Module 3: Patient Rights

A patient has the right to:

• Consent or refuse the collection, use, and disclosure of their personal health information (PHI), unless the use and disclosure is required or permitted by law.
• Access their PHI with very limited exceptions, e.g. unless providing access may be harmful to the patient or a 3rd party.
• Request correction or amendment to information they feel is inaccurate or incomplete.
• Notified if your PHI is accessed inappropriately and request an audit
• Know to whom their PHI has been disclosed.
• Challenge the hospital's compliance with privacy laws.

Employees and affiliates must direct patients who have questions about, or wish to enact their privacy rights to the Privacy Office for LHSC and St Joseph’s.

Next (Maintaining Confidentiality)

back to top