Health PEI protects personal information with appropriate security safeguards.
Health PEI will ensure acceptable and appropriate security safeguards are in place to protect personal information which it holds or transmits, regardless of the format in which it is held, against loss, theft, or unauthorized access, disclosure, copying, use or modification.
The nature and extent of security safeguards will reflect the sensitivity of the information that has been collected, the amount, distribution and format of the information and the method of storage.
Destruction of personal information will comply with appropriate retention and destruction schedules, and be carried out in such a way that unauthorized access or disclosure is prevented. Health PEI will provide education and training to staff, physicians, students and volunteers on matters related to protection of privacy.
Training shall encompass both the protocol for collection, use and disclosure of information as well as appropriate measures in the event of unauthorized access or disclosure of information.
All new programs and services must complete and comply with the recommendations resulting from a privacy impact assessment prior to implementation.
Existing programs and services shall periodically complete a privacy impact assessment to ensure ongoing compliance with this policy.