The Privacy Governance and Accountability Framework sets out the accountabilities for ensuring that all individuals involved in the planning, management and day-to-day operations of McMaster University are in compliance with the Freedom of Information and Protection of Privacy Act (FIPPA), and with the Personal Health Information Protection Act (PHIPA), their associated regulations and the privacy policies, procedures and practices set out by McMaster University. The Privacy Governance and Accountability Framework came into effect on June 16, 2015. 

Privacy Program

Privacy Governance and Accountability Framework

Privacy Breach Protocol

Policy for the Handling of Personal Information

Portable Storage and Mobile Devices Policy – effective July 1, 2017

Background Check Policy – Students/Alumni – REVISED – effective July 1, 2017

Electronic Mail (E-mail) Protocol for Personal Information (PI) and Personal Health Information (PHI) – effective July 1, 2017

Policy for the Handling of Personal Information

Policy on Access to Personal Health Information (PHI)

Policy on Correction of Personal Health Information (PHI)

Guideline for Verifying Identity for Formal Correction of Personal Health Information (PHI) – effective July 1, 2017

Guideline on Obtaining Consent re Personal Health Information to be Transmitted via Email (PHI) – effective July 1, 2017

Lock Box Protocol for Personal Health Records (PHI) – effective July 1, 2017

Forms

Policy on Correction of Personal Health Information

• Correction Request Form

Guideline on Obtaining Consent re Personal Health Information to be Transmitted via Email

• Appendix A – Email Consent Form

Lock Box Protocol

• Consent Directive Form
• Altering Consent Directive Form