Fall 2009 Privacy Rights in the Digital Age
Read more Transitions Subscribe See our ad rates Support Transition
Acknowledgements
FEATURES
OTHER
SPECIAL
Thanks to Sam Bradd for his theme illustrations
by Micheal Vonn Our personal information has never been so popular. Everyone wants it! The government wants it. Google wants it. Microsoft wants it. Those clamouring for our information promise that they will keep it very, very secure and will protect our privacy like gangbusters. Are we likely to see those promises fulfilled? Don't hold your breath. Unless blue is a good colour on you. In this edition of Transition, we look at who wants your personal information and why. We also look at the electronic systems being put in place right now in BC to gather your information and why this is something you need to know.
First, the government has plans for your health information. The public has been kept in the dark for years as the provincial government has been working to create a massive, centralized data distribution system to make our personal health information accessible first province-wide and, ultimately, nation-wide. Health care workers, some government workers and many researchers will be authorized to tap in to this giant vat of citizens' health data through thousands of access points. The system is called "e-Health" and, although it's costing us billions of dollars, we are told that ultimately it will save money. It's supposed to make health care better and more efficient. The bad news is there's almost no evidence that e-Health saves money or improves health. The worse news is there's a lot of evidence that e-Health systems are given to massive cost overruns, cannot provide reasonable security and threaten patient privacy in ways that were impossible in the stodgy, old paper-based system. Millions of records have been lost or compromised. The "data hemorrhaging" is relentless. Just last May in Alberta, 11,582 electronic patient files were captured by a computer virus and are now in the hands of nobody-knows-who. Second, you need to know that e-Health is just one part of a much broader government information-sharing project. While the government assures us that information in the e-Health system will only be used for health care purposes, they are in fact building the architecture to share our health information with other ministries. Government's bigger data integration project is called the Information Access Layer and includes Integrated Case Management. The general idea is to give government an astronomical amount of information on citizens, including information from community organizations that receive government funding, which the government says will be used to provide "better service." Those in the disability community should be very skeptical of these claims, remembering that historically government data-matching has been used to disqualify people from needed benefits, not enhance services. Government is saying we are "behind" in building our e-Health system and urging us to speed ahead. But, in other jurisdictions that are "ahead" of us, like the U.K., e-Health is such a catastrophe that opposition politicians are calling for the whole system to be scrapped. This is sounding grim, I know. Especially considering that we naturally want appropriate information to get to our service providers. There are some important advantages to electronic systems. The question is how we gain the benefits without sacrificing our privacy and personal security. The United Kingdom has spent more than £13 billion centralizing patient records in government databases. It has been an acknowledged fiasco. In a 2008 British Medical Association poll, 9 out of 10 doctors said they don't trust the government with patient data security. David Chan, MD, from a letter to the editor, Vancouver Sun, June 15/09.
Educating ourselves is the obvious place to start. The complete absence of public awareness on e-Health has driven a small, informal coalition of privacy-concerned organizations to try to fill the informational void. Learn more at BC's Big Opt Out at www.bcoptout.ca. There is lots of information and some tools to help protect your medical privacy, including a step-by-step guide on how you can "opt out" if you so choose, an FAQ on e-Health and sample letters to health professionals and your MLA. Read this Transition and share it. Then, if you are concerned about the privacy of your information, speak up! Tell your elected officials. Tell your health care providers. Ask tough questions and demand real answers. Our goal in this Transition is to inform the disability community, our not-for-profit community partners and the public about these changes underway in BC. They affect the collection, access, sharing and linking of personal information. We look at the implications of these changes for our privacy rights, and review BC's laws on privacy and personal information. Many privacy advocates think the huge central database systems being built by the government are the wrong model for privacy protection and security. And putting our personal information into the hands of private technology corporations, with their dubious privacy track-record, is not the only alternative. There are viable options for genuinely client-controlled records. If that's what we want, we need to say so: loudly, insistently and right now. Before it's too late. Micheal Vonn is Policy Director of the BC Civil Liberties Association
There have been thousands of privacy breaches in the United Kingdom where these kinds of systems have been in use for some time. In the US, there have been thousands of breaches of private information. Closer to home, in Alberta in early July 2009, it was reported that due to a computer "virus," thousands of people's private medical information was uploaded--a better word would be "leaked" or "stolen"--to websites from the government's computer system.
If there was a privacy breach and your information was accessed by someone who should not have access, you may not be able to buy some kinds of insurance or you may even be denied employment. Individuals that you would prefer not to have personal information about you may have access to it without your knowