I’m Kate Dewhirst.

I’m a lawyer who writes about legal issues affecting healthcare in Canada

Kate Dewhirst Health Law - bringing the law to life. Meet Kate (in 13 seconds)

Are patients entitled to know the names of their health care providers?

Posted by

In the last month I have been asked three times a variation on the theme of this question: “Do we have to tell a patient the full names of our staff if the patient asks?”

The answer is generally, yes.

Today, the Information and Privacy Commissioner of Ontario (IPC) published an order on this exact topic.

Decision 90

The Red Cross provided home care services to an individual. He was verbally abusive to staff. He used derogatory language about the staff who worked with him and claimed women generally lacked intelligence and skills. He was by all accounts a “challenging” person.

He asked the Red Cross for a copy of his full health record.

The Red Cross provided him with a copy of his file, but redacted the names of their employees.

The man complained to the IPC.

The Red Cross argued that it was unsafe to provide the client with the full names of the staff members who had provided care to him in his home. They were worried he would use the information to find out where the staff lived. The Red Cross was concerned for staff safety and being able to meet its ethical and legal obligations to protect them.

The Red Cross claimed an exemption to the client’s normal right of access to his health records under section 52(1)(e)(i) of the Personal Health Information Protection Act, 2004. The Red Cross said he could have the vast majority of his records, but not the names of their staff members.

The IPC disagreed with the Red Cross and ordered them to release the unredacted record with the full employee names to the complainant.

In this decision, the IPC stated that there was no evidence of the potential for harm to the employees beyond that which was merely possible or speculative. There had been no actual physical threats to the staff. There was no evidence to support the claim of a reasonable risk of harm.

The IPC reviewed similar cases in the freedom of information sector and included a statement from FIPPA Order P0-1940 which read:

There are occasions where staff working in “public” offices […] will be required to deal with “difficult” clients. In these cases, individuals are often angry and frustrated, are perhaps inclined to using injudicious language, to raise their voices and even to use apparently aggressive body language and gestures. In my view, simply exhibiting inappropriate behaviour in his or her dealings with staff in these offices is not sufficient to engage a [defence of risk of harm under FIPPA]. Rather, as was the case in this appeal, there must be clear and direct evidence that the behaviour in question is tied to the records at issue in a particular case such that a reasonable expectation of harm is established.

Bottom Line: Many health sector organizational Codes of Conduct and patient rights statements include a positive commitment such as: “You are entitled to know who has provided you with care”.  It is important that we tell our patients who we are. It’s an act of courtesy and respect.

Patients also have rights of access to their health records where names of their providers will be included as a matter of default.

This decision supports the notion that there could be rare situations where it is appropriate to deny a patient or client the full name of care providers. Those situations must be based on evidence of risks of harm beyond mere possibility or speculation. If your team has received threats of physical violence, those threats should be recorded and would justify not sharing the names of staff.

Want to read about other decisions of the IPC? Click here to get my free up-to-date Summary of all the IPC’s PHIPA Decisions.

Join me for my next Health Privacy Officer training and become even more confident in your role.


If you enjoyed this article please share it:


Previous and next posts from Kate:

Some of Kate’s recent and upcoming events

Team Privacy Training Events

April 15, May 3, June 7, 13, 20 & 25

For Primary Care clinics and FHTs

Kate trains health professionals from many more primary care organizations how being privacy-respectful can improve therapeutic relationships. more details...

Speaking event

April 10, 2019

At Osgoode Hall

Kate speaks at the Osgoode Health Law Certificate workshop on privacy for health care organizations. More details...

Primary care webinars: Contracts & Communications

April 11 and May 2, 2019, 12 noon

Part of Kate’s monthly webinar series.

Our April webinar is on employee contracts, and in May our title is communication faux pas.

Full details of the 2019 webinar series and registration here.

Privacy Officer training

April 30 through June 4, 2019

Kate’s specialist training course for Privacy Officers in health organizations.

Open to all health Privacy Officers, as well as those hoping to become Privacy Officers. Full details and registration for Privacy Officer training next spring here...

Advanced Privacy Officer training

June 18, 2019

For experienced Privacy Officers within healthcare organisations.

This one day training course focuses on how to handle difficult privacy situations using real-life (but anonymized) case studies and role-play. Full details and registration here...

Free healthcare privacy webinar - ask me anything!

April 3, 2019 12 noon - 1 pm and
May 1, 2019 9 - 10 am

Free webinar - advance registration needed

Whether you're an experience privacy officer or new in the field, pick Kate’s brain for free for an hour, in this live webinar. No charge, but you’ll need to register in advance.

Kate Dewhirst Health Law

Kate says:

My mission is bringing the law to life. I make legal theory understandable, accessible and fun! I’m available and love to work for all organizations in the healthcare sector across Ontario and beyond.

Subscribe to my mailing list and keep up to date with news:

Latest Tweets

What do #FamilyHealth teams need to know about #SocialMedia and the #Law? https://t.co/3F53YMTNuq #healthprivacy #FHTs #HealthLaw #employee

about 10 hours ago

[VIDEO] Managing difficult employees https://t.co/iDKaJRJMWb #employees #employment #career #healthinformation #healthprivacy #HealthLaw

about 16 hours ago

What happens when someone asks for access to recordings? It depends. Here’s a story about what might happen.… https://t.co/HSNrHEExC2

about 20 hours ago

contact details

901 King Street West Suite 400 East Tower
Toronto Ontario M5V 3H5

(416) 855 9557

.