Policy for Electronic Health Information (EHI) Collection

Purpose: This policy outlines how TME Healthcare collects, uses, stores, and discloses personal health information (PHI) in compliance with the Personal Health Information Protection Act (PHIPA) and the Personal Information Protection and Electronic Documents Act (PIPEDA). By providing consent, patients acknowledge their understanding and agreement with these practices.

1. Information Collection

Type of Information Collected: We may collect the following personal health information electronically:

• Name, address, contact information, and date of birth

• Medical history, diagnoses, treatment plans, and prescribed medications

• Insurance and billing information, where applicable

Purpose of Collection: The information collected is used to:

• Deliver accurate and safe healthcare services

• Facilitate communication with other healthcare providers involved in patient care

• Process billing and insurance claims, if applicable

• Improve operational efficiency and quality of care within the organization

2. Consent to Collection, Use, and Disclosure By providing consent, patients authorize TME Healthcare to:

• Collect, store, and use their health information electronically for the delivery of healthcare services.

• Share relevant health information with healthcare providers within and outside the organization as necessary for treatment.

• Disclose health information when required by law or with explicit patient consent.

3. Security and Confidentiality

• Personal health information is securely stored in an electronic health record (EHR) system compliant with PHIPA and PIPEDA regulations.

• Industry-standard security measures are implemented to protect against unauthorized access, data alteration, or loss.

• Only authorized personnel can access health information for legitimate medical and administrative purposes.

4. Patient Rights Patients have the following rights under PHIPA and PIPEDA:

• Access their health records and request corrections if necessary.

• Withdraw consent for electronic health information collection and disclosure, subject to legal and medical limitations.

• Inquire about how their information is used and disclosed within the organization.

To exercise these rights, patients may contact administrator@tmehealthcare.ca.

5. Duration of Consent Consent is valid from the date it is provided until it is withdrawn in writing. Patients are advised that withdrawing consent may impact the organization’s ability to deliver effective healthcare services.

6. Questions and Complaints For questions about this policy or to address concerns about privacy practices, patients may:

• Contact administrator@tmehealthcare.ca

• Reach out to the Privacy Commissioner of Canada or the Information and Privacy Commissioner of Ontario.

7. Consent Declaration By providing consent, patients confirm they have read, understood, and agreed to the collection, use, and disclosure of their personal health information as described in this policy.

If consent is not provided, patients are requested to notify TME Healthcare immediately to discuss alternative arrangements for their care.