The Saskatchewan Health Authority (SHA) Privacy & Access department works to protect the privacy of patients, clients, residents, employees, and SHA business information. Our office helps to ensure the proper collection, use and disclosure of personal health information and personal information, as well as work to embed privacy into the SHA’s culture. The Privacy & Access department provides advice and guidance on privacy best practices and expectations for SHA staff, physicians and volunteers. The Privacy & Access department:
The Health Information Protection Act (HIPA) and its Regulations provide rules and guidelines governing the collection, use and disclosure of personal health information in Saskatchewan. Under HIPA, organizations and individuals in the health system, called trustees, are responsible for protecting the privacy of your personal health information. The SHA is a committed trustee.
Accurate health information is essential to make sure you get appropriate care. We record and maintain information about your current condition and care, including the results of tests, procedures and therapies. Information such as your name, address and date of birth, and family physician/primary care provider is recorded for the purposes of identification, contact and billing.
In addition, the personal health information we collect will allow your health care team to:
Your personal health information, whether stored on paper or electronically, is kept safe and secure. Policies, procedures and technical safeguards protect how your information is collected, stored, used and destroyed.
Your health-care team accesses your health record on a need-to-know basis and views the information required to plan for and provide you with appropriate care. Others, such as lawyers or insurance companies, need your written consent before it is possible to access your information.
When personal health information is used for research purposes, the request must first receive approval from a recognized research ethics board. As well, summarized information that cannot identify individuals is used to create statistics for quality assurance, utilization measurement and performance monitoring.
Health records are periodically reviewed to evaluate the quality of care provided to you. Anyone reviewing records must follow the same privacy laws and rules required of all health-care providers.