3 PART 1: Collection, use, and disclosure The following tables will ask a series of questions to assist organizations in determining if it is in compliance with the legislation. These following tables will deal with the: Collection, Use, Disclosure. Collection occurs when a public body gathers, acquires, receives or obtains PI/PHI. Use indicates the internal utilization of PI/PHI by a public body and includes sharing of the PI/PHI in such a way that it remains under the control of that public body. Disclosure is the sharing of PI/PHI with a separate entity, not a division or branch of the public body in possession or control of the PI/PHI. The tables will also ask about safeguards that organizations can put into place to protect PI/PHI. Examples of administrative safeguards include policies, procedures, agreements, contracts, training resources.
3 PART 1: Collection, use, and disclosure The following tables will ask a series of questions to assist organizations in determining if it is in compliance with the legislation. These following tables will deal with the: Collection, Use, Disclosure. Collection occurs when a public body gathers, acquires, receives or obtains PI/PHI. Use indicates the internal utilization of PI/PHI by a public body and includes sharing of the PI/PHI in such a way that it remains under the control of that public body. Disclosure is the sharing of PI/PHI with a separate entity, not a division or branch of the public body in possession or control of the PI/PHI. The tables will also ask about safeguards that organizations can put into place to protect PI/PHI. Examples of administrative safeguards include policies, procedures, agreements, contracts, training resources.
pia-step-3-privacy-analysis.docx