I’m Kate Dewhirst.

My team and I write about legal issues affecting healthcare in Canada.

Kate Dewhirst Health Law - bringing the law to life. Meet Kate (in 13 seconds)

How to communicate with your board about privacy issues during COVID-19

Posted by

I am getting questions such as: “how do I talk to my board about the risks as we move to virtual care and staff working from home?”

Interim v. Long-term

You will definitely want to explain that we are in the early days of responding to the pandemic. Our solutions now are our interim solutions. As the days, weeks and months go by, we will revisit our interim decisions with the new information and environmental context that present. Explain that you will be keeping your board updated at regular intervals.

Share what the Information and Privacy Commissioner of Ontario has written

Your board will be comforted to know that our health privacy regulator in Ontario has acknowledged that a pandemic presents challenges for health care organizations as they start using new technology to communicate with patients and as staff are working from home. The IPC has provided tips on how to transition. His office has also acknowledged that healthcare organizations may not be able to maintain the same security standards they would outside of a pandemic emergency.

Make a copy of the IPC’s statement of March 16,2020 and send it with a cover letter to your board members such as:

I want to share with you a communication from the Information and Privacy Commissioner of Ontario that I am using to guide our work as we transition to virtual care and having our staff work from home.  We have to ensure that privacy continues to be foundational to our work – and we also have to be realistic in what we can do as we provide care from new settings.  I thought this would bring you some comfort that our privacy regulator also knows we are challenged and has given us some reassurance. I will keep a copy of this as part of our due diligence in this time.

Identify the other resources that are guiding your decision-making

Acknowledge to your board that there are a lot of changes happening.  Explain that you are focused on making interim decisions to prioritize continuity of care and that you still have safeguards and security in mind. Share with your board that you are keeping up on the changing landscape by:

  • Following the guidance of your Public Health Units and provincial government
  • Participating in forums and webinars for your sector (be it through the Ontario Hospital Association, Association of Family Health Teams, Ontario Long-Term Care Association and other platforms)
  • Seeking legal advice or information through law firms
  • Following guidance from Ontario Health (Quality) Adopting and Integrating Virtual Visits into Care
  • Following recommendations from sources you trust (such as OntarioMD)
  • Talking to your insurer
  • Talking to your IT support team (or external consultants)

Explain the necessity of staff working from home and the benefits of virtual care


  • Much of what you need to explain to the board are the legal requirements and recommendations of public health officials about physical distancing. There are also many benefits of moving virtual including being able to continue service during the pandemic and connecting with patients where they are in a format they use for other services. Share the Ontario Health (Quality) Promise of Virtual Care video, which was posted pre-physical distancing measures.

Explain what you have done to protect the organization from risk

Make sure you also explain the precautions you have taken to manage the risk of the transition: training, choosing the product and product evaluation, insurance reviews, speaking with your IT consultants.

If you enjoyed this article please share it:

Previous and next posts from Kate:

Some of Kate’s recent and upcoming events

Free healthcare privacy webinar - ask me anything!
the first Wednesday of every month

Free webinars - advance registration needed

Whether you're an experienced privacy officer or new in the field, pick Kate’s brain for free for an hour, in this live webinar. No charge, but you’ll need to register in advance.

Health Privacy Officer Foundations training
starts March 2024

For Privacy Officers within healthcare organizations.

This course focuses on how to become a more confident privacy officer and gives you the tools to document your privacy program. Full details and registration here...

Join the Shush: a collective of health privacy officers
Annual membership 2024

For Privacy Officers within healthcare organizations

This is an annual membership program that takes theory into practice and tackles real life scenarios to build Privacy Officer skills.
Full details and registration here.

Primary care webinars: Employment Law Update & Legal Issues for EDs and Board members

Part of Kate’s monthly webinar series.

Our 2024 program is now live.
Full details of the 2024 webinar series and registration here.

Mental Health webinars: Legal issues for mental health and addictions agencies and teams
Annual membership 2024

For managers and other leaders from mental health and addictions agencies, hospitals, CMHAs, CHCs, school boards, FHTs and Indigenous health services

This is an annual membership program with monthly webinars.
Full details and registration here.

Team Privacy Training Events

For Primary Care clinics, Hospitals, Community Agencies, Mental Health Teams, Public Health Units, School Boards, Police departments

Scheduled to your team's needs for comprehensive or refresher training More details...

Free summary of all PHIPA IPC decisions

Want to read privacy breach stories to learn how to improve your work? We have summarized all the Information and Privacy Commissioner's health privacy decisions for you Download here...

Kate Dewhirst Health Law

Kate says:

My mission is bringing the law to life. I make legal theory understandable, accessible and fun! I’m available and love to work for all organizations in the healthcare sector across Ontario and beyond.

Subscribe to my mailing list and keep up to date with news:

Latest Tweets

  • Our twitter feed is unavailable right now. Follow us on Twitter
  • contact details

    P.O. Box 13024, RPO Bradford Centre
    Bradford, ON, L3Z 2Y5

    (416) 855 9557