Our Corporate Privacy Policy is based on ten principles for privacy protection developed by the Canadian Standards Association (CSA).  Adopted as the basis for Canadian federal privacy legislation, these principles form the ground rules for the collection, use and disclosure of personal health information, including an individual’s right to access.

Principle 1: Accountability

Kensington Health is responsible for the collection, use and disclosure of personal health information in its custody, and have delegated day-to-day responsibility for privacy compliance to Kensington Health’s Chief Privacy Officer.

Principle 2: Identifying purposes for the collection of personal health information

When Kensington Health collects personal health information from an individual, it will explain the purpose for the collection at or before the time of collection.

Principle 3: Consent for the collection, use and disclosure of personal health information

An individual’s consent is required for Kensington Health to collect, use or disclose personal health information, except where otherwise required by law.

Principle 4: Limiting collection of personal health information

Kensington Health limits the collection of personal health information to that which is necessary to fulfill the purposes identified and in accordance with provincial and federal privacy laws.

Principle 5: Limiting use, disclosure and retention of personal health information

Kensington Health only uses and discloses personal health information for the purposes for which it was collected, or as permitted by law. Personal health information is retained only as long as necessary for the fulfillment of those purposes.

Principle 6: Accuracy of personal health information

Kensington Health takes all reasonable steps to ensure personal health information is as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used.

Principle 7: Safeguards for personal health information

Kensington Health has physical, administrative and technical safeguards in place to safeguard personal health information in its custody against loss, theft, unauthorized access, disclosure, copying or modification.

Principle 8: Openness about policies and practices

Information about Kensington Health’s policies and practices relating to the management of personal health information are publicly available.

Principle 9: Individuals access to personal health information

Kensington Health will respond to an individual’s request within reasonable timelines and costs to the individual, as governed by provincial privacy laws. Kensington Health will take reasonable steps to ensure that the requested information is made available in a form that is understandable.

An individual who successfully demonstrates the inaccuracy or incompleteness of their personal health information may request that Kensington Health amend their information.

Principle 10: Challenging compliance with policies and practices

An individual may submit a complaint with Kensington Health’s compliance of the above principles to the Chief Privacy Officer or to the Information and Privacy Commissioner of Ontario.