prohibited from accessing and using more PHI than is reasonably necessary to meet the purpose for which they have been given access; to only that which is permitted by (as per the PHIPA approved and to that which is required by the user to fulfill CCIS Access to PHI Request Form); their employment or contractual purpose. Prior to accessing PHI, all users will make every effort to use information that is either de-identified or aggregated, whenever possible. Roles that Access Personal Health Information The following identifies the groups/roles that support the CCIS mandate and require access to personal health information, the purpose for the access to PHI and their corresponding Access Level. Group/Roles Purpose for Access to Personal Access Level Health Information from CCIS CCIS Product Manager Requires functionality to 1 and 2 (Support) discharge oversight responsibilities including: CCIS Help Desk Lead, Technical Lead, Application Lead, HL7 Lead CCIS Help Desk Requires functionality to 1 (Admin) and 2 (Support) discharge operational support duties. CCIS Audit Officer Requires functionality to perform 3 (Audit) audits as set out in HHS/CritiCall policy. CCIS Training Requires functionality to provide 2 (Support) Team/Educators real-time on-site individual user support on demand. Navantis Solution Architect Requires functionality to provide 2 (Support) second level support and only if directed. Restrictions on Disclosures of Personal Health Information This privacy policy indicates that HHS/CritiCall in its role as a prescribed person, does not routinely disclose PHI, unless permitted by and its accompanying Regulation. This privacy PHIPA policy and procedures imposes conditions and/or restrictions on the purposes for which and the circumstances in which an agent granted approval to access and use PHI is permitted to disclose that PHI. All employees, agents and vendors that are permitted to disclose PHI, may only do so under the direction of the CritiCall Privacy Lead, the CritiCall Executive Director and the Director of Privacy and Freedom of Information, HHS. All disclosures of PHI shall be in compliance with and its Regulation, PHIPA P12: Policy and Procedures for Disclosure of Personal health Information for Purposes other than Research; P24: Policy and Procedures with Respect to
prohibited from accessing and using more PHI than is reasonably necessary to meet the purpose for which they have been given access; to only that which is permitted by PHIPA (as per the approved CCIS Access to PHI Request Form); and to that which is required by the user to fulfill their employment or contractual purpose. Prior to accessing PHI, all users will make every effort to use information that is either de-identified or aggregated, whenever possible. Roles that Access Personal Health Information The following identifies the groups/roles that support the CCIS mandate and require access to personal health information, the purpose for the access to PHI and their corresponding Access Level. Group/Roles Purpose for Access to Personal Health Information from CCIS Access Level CCIS Product Manager Requires functionality to discharge oversight responsibilities including: CCIS Help Desk Lead, Technical Lead, Application Lead, HL7 Lead 1 and 2 (Support) CCIS Help Desk Requires functionality to discharge operational support duties. 1 (Admin) and 2 (Support) CCIS Audit Officer Requires functionality to perform audits as set out in HHS/CritiCall policy. 3 (Audit) CCIS Training Team/Educators Requires functionality to provide real-time on-site individual user support on demand. 2 (Support) Navantis Solution Architect Requires functionality to provide second level support and only if directed. 2 (Support) Restrictions on Disclosures of Personal Health Information This privacy policy indicates that HHS/CritiCall in its role as a prescribed person, does not routinely disclose PHI, unless permitted by PHIPA and its accompanying Regulation. This privacy policy and procedures imposes conditions and/or restrictions on the purposes for which and the circumstances in which an agent granted approval to access and use PHI is permitted to disclose that PHI. All employees, agents and vendors that are permitted to disclose PHI, may only do so under the direction of the CritiCall Privacy Lead, the CritiCall Executive Director and the Director of Privacy and Freedom of Information, HHS. All disclosures of PHI shall be in compliance with PHIPA and its Regulation, P12: Policy and Procedures for Disclosure of Personal health Information for Purposes other than Research; P24: Policy and Procedures with Respect to