P33 Policy and Procedures for Privacy Inquiries updated timelines for complaint acknowledgement from 3 days to 2 days to correspond with changes to HHS policy for managing patient inquiries and complaints An additional review of P22 Policy and Procedures – for the Linkage of Records of Personal Health Information was conducted in November 2015 by the CCIS Data Stewardship Committee: P22 - Policy and Procedures for the Linkage of Records of Personal Health Information was revised to allow for data linkages and to document the related conditions and requirements Reviewed and approved by CCIS Data Stewardship Committee at the January 6th 2016 meeting. Whether new privacy policies and P10- Policy and Procedures for the Use of PHI for procedures were developed and Research had been created or submitted to the IPC implemented as a result of the for initial review; although HHS/CritiCall Ontario does review, and if so, a brief description not use PHI from the CCIS for internal research of each of the policies and purposes (which is likely why the policy was not procedures developed and created initially) a policy and procedures was drafted to implemented. reflect the requirements of the Manual and the current position of HHS/CritiCall with respect to this use of PHI. The date that each amended and The CCIS privacy and security policies were developed privacy policy and highlighted to CritiCall Ontario staff with CCIS procedure was communicated to functions during the annual CCIS Role Based agents and, the nature of the Privacy and Security Education sessions on: communication for each November 6, 2013 policy/procedure. November 20, 2014 Updates to these policies were highlighted during the annual CCIS Role Based Privacy and Security Education session on: December 11, 2015 Additional communications related to updates or amendments to CCIS privacy policies and procedure included:
P33 Policy and Procedures for Privacy Inquiries updated timelines for complaint acknowledgement from 3 days to 2 days to correspond with changes to HHS policy for managing patient inquiries and complaints An additional review of P22 – Policy and Procedures for the Linkage of Records of Personal Health Information was conducted in November 2015 by the CCIS Data Stewardship Committee: P22 - Policy and Procedures for the Linkage of Records of Personal Health Information was revised to allow for data linkages and to document the related conditions and requirements Reviewed and approved by CCIS Data Stewardship Committee at the January 6th 2016 meeting. Whether new privacy policies and procedures were developed and implemented as a result of the review, and if so, a brief description of each of the policies and procedures developed and implemented. P10- Policy and Procedures for the Use of PHI for Research had been created or submitted to the IPC for initial review; although HHS/CritiCall Ontario does not use PHI from the CCIS for internal research purposes (which is likely why the policy was not created initially) a policy and procedures was drafted to reflect the requirements of the Manual and the current position of HHS/CritiCall with respect to this use of PHI. The date that each amended and developed privacy policy and procedure was communicated to agents and, the nature of the communication for each policy/procedure. The CCIS privacy and security policies were highlighted to CritiCall Ontario staff with CCIS functions during the annual CCIS Role Based Privacy and Security Education sessions on: November 6, 2013 November 20, 2014 Updates to these policies were highlighted during the annual CCIS Role Based Privacy and Security Education session on: December 11, 2015 Additional communications related to updates or amendments to CCIS privacy policies and procedure included:
2017-hhs-criticall-review.docx