Privacy is all about the person’s control over the collection, use and disclosure of his/her information. Consent management enables an individual to control the collection, use and disclosure of personal information and/or personal health information. Consent management is the most significant component of privacy management program that support individual’s privacy right.
Ontario Personal Health Information Protection Act specifies consent requirements for collection, use and disclosure of personal health information. An Health Service Provider should implement proper consent management practices (processes) to support client’s privacy right that complies with the legislation.
Generally, consent management process within an Health Service Provider has 5 steps:
-Informing the client
-Determine the capacity of the client with regards to consent
-Obtaining consent directive from the client
-Registering the consent directive
-Enforcing the consent directive
Each step may have multiple activities depending on the Health Service provider’s business process.