I’m Kate Dewhirst.

My team and I write about legal issues affecting healthcare in Canada.

Kate Dewhirst Health Law - bringing the law to life. Meet Kate (in 13 seconds)

Is an access-only parent entitled to their children’s health information?

Posted by

In a new Decision 96 of the Information and Privacy Commissioner of Ontario (IPC), a father who had access-only (not custody) of his children wanted a certain information from a health care provider. The health care provider refused to confirm or deny they had information about the children. The father complained to the IPC.

The father argued:

  1. He was entitled to the information as the children’s father
  2. He wanted administrative records only and not records of personal health information when he asked for the dates and times of scheduled appointments, intake documents and information about the intake process (he specifically did not ask for copies of counselling records)
  3. A court order gave him the authority to receive the same information as his ex-wife received about the children from the health care provider.

The IPC made a lot of interesting clarifications:

  1. It would not confirm or deny that the children were receiving services from the health care provider because to do so was potentially their health information
  2. Unlike FIPPA (freedom of information legislation), PHIPA does not give requesters a right of access to general records of a health care provider
  3. The father was not entitled to “access” to any records of personal health information because (a) it wasn’t his information; (b) the children were capable to make their own decisions; (c) the children were over the age of 16; and (d) even if the children were not capable, as the access-only parent, his ex-wife would have been the substitute decision-maker.
  4. The father was really requesting that the health care provider disclose information to him, not grant him access.
  5. The health care provider had a legal obligation to consider the father’s request for disclosure and not ignore it.

Then the IPC said the health care provider had failed to consider its discretion whether to disclose the information to the father on his request and ordered the provider to reconsider based on:

  1. Did they have consent to disclose to the father? Because the children were over the age of 16 and capable, that consent would have to come from the children themselves and not the custodial parent.
  2. Was there a court order or other legal authority compelling them to disclose to the father?
  3. Was there legislation they needed to consider authorizing the father to receive information, such as the Divorce Act or the Children’s Law Reform Act?

You want to know what happened, don’t you?

Me too.

But we don’t know because the IPC ordered the health care provider to “reconsider its decision” to fulfill its obligations to respond to a request for disclosure. The IPC did not tell the health care provider what to do.

We’ll have to wait and see what happens.

 

 


If you enjoyed this article please share it:


Previous and next posts from Kate:

Some of Kate’s recent and upcoming events

Free healthcare privacy webinar - ask me anything!
the first Wednesday of every month

Free webinars - advance registration needed

Whether you're an experienced privacy officer or new in the field, pick Kate’s brain for free for an hour, in this live webinar. No charge, but you’ll need to register in advance.

Primary care webinars: Employment Law Update & Legal Issues for EDs and Board members

Part of Kate’s monthly webinar series.

Our 2025 program is now live.
Full details of the 2025 webinar series and registration here.

Mental Health webinars: Legal issues for mental health and addictions agencies and teams
Annual membership 2025

For managers and other leaders from mental health and addictions agencies, hospitals, CMHAs, CHCs, school boards, FHTs and Indigenous health services

This is an annual membership program with monthly webinars.
Full details and registration here.

Health Privacy Officer Foundations training
starts Spring 2025

For Privacy Officers within healthcare organizations.

This course focuses on how to become a more confident privacy officer and gives you the tools to document your privacy program. Full details and registration here...

Join the Shush: a collective of health privacy officers
Annual membership 2025

For Privacy Officers within healthcare organizations

This is an annual membership program that takes theory into practice and tackles real life scenarios to build Privacy Officer skills.
Full details and registration here.

Team Privacy Training Events

For Primary Care clinics, Hospitals, Community Agencies, Mental Health Teams, Public Health Units, School Boards, Police departments

Scheduled to your team's needs for comprehensive or refresher training More details...

Free summary of all PHIPA IPC decisions

Want to read privacy breach stories to learn how to improve your work? We have summarized all the Information and Privacy Commissioner's health privacy decisions for you Download here...

Kate Dewhirst Health Law

Kate says:

My mission is bringing the law to life. I make legal theory understandable, accessible and fun! I’m available and love to work for all organizations in the healthcare sector across Ontario and beyond.

Subscribe to my mailing list and keep up to date with news:

Latest Tweets

  • Our twitter feed is unavailable right now. Follow us on Twitter
  • contact details

    P.O. Box 13024, RPO Bradford Centre
    Bradford, ON, L3Z 2Y5

    (416) 855 9557

    .