By Stan Shaw, Founder, CTS
If you do not have one already, this is a great time to think about developing a robust privacy and security training program for your clinic. Here are ten simple steps that will help you get started:
Before you get started: put someone in charge. Clinicians are responsible for the personal information in their control. To comply with PIPA, every health care practice should have a designated Privacy Officer. For medical clinics, Doctors of BC, CPSBC and OIPC recommends that this be a physician.
What’s next?
These steps were developed, complete with a complete Privacy Toolkit, in collaboration with the Office of the Information & Privacy Commissioner for BC (OIPC), and the College of Physicians and Surgeons of BC (CPSBC). Even though they were developed with physicians in mind, it is focused on private health clinics that are required to be compliant with PIPA. Therefore these guidelines also provide excellent advice for private dental clinics, chiropractors, and other healthcare professionals. In a nutshell: