When to Escalate
Privacy Is Part of Clinical Safety
Privacy law is not paperwork added to clinical care.
Privacy law is not paperwork added to clinical care. Personal health information includes identifying details connected with a client’s health, care, treatment, or payment. If clients expect their information to travel beyond its care-related purpose, they may withhold symptoms, diagnoses, medication use, or social information that the team needs for safe care. For an RPN practising in Ontario, the governing provincial framework is the Personal Health Information Protection Act, 2004, commonly called PHIPA. HIPAA is a United States statute; it is not the default privacy law for Canadian nursing practice. Other federal or provincial requirements may apply in a particular setting, but a label such as “HIPAA-compliant” does not replace the privacy obligations that apply where the care is delivered. The experienced nurse notices the purpose of an information request before answering it. A request connected with the client’s assessment, treatment, care planning, or handoff may fit an authorized care function. A request driven by curiosity, convenience, family interest, or an unverified phone call requires a pause. Opening a chart without a care-related reason is unauthorized access even if the...