Privacy
Expressed Wishes to honour or not?
Is this a Breach?
Consent!
Breach Please
100

Children that are aged 16+ are automatically deemed 'mature minors'

What is false. The courts generally recognizes age 16 as the threshold for maturity, but the clinician/custodian must weigh several factors before a child earns that title

100

A patient wants her daughter to have access to all of her records except for her psychiatry consult letter. 

What is an expressed wish we would honour

100

A patient is bringing her mom to an appointment and is told how long her appointment will be. Is this a breach?

What is NOT a breach. No health information was released. Length of appointment does not give any insight into what she is there for

100

Give an example of implied consent

What is:

A patient rolls up their sleeve while the nurse prepares an injection

A patient fills out a history questionnaire and provides it to reception

A doctor tells a patient he is referring them to a specialist - no objections made by patient

A patient hands their health care card to reception

100

A clinician discusses a patient’s test results with them in a quiet corner of the waiting area.

What is a breach? Discussing private information in a public area can expose sensitive details to others nearby.

200

Patients have the right to access any record containing their health information. However, there are some exceptions where access may be restricted, name one.

What is:

If access could risk the patient's mental or physical health or safety

Workers Compensation Info

If access could endanger the health or safety of others (e.g., public safety)

If releasing the info could prejudice ongoing legal proceedings or affect tests, audits, ax, etc. Ex: pending lawsuit

200

A patient's express wishes may be ignored in certain circumstances. Name one of those circumstances

What is: Incapacitation, Emergency Situations, Mental Health Concerns relating to their safety or the safety of others, Legal Requirements/Obligation, Advanced Directives

200

ABC Transportation is told the date/time & length/type of service for a patient they are providing transportation for as they require this information in order to arrange transportation. Is releasing this information a breach?

What is a breach. Regardless of a companies internal policies, a transportation company has no legitimate reason for needing that information. Providing the date/time and length of the appointment can be provided. But details regarding what the appointment is about, will not be approved under any circumstance without patient consent.

200

A neighbour of a patient calls and states that the patient has asked him to call and book their follow-up appointment on their behalf. Is patient consent required?

No, anyone can book an appointment on behalf of someone. The alternate contact would need to be able to provide the patient name - no details outlining what the appointment is about can be released.

200

A clinician is reviewing a patient’s chart but accidentally opens the chart of a different patient with a similar name. They close it immediately.

What is not a breach. Accidental access that is immediately corrected and not shared is typically not considered a breach under Alberta’s HIA

300

True or False: Misusing Netcare can result in an organizational-wide restriction for all users

What is True

300

A patient wants no information shared with her husband, including appointment dates and times

What is an expressed wish we would honour

300

The spouse of a patient calls and obtains a list of what foods the dietician told her husband to avoid for his cardiac health. She states that she is the one doing the cooking & shopping and her husband forgot what all foods he was told to avoid. Is releasing this information a breach?

What is a breach. Dietary recommendations are considered health information. Consent is required. 

300

True or False: A spouse that is translating for a patient with limited/no English can be told what type of appointment the patient is having so they can relay that to the patient. Consent is not required

What is False. This would constitute a breach. Regardless of language barriers - the privacy rules still apply

300

A staff member enters their own medical chart to update their phone number that has recently changed to ensure they get a reminder for their upcoming appointment.

What is a breach? Staff members should not access their own or any family members’ records without following official procedures.

400

True or False? Patient health records CAN be disclosed to a Church if the patient signs a consent form explicitly stating to release the information to them

What is false: Regardless if the patient consents, medical records will NEVER be disclosed to a church. A patient can request access to their reports, and they can give them to them on their own. But we will never approve a release for that.

400

A patient requests that we only send reports to her new doctor, she will not be following up with the referring physician again

What is NOT an expressed wish we can follow as it goes against our obligations to the CPSAs standards of care

400

A patient’s medical record is left open on a computer screen while the clinician leaves the room for a brief moment. Another patient notices it. 

What is a breach? Leaving patient information exposed on a computer screen unattended is a privacy breach.

400

True or False: A family member of an assisted adult that they provide care for can automatically access a patient's health information under the HIA if they’re involved in the patient’s care. Consent is not required.

What is False? They must provide proof that they are a designated legal representative. In the form of power of attorney, trusteeship, guardianship, enduring power of attorney, etc.

400

An email from a Social worker containing patient information is accidentally sent to an unauthorized recipient within the clinic, who has no need to know the information.

What is a breach? Sharing patient information with staff who don’t need access to it is a breach.

500

True or False: A patient's express wish can influence care or disclosure, but is NOT legally binding

What is True: An expressed wish is a non-binding preference 

500

A patient requests that no one finds out that he has suicidal ideations and has thought about harming himself

What is NOT an expressed wish we can follow. In cases where a clinician is concerned about a patient's wellbeing, or the wellbeing of others, the information could be shared.

Shared with family and also first responders regardless of the patient's request

500

The husband of a deaf patient books an appointment for his spouse and is told type of appointment his wife is having. He claims that the patient can't remember what she is being referred for. He states he is her caregiver and it is okay to release this information. Is this a beach?

What is a breach? Sharing information without confirmed consent from the patient is a breach, regardless of the relationship, or the patient's disability. Deaf/Limited English/Assisted Adult etc. - does not mean privacy rules don't apply. They patient must give consent or the spouse must show legal proxy documentation 

500

True or False: A healthcare provider can release a minor’s health information to their parents without explicit consent if it’s deemed in the minor’s best interest.

What is True? It is deemed in the child's best interest. In order to be a mature minor, it must align with their best interests and therapeutic plan. Therefore this minor is not deemed to be mature.

500

A dietician gets off a call with a patient and tells their colleague that the patient admitted to eating 6,000 calories in a day!

What is a breach! Staff in earshot are easily able to determine who they are talking about, as they know the call just finished. They also may have overheard the patient's name and other details from the call