Privacy & Your Information
SickKids is committed to protecting the privacy and confidentiality of your information. Your privacy and right to access information is governed by the Freedom of Information and Protection of Privacy Act (FIPPA) and the Personal Health Information Protection Act (PHIPA). SickKids’ commitment to privacy and access to information is set out in policies that address confidentiality, privacy, security and the release of records. Policies ensure we only collect, use, store and disclose personal information (PI) and personal health information (PHI) for purposes authorized and/or required by law and that we will do so in a confidential and secure manner. All staff, including physicians, volunteers, etc., are subject to these policies.
We will ask for your consent or inform you before we collect, use or share your information for any reason other than our stated activities or those authorized by law. We may inform you by posting or making readily available a notice that is likely to come your attention, describing the purposes for the collection, use and disclosure of your information.
We may collect, use, or disclose your PHI without your consent, to:
- contact a relative or friend if you are incapacitated;
- prevent serious harm to you or others;
- report suspected types of abuse; and/or
- report certain diseases to public health authorities.
Below you will find information about our collection, use and disclosure practices.
Privacy policy
Collection of your information
Collection of your information includes the gathering, acquiring, receiving, or obtaining of your PHI. We collect PHI about you in accordance with PHIPA to help us accurately identify you, to provide or assist in providing you with the best care possible, and to ensure the accuracy of your records. SickKids may also collect PI and PHI in the form of audio or visual recordings to support and improve patient care and through the hospital’s video surveillance system for safety and security operations at the hospital.
We may collect this information either from you directly or, in some circumstances, from a person designated to make care decisions on your behalf, such as a substitute decision maker. The PHI that we collect may include your contact information, health card number and medical history. We may also collect PHI about you from other sources if we have obtained your consent to do so or if the law permits.
Use of your information
The information you give us about you and your family is important to our work at the hospital. We use your PHI to treat and care for you. Ontario laws permit us to use your information for other purposes, including, but not limited to:
- To teach and educate – your information may be used to train staff and students to support our academic partnership with the University of Toronto and other schools.
- To support research and innovation – researchers may use your information while working on a study approved by the SickKids Research Ethics Board or appointed Board of Record.
- To improve and enhance our services – your information may be used to perform quality improvement and risk management activities.
- To maintain operations – your information may be used to plan, run, and manage programs, services, and internal operations.
- To process payment – your information may be used to obtain payment for your treatment or services we provide (e.g., to obtain coverage from OHIP, WSIB, your private insurer, etc.).
- To ensure your safety and enhance security in the hospital.
- To contact you regarding initiatives at the hospital (e.g., if you are interested in participating in research).
- To fulfill other purposes permitted or required by law.
Use by staff and service providers
We assume you agree (in other words, consent) to share your information with members of your care team, staff, trainees, and volunteers who are involved in your care and performing operational and supportive functions like the ones listed above. Only staff members who need your information for legitimate care and business purposes are allowed to access it.
We may ask certain external parties, such as service providers and vendors, to use your information to provide services to or on behalf of SickKids. We will take steps to protect your information, including requiring external parties follow our confidentiality and privacy policies and applicable privacy laws.
Digital solutions, artificial intelligence and data matching
SickKids uses digital solutions to process PI and PHI or other information for the purposes described above. Digital solutions include electronic devices, mobile/web applications, health information systems, assessment tools, etc.
SickKids may also use artificial intelligence (AI) applications that process PI or PHI for the purposes described above. The adoption of AI solutions enhances our ability to deliver optimal care and effectively plan for internal programs and operations by automating and improving decision-making processes.
Similarly, your PI or PHI may be used for data matching. Data matching involves the computerized comparison of databases to allow linkages to be made between your information from sources across the hospital. This activity supports the purposes listed above.
Digital solutions and AI that process PI or PHI and initiatives using PI or PHI for data matching are reviewed by SickKids’ Privacy and Information Security Offices to ensure they comply with internal policies, privacy laws, and best practices.
Processing your information outside of Canada and using non-Canadian vendors
Some support services are provided by vendors outside of Canada or by vendors who store information outside of Canada. As a result, information processed or stored outside of Canada may be subject to the laws of another country, which may be less protective than those of Canada. When information is processed outside of Canada, we take steps to ensure adequate security measures are in place, consistent with Canadian requirements.
Use for de-identification and anonymization
SickKids may use your PI or PHI to de-identify or anonymize it. This entails modifying your information to remove details that can be used to identify you. De-identified information may be used for non-care purposes, such as determining study feasibility at SickKids. We take steps to mitigate risks associated with the re-identification of PI and PHI.
Collection and use of email to communicate with you
With your consent, SickKids may communicate with you about your or your child’s healthcare using email. It is up to you to know the risks and implement ways to protect yourself before you agree to use email to communicate with us. See below for more information.
We may email you about your or your child’s care. For example, this may include sending you an email to:
- confirm appointments and send appointment reminders,
- send you information about a condition, treatment, or medical advisory (e.g., medication recalls, health and safety, etc.),
- provide medical advice,
- send test results,
- ask for your feedback about your experience at SickKids, or
- send you information about research studies you may want to participate in.
The emails we send you may contain PHI, such as information about your diagnosis, treatment, or medications. Some clinics may send you a survey to improve patient care and overall patient experience. Note that some clinics or physicians may have their own preferences and choose to limit what information they will include in an email.
If any email contains information that is important to your care, it will be copied or summarized into your health record. If you send us an email regarding your health care, the email may be forwarded to, or seen by other SickKids staff who need the information to provide you with care or service. We will ask for your consent before we collect, use, or share your email for any reason other than our stated activities or those authorized by law.
You can change your decision to communicate via email at any time. Your decision to communicate or not communicate via email will not impact your care at SickKids. You may also choose your preferences for certain types of communications. For example, you can choose to receive appointment confirmations through email or text. If you want to stop receiving communications via email or update your communication preferences, you can:
- Contact your SickKids care provider,
- Update your communications preference in MyChart, or
- Contact mychart.support@sickkids.ca for assistance (available for MyChart and non-MyChart users).
While SickKids takes all available steps to protect your information, using email may introduce some risks to your privacy and security. For example, an email:
- may be sent to the wrong recipient by mistake,
- may be “hacked” or intercepted by someone who does not have permission,
- may be difficult to erase or delete once sent,
- may appear to come from a trusted source but actually contain malware that can:
- damage your device (like a laptop or mobile phone), or
- access sensitive information about you, like your username, password, or any credit card information.
By agreeing to communicate via email, you are accepting the risks to your information and devices. You also agree to take the steps detailed below to help protect your information. Communicating via a patient portal like MyChart is a more secure alternative to email.
IMPORTANT: IF YOU RECEIVE AN EMAIL FROM SICKKIDS CONTAINING A LINK, BUT ARE UNSURE WHAT THE LINK IS, CALL YOUR HEALTH CARE TEAM BEFORE CLICKING.
Below are some examples of how to protect your information and devices while using email:
- Use strong passwords for each of your online accounts, and do not share your usernames/passwords with others.
- Accept new, legitimate software updates for your devices and applications to maximize the security of your electronic and web tools.
- Only open links or attachments from trusted senders. If you are not sure what the attachment is, call the person who sent it to you before clicking on any links.
- Check the “To” field before sending an email to confirm that the correct individuals are receiving the email.
- Use your personal email when communicating with health care providers. Do not use a work email address as your employer may have the right to inspect your work email.
- Use a secure internet connection when communicating with health care providers. Do not use a public internet connection (e.g., WIFI at an airport, internet café, public library, etc.). It may be easier for other people to access your email account and read your personal information without you knowing.
Sharing (disclosure) of your information
We may share your information with:
People responsible for making decisions about your care and information
These individuals, often referred to as substitute decision makers, need your information to make informed decisions about your ongoing care and treatment and about how we collect, use, or share your information.
People you choose to share it with
You may ask SickKids to share your information with others. This may include your family members or a lawyer.
People involved in your health-care
We share your information with health-care providers, like your family doctor or specialists, who are involved in your care. In certain circumstances, we may share your information with health-care providers outside of Canada for treatment purposes.
Shared electronic health record systems and health records
SickKids participates in provincially approved shared electronic health records and shared health record systems. These systems securely share electronic health information to provide timely and coordinated patient care. Individuals accessing these systems are bound by user terms and can only access for approved purposes (e.g., health-care). Examples include:
This is a provincial central repository that stores core elements of your child’s health record at SickKids that another care provider may access for continuity of care. Access to the ConnectingOntario Clinical Viewer is restricted to those who provide or assist with patient care. Visit We Take Your Privacy Seriously on eHealth Ontario’s site for more information.
SickKids is a member of eCHN (electronic Child Health Network) that allows other care providers, including community pediatricians, to have quick access to your child's health information from SickKids and other hospitals such as laboratory results, doctor’s notes, X-rays and visit information. Visit eCHN to learn more.
SickKids shares Epic (our electronic health record) with the Children's Hospital of Eastern Ontario (CHEO). CHEO will only have access to SickKids patient information if the patient is receiving care at both locations. SickKids also participates in Epic's Care Everywhere (CE) program. By participating in CE, your health record will be securely shared with other Canadian and US-based Epic hospitals participating in CE if you attend one of these hospitals for care. If you do not want your information shared via CE, please contact the SickKids Privacy Office.
The Ontario Clinical Imaging Network (OCINet) allows hospitals to share diagnostic images and results. This protects patients because it avoids duplication of tests and may decrease the exposure of patients to radiation.
Ontario Laboratory Information System (OLIS) allows hospitals and community laboratories to share laboratory, cytology, and pathology test results. Visit eHealth Ontario - Lab results.
