We use and disclose client personal information only for the purposes for which the information was collected, except as authorized by law. For example, we may use client contact information to deliver goods. The law also allows us to use that contact information for the purpose of collecting a debt owed to our organization, should that be necessary.
How do we safeguard personal information?
We make every reasonable effort to ensure that client information is accurate and complete. We rely on our clients to notify us if there is a change to their personal information that may affect their relationship with our organization. If you are aware of an error in our information about you, please let us know and we will correct it on request wherever possible.
In some cases we may ask for a written request for correction.
We use appropriate security measures when destroying client personal information, including shredding paper records and permanently deleting electronic records.
We retain client personal information only as long as is reasonable to fulfil the purposes for which the information was collected or for legal or business purposes.
Access to records containing personal information
Clients of First Nations Health Consortium have a right of access to their own personal information in a record that is in our custody or under our control, subject to some exceptions. For example, organizations are required under the Personal Information Protection Act to refuse to provide access to information that would reveal personal information about another individual. Organizations are authorized under the Act to refuse access to personal information if disclosure would reveal confidential business information. Access may also be refused if the information is privileged or contained in mediation records.
If we refuse a request in whole or in part, we will provide the reasons for the refusal. In some cases where exceptions to access apply, we may withhold that information and provide you with the remainder of the record.
You may make a request for access to your personal information by writing to Barry Phillips (Chief Executive Officer) to ensure compliance with PIPA. You must provide sufficient information in your request to allow us to identify the information you are seeking.
You may also request a correction of an error or omission in your personal information.
We will respond to your request within 45 calendar days, unless an extension is granted.