit a report.

To learn more about reporting health privacy breaches, and to read guidance documents and responses to FAQs, see IPC’s 2018 Mandatory Statistics Reporting blog post.

For more information about using personal health information in in your practice, read the Confidentiality and Privacy Personal Health Information practice standard.

If you have any questions about the reporting process, contact the IPC directly.

Back to Top