PHIPA Compliance

IT Service Provider Responsibilities

Notify the custodian of any breach of the restrictions on its use and disclosure of personal health information or unauthorized access;
Make available to the public, information about the services provided to the custodian; any directives, guidelines and policies of the provider that apply to the services provided; and a general description of the safeguards that have been implemented;
Provide to the custodian… electronic record of all accesses and transfers of personal health information associated with the custodian;

If your service provider does not keep an audit log of remote connections made to your environment, this means your service provider is not PHIPA compliant. You should also understand as a health data custodian, that you should not request your service provider to use a tool that does not keep an audit log.

PHIPA Compliance

Address

Contact Us

Pages