From the bedside to the board: Building a culture of privacy and security in health institutions

Shafique Shamji is The Ottawa Hospital’s executive vice president and chief information officer. Nyranne Martin is the hospital’s general counsel and chief privacy officer. 

Fostering a privacy and security culture at The Ottawa Hospital [3:31]Ensuring privacy and security are integrated as part of the hospital’s overall enterprise risk management framework [6:58]Moving beyond random audits to detect unauthorized access to patient information [9:24]Maintaining strong linkages between privacy and information technology teams [12:40]Ensuring strong technical controls are not a barrier to providing care [14:04]Setting the right tone at the senior leadership level [15:20]Lessons learned during the pandemic [16:38]Moving from paper-based to electronic systems [18:30]Rolling out one of the largest information technology projects in the hospital’s history [20:04]Ensuring privacy by design in new hospital systems [23:13]Bringing in a third party to assess risk [24:53]Things that keep a chief information officer up at night [29:18]Ways to advance trust in digital health in Ontario [31:56]Modernizing legislation to respond to advancements in technology [33:55]

Resources:

Putting patient trust at the centre of virtual health (Info Matters episode with
Dr. Duncan Rozario)Trust in digital health: IPC strategic priorities 2021-2025 (IPC strategic plan)Digital health under PHIPA: Selected overview (IPC guide)Communicating personal health information by email (IPC fact sheet)Reporting health privacy breaches to the IPC (IPC webinar)As in life, the only constant in health care is change (Commissioner’s blog)Privacy at The Ottawa Hospital (resource for patients)

Info Matters is a podcast about people, privacy, and access to information hosted by Patricia Kosseim, Information and Privacy Commissioner of Ontario. We dive into conversations with people from all walks of life and hear stories about the access and privacy issues that matter most to them. 

If you enjoyed the podcast, leave us a rating or a review. 

Have an access to information or privacy topic you want to learn more about? Interested in being a guest on the show? Send us a tweet @IPCinfoprivacy or email us at [email protected]. 

The information, opinions, and recommendations presented in this podcast are for general information only. It should not be relied upon as a substitute for legal advice. Unless specifically stated otherwise, the IPC does not endorse, approve, recommend, or certify any information, product, process, service, or organization presented or mentioned in this podcast, and information from this podcast should not be used or reproduced in any way to imply such approval or endorsement. None of the information, opinions and recommendations presented in this podcast bind the IPC’s Tribunal that may be called upon to independently investigate and decide upon an individual complaint or appeal based on the specific facts and unique circumstances of a given case.