Privacy and Information Management in Healthcare 2023

8:30 a.m.
Program Log-In

9:00 a.m.
Welcome from the Chairs

Mary Jane Dykeman, INQ Law
Ira Parghi, INQ Law

9:15 a.m.
Together Putting Data to Work: Building a Solid Data Foundation at York Region

John Houweling, Director, Data, Analytics and Visualization Services, The Regional Municipality of York

Like any business, York Region relies on its data to make evidence-informed decisions. York Region’s Data and Analytics (DnA) Master Plan is a roadmap to using data more effectively and strategically to transform program and service delivery. Hear from John Houweling on:

•York Region’s cross-departmental, collaborative plan
•A strategic approach to developing self governance, self-serve tools and training to foster a data-informed culture
•How the work being done in York Region and their Master Plan can have application in the health care sector

10:15 a.m.
Wellness Break

10:30 a.m.
Collaborative Decision-Making and Information Sharing for Ontario Health Teams (OHTs)

Jennifer Fraser-Lee, Access & Privacy Officer, York Region
Joyce Wong, MPH, Cert. APM, Project Manager, Planning & Integration, EYRND Ontario Health Team, Oak Valley Health

Ontario health Teams play an essential role in the delivery of healthcare, and their ability to share health information collaboratively is crucial to their success. Our presenters with unpack some of the health privacy challenges and opportunities that they face. They will discuss:

• Overview and governance of the Eastern York Region North Durham OHT
• Data sharing
• Privacy assurance for integrated care projects
• Data sharing framework
• Digital health solutions (HIC vs. Non-HIC/HINP v. non-HINP)
• Planning and population health management
• Legislative reform

11:30 a.m.
Cyberattacks in Healthcare: Where are we now? Where are we Going?

Ira Parghi, INQ Law
Kopiha Nathan, Lead, Privacy and Compliance Officer, HIROC

Cyberattacks are a growing threat in health care and are raising alarm bells for health care providers, patients, regulators, and insurers. Join our speakers as they consider:

• Cyberattacks: the current snapshot, hot topics, new trends
• Lessons from the trenches: what HIROC wants you to know
• Lessons from the trenches II: what your “breach coach” wants you to know

12:30 p.m.
Lunch Break

1:15 p.m.
Privacy and Digital Health: Some Legal and Practical Considerations

Naveen Hassan, Director, Privacy & Risk Management and Associate General Counsel, The Hospital for Sick Children
Melissa Lanuza, Senior Privacy Specialist, The Hospital for Sick Children
Ira Parghi, INQ Law

Digital health tools are increasingly being used in the health care setting. In this session, two health privacy lawyers who have helped hospitals implement digital health technologies will unpack:

• Privacy considerations in digital health contracting
• Privacy challenges when implementing digital health tools
• Tips for success for in-house privacy and legal teams

2:15 p.m.
Wellness Break

2:30 p.m.
The Regulator’s Perspective: The IPC on Current Issues

Kathryn Greis, Senior Health Policy Advisor, IPC
Kate Deakon, Borden Ladner Gervais LLP

Hear directly from the Office of the Information & Privacy Commissioner about what they are seeing and what is on the horizon from a regulatory perspective.

3:00 p.m.
Dos and Don’ts for Reporting Breaches to the IPC

Sari Feferman, Rosen Sunshine LLP

Health privacy laws across the provinces require health care organizations to report certain types of privacy incidents to regulators and affected individuals. Join us as we talk through the following:

• The various IPC reporting obligations: what they are, when they are triggered
• Legal, practical, and strategic considerations for reporting

3:30 p.m.
Privacy and Healthcare Contracting: Legal and Practical Considerations in Procurement and in Client-Centered Collaborations

Pamela Seto, Corporate Legal Counsel, INQ Law
Simmie Palter, INQ Law

When healthcare entities need to enter into contracts with service providers or other health care providers, data sharing and privacy concerns are an essential consideration. In this session, we will explore:

• Sharing information with entities subject to different privacy laws
• Protecting the privacy of client personal health information when not all collaborators are heath information custodians
• Determining the role of the private-sector vendor that handles personal health information
• Helpful tips for drafting data sharing agreements

4:00 p.m.
Program Wrap-Up & Q&A

4:30 p.m.
Program Concludes