In a blog post, Information and Privacy Commissioner of Ontario Patricia Kosseim outlines takeaways from an investigation into the sale of deidentified data by a health information custodian to a third party. Kosseim notes the process of deidentification is considered to be a use under the Personal Health Information Protection Act and health information custodians should be transparent about their information practices. “In today’s digital world where health data is an increasingly valuable commodity, the stakes have never been higher,” she said.
Full Story