I’m Kate Dewhirst.

I’m a lawyer who writes about legal issues affecting healthcare in Canada

Kate Dewhirst Health Law - bringing the law to life. Meet Kate (in 13 seconds)

Health Privacy Update: When someone asks for a copy of a “complete health record”, what does that mean?

Posted by

In Decision 89 of the Information and Privacy Commissioner of Ontario deals with an access request, what lengths a health care organization has to go to look for records and what is a “complete health record”.

In this case, the complainant asked a community care access centre (CCAC) for access to his deceased wife’s complete health record. His wife had received services coordinated by the CCAC and delivered by a few different agencies. He was given a copy of the CCAC’s entire file.

When he reviewed the file, he thought there should be more records – specifically from the agencies that delivered the services. He complained to the IPC.

During the IPC process – the CCAC became part of the local health integration network (LHIN). The LHIN took over management of the privacy complaint.

The new entity, the LHIN, contacted all the service providers that had provided care to the patient as coordinated by the CCAC and got copies of their records (420 pages) and gave those to the complainant.

The complainant thought there should still be MORE records. He then stated he thought there should be copies of the communications he and his wife had with the LHIN (or CCAC), including what would have been a copy of his wife’s will.

The LHIN said “communications”? Huh. Ok. Now you are making a new request. That’s not the same thing as a “complete health record”.

The complainant was miffed. He thought the LHIN was acting in bad faith. He argued that when he asked for the “complete health record” the LHIN should have known that meant communications as well as the health records. He thought they should have from the beginning looked for any record they had about his wife.

The IPC was focused on whether the LHIN had undertaken a “reasonable search” for records and concluded the LHIN had done so.

When the complainant asked for a copy of the “complete health record”, the IPC concluded it was reasonable for the LHIN to assume that meant the traditional health records and not a wider understanding of all communications (or documents not directly related to a patient’s health care). Administrative records do not have to be included in an initial search for a request for a copy of the “complete health record”.

The IPC also said that because the LHIN coordinated the services that were delivered by other organizations, the LHIN was right to ask those agencies for a copy of their records and provide those records to the complainant.

The LHIN did not have a copy of the wife’s will. They said they never received it and it would not have been normal practice to have a copy of a will. The IPC concluded it was not necessary to look further for a copy if one could not be found.

The IPC concluded that the LHIN had acted appropriately and had fulfilled its responsibility to complete a “reasonable search” for health records. The complaint was dismissed.

Bottom Line: This is an important reinforcement of the usual practice for health care organizations when they receive generic access requests. A request for a “complete health record” can be reasonably interpreted to mean the traditional health record. A request for a complete health record does not require a health information custodian to search for administrative records or other peripheral records that could be held anywhere in the organization. That kind of secondary search would be required however on specific request – when a request includes references to records of communications or complaint or administrative content.

Want to read about other decisions of the IPC? Click here to get my free up-to-date Summary of all the IPC’s PHIPA Decisions.

Join me for my next Health Privacy Officer training and become even more confident in your role.

If you enjoyed this article please share it:

Previous and next posts from Kate:

Some of Kate’s recent and upcoming events

Team Privacy Training Events
February 12, 19, 26, 27, Mar 2, 9, 11, 24, 27

For Primary Care clinics, Hospitals, Community Agencies and Children’s Aid

Kate trains health professionals from many more health care organizations how being privacy-respectful can improve therapeutic relationships. More details...

Speaking event March 25, 2020

Osgoode Professional Development – Health Law Certificate

Kate joins the faculty for this training event. More details...

Primary care webinars: Employment Law Update & Legal Issues for EDs and Board members

Part of Kate’s monthly webinar series.

Our March webinar is on questions to ask your insurer and the April program is on changes to pregnant employees' positions.
Full details of the 2020 webinar series and registration here.

Health Privacy Officer training
April 28, 2020

For Privacy Officers within healthcare organisations.

This course focuses on how to become a more confident privacy officer and gives you the tools to document your privacy program. Full details and registration here...

Osgoode Health Privacy training
January 20 & 27 and February 3,10 & 18, 2020

Kate is the program chair for the Osgoode Certificate in Privacy in Healthcare.

This program explores the range of privacy interests that must be protected in the day-to-day treatment of patients, the development of information systems and the creation of institutional policies. More details...

Free healthcare privacy webinar - ask me anything!
March 4 (cancelled) but back April 1

Free webinars - advance registration needed

Whether you're an experienced privacy officer or new in the field, pick Kate’s brain for free for an hour, in this live webinar. No charge, but you’ll need to register in advance.

Kate Dewhirst Health Law

Kate says:

My mission is bringing the law to life. I make legal theory understandable, accessible and fun! I’m available and love to work for all organizations in the healthcare sector across Ontario and beyond.

Subscribe to my mailing list and keep up to date with news:

Latest Tweets

RT @riffcord: It's Family Day here in snowy Ontario. Wherever you are, use today to embrace the kites and anchors in your life. What are…

about 11 hours ago

Health Privacy Update: New class action certified in Ontario after privacy breach at a hospital… https://t.co/7KeAgBsoCi

about 20 hours ago

It’s not enough for health care organizations to respect patient privacy rights. I believe we have an obligation to… https://t.co/F19EYz0Uno

01:01 PM Feb 16th

contact details

901 King Street West Suite 400 East Tower
Toronto Ontario M5V 3H5

(416) 855 9557