| Personal health information (PHI) accessible through the electronic health record (EHR) |
|---|
| PHI received from health information custodians (HICs) | Ontario Health | The longer of the following time periods:
- As long as the HIC that provided the PHI to the EHR retains the PHI in its local systems in accordance with their retention schedule;
- In accordance with the retention schedule of the HIC that created and contributed the PHI to the EHR;
- 30 years after the most recent instance of PHI being viewed, handled, or otherwise dealt with for the purpose of providing or assisting in the provision of health care; or 10 years after the patient has expired; or
- In accordance with any applicable court order or court action or other legal requirements.
|
| Personal health information (PHI) provided by HICs for the electronic health record (EHR) |
|---|
| PHI received from health information custodians (HICs) for the purpose of data validation activities prior to contribution to the EHR | Ontario Health | No longer than 6 months unless otherwise authorized by OH. |
| Electronic records, audit logs and reports that contain PHI created for compliance purposes under PHIPA |
|---|
- As per ss. 55.3(4) (i), electronic record of all instances where all or part of the PHI is viewed, handled or otherwise dealt with by Employees or other persons acting on behalf of OH or by HIC or their agents.
- As per ss. 55.3(4) (ii), electronic record of all instances where PHI is transmitted to a HIC where the HIC has requested the transmission.
- As per ss. 55.3(5), electronic record of all instances where a Consent Directive is made, modified or withdrawn.
- As per ss. 55.3(6), electronic record of all instances where a Consent Directive is overridden under s. 55.7.
- Auditing and monitoring reports related to the electronic records that OH is required to keep under paragraphs 4, 5 and 6 of s. 55.3.
- Electronic record of all instances where a notice of a Consent Directive is provided to a HIC pursuant to ss. 55.6 (7).
- Notices of Consent Overrides provided to HICs pursuant to ss. 55.7(6).
- Notices related to logging and auditing.
| Ontario Health | The longer of 30 years after the record was created or when PHI is removed from the EHR. |