People conducting patient satisfaction surveys
We want to hear from you about the quality of care and services you receive at SickKids. We will use your name and address, and the dates of your visits to send you surveys about your experience. This information helps us improve the care we provide.
SickKids Foundation
SickKids Foundation is dedicated to supporting SickKids by raising funds for research, education, and the improvement of patient care. Unless you tell us not to, we will share your name and address with SickKids Foundation.
Faith representatives
Our Spiritual and Religious Care team provides Interfaith Chaplain support (and specific religious faith denomination as requested) for patients and families. If you would like a member of our Spiritual and Religious Care team to connect with you, please let your health-care provider know so that a referral can be made. We will work with you to ensure you receive the spiritual or religious care that you need.
Visitors and callers
Unless you ask us not to give out this information, we may share general information about you with others, such as your location in the hospital and your general health status (e.g., “stable”). Your consent is required to disclose any further information. If you do not want this to be shared, please contact the SickKids Privacy Office (contact details below) or speak to a member of your clinical team.
External sharing/selling of data
We may also share de-identified or anonymized data with third parties, such as government entities, research entities, industry partners, etc., for non-care purposes like research, measuring our performance, making improvements to our operations or relevant products or services, etc. SickKids may receive payment for the disclosure of this de-identified data. We may also permit third parties to use de-identified or anonymized data.
Other people if required by law
Ontario laws require or permit us to share some of your PI or PHI with, including but not limited to:
- the Ministry of Health;
- registries such as Pediatric Oncology Group of Ontario, Institute for Clinical Evaluation Sciences (ICES), Canadian Institute for Health Research (CIHI);
- researchers, if approved by our Research Ethics Board (REB);
- the Medical Officer of Health to report communicable diseases;
- the Workplace Safety and Insurance Board (WSIB);
- Law Enforcement Officers who present a warrant or subpoena, or to aid in an investigation;
- the Children’s Aid Society where child harm is suspected; the children’s lawyer;
- the public guardian and trustee; and
- the Coroner.
Withdraw your consent or place conditions on our use/sharing of your information
Access, use, and disclosure of your information may be restricted in different ways depending on the request. If you want to withdraw your consent or place conditions on our use or sharing of your information, please contact the SickKids Privacy Office. The Privacy Office reviews every request on a case-by-case basis. See Consent Directives and Audit Requests (For Patients) (PDF) for more information.
HINP statement of information practices
SickKids is a Health Information Network Provider (HINP) when we provide services to two or more Health Information Custodians (HICs) to enable them to use electronic means to share PHI with one another for the purpose of providing care. SickKids must adhere to Ontario Regulation 329/04 (the Regulation) and comply with the HINP requirements, including making available information about its services to the HIC. Our obligations as a service provider and HINP are detailed in PHIPA and the Regulation, as well as in agreements with participating HICs.
As a HINP, SickKids will:
- Only use, disclose, or otherwise handle the PHI as directed by the applicable HIC;
- Ensure that individuals handling PHI are aware of, and agree to, their obligations with respect to the PHI;
- Notify the HIC if the PHI was handled in contravention of PHIPA or the HIC’s direction;
- Notify the HIC of any breaches;
- Provide the HIC with a plain language description of services;
- Provide the HIC with an audit of accesses or disclosures of the PHI in the shared system;
- Provide HICs with a summary of the privacy and security assessments;
- Ensure that any third party retained agrees to comply with the restrictions and conditions to comply with PHIPA;
- Enter into a written agreement with the HICs.
The following are existing initiatives where SickKids acts as the HINP for other HICs:
The Connected Care team at SickKids developed the Transition Tracker to inform clinical operations and seamless transitions of patients from SickKids to Holland Bloorview for ongoing rehabilitation. The Transition Tracker enables the sharing of PHI between both sites to ensure timely and secure exchange of information to support patient safety and care.
The SickKids Surgical and Endoscopy Partnerships Program facilitates the referral of low acuity surgical and endoscopy cases from the SickKids waitlists to partner sites across the Greater Toronto Area, as an innovative solution to decrease surgical waitlists. The initiative is supported by Ontario Health Toronto Region and the Ministry of Health. Through the program, SickKids and partner sites receiving surgical referrals share limited PHI required for referral tracking.
Contact the SickKids Privacy Office
You can contact the Privacy Office regarding any of our privacy practices, privacy questions or concerns. We can be reached at:
Privacy Office
The Hospital for Sick Children
175 Elizabeth Street
Toronto, ON M5G 2G3
416-813-7474
privacy.office@sickkids.ca
Contact the Information and Privacy Commissioner of Ontario
You can contact the Information and Privacy Commissioner of Ontario if you think we have violated your privacy rights. The Commissioner can be reached at:
Information and Privacy Commissioner of Ontario
2 Bloor Street East
Suite 1400
Toronto, ON M4W 1A8
416-326-3333 or 1-800-387-0073
info@ipc.on.ca