Finding: Providing access to health information via individual's physician

In this recent complaint to the Privacy Commissioner, an individual objected to an insurance company's policy of providing access to medical information by giving it to the individual's physician, who would then provide the information to the individual. This practice is contemplated by Principle 4.9 in Schedule I to PIPEDA. The Commissioner found that the insurance company had not violated its obligations under PIPEDA in providing access in this manner.

See: Commissioner's Findings - PIPEDA Case Summary #322: Provision of medical information through physician challenged (December 22, 2005).

Privacy Privacy+Law PIPEDA Privacy+Commissiner Finding Access Health+Information