{"id":18332,"date":"2021-08-17T22:36:56","date_gmt":"2021-08-18T02:36:56","guid":{"rendered":"https:\/\/quantumlifecycle.com\/staging\/how-quantum-works-with-healthcare-providers\/"},"modified":"2023-09-06T14:01:02","modified_gmt":"2023-09-06T18:01:02","slug":"how-quantum-works-with-healthcare-providers","status":"publish","type":"post","link":"https:\/\/quantumlifecycle.com\/en_CA\/case-studies\/how-quantum-works-with-healthcare-providers\/","title":{"rendered":"How Quantum Works with Healthcare Providers"},"content":{"rendered":"
Healthcare organizations have some of the most sensitive personal data of any industry. They also face some of the most complex regulatory requirements. As with any Canadian company that collects personal data, healthcare agencies fall under The Personal Information Protection and Electronics Documents Act (PIPEDA<\/a>), which governs how private sector organizations collect, use, and disclose personal information.<\/p>\n Yet, some provinces have their own healthcare privacy legislation in place, including Ontario\u2019s Personal Health Information Protection Act, New Brunswick\u2019s Personal Health Information Privacy and Access Act, and Newfoundland and Labrador\u2019s Personal Health Information Act. While these regulations are substantially similar to PIPEDA, it\u2019s important for health care organizations to perform their due diligence and understand which regulations apply to them.<\/p>\n PIPEDA and its counterparts are robust and complex in nature. For one, there\u2019s a wealth of personal health data encompassed by the regulation, including a patient\u2019s:<\/p>\n There are also several requirements in place for the retention and destruction of the data. Specifically, PIPEDA states<\/a> that while there is no \u201cone size fits all\u201d retention period, \u201cpersonal information that is no longer required to fulfil the identified purposes should be destroyed, erased, or made anonymous.\u201d Organizations must establish and implement guidelines and processes to meet this requirement.<\/p>\n Moreover, as the Office of the Privacy Commissioner of Canada notes<\/a>, an organization cannot simply throw away personal information. When it comes to electronic copies of patient data, the equipment storing the information can be managed in one of three ways<\/a>:<\/p>\n\n