KINGSTONGENERALHOSPITAL

ADMINISTRATIVEPOLICYMANUAL

Subject:ConsentManagement/Lock-boxNumber:09-054

Prepared/Reviewedby:PrivacyOffice,CIOLeaders,ProfessionalPracticePage:1of4

Council,NursingPracticeCouncil,PatientFamilyOriginalIssue:2017.01

AdvisoryCouncil,PlanningandPerformanceRevised:NEW

Committee

Issuedby:PresidentandChiefExecutiveOfficer

Principle

UnderPHIPA,aHealthInformationCustodian(HIC)musthaveconsentforthecollection,use

anddisclosureofpersonalhealthinformationforhealthcarepurposes.UnderthePersonal

HealthInformationProtectionAct,2004(PHIPA),anindividualhastherighttowithholdor

withdrawpermissionforthecollection,useanddisclosureoftheindividual’sPHIforthepurpose

ofprovidingorassistingintheprovisionofhealthcaretotheindividual.

HICsareresponsibleforimplementingpoliciesandproceduresthatenableindividualsto

expresstheirprivacypreferencesinregardstotheirPHIinordertoeffectivelymanageconsent

directives/lock-box.

Preamble:

InordertocomplywithPHIPA,itisimperativethateveryoneinvolvedinthecollection,useand

disclosureofPHI,followconsentdirectives.Unauthorizedaccesstoanindividual’sPHIcan

haveseriousconsequences.Thispolicysetsoutthepracticesandproceduresforrespectingand

managingconsentdirectives/lock-boxandoverridesofconsentdirectives/lock-box.

Definitions:

Access:UnderPHIPA,‘access’referstoanindividual’srighttovieworobtaincopiesoftheir

ownPHI.Underthispolicy,thetermalsoreferstoanyactionthatinvolvesanauthorized

individualbeingabletovieworusePHI,asinthecontextofprovidinghealthcareand

treatment.

Agent:Apersonwhoacts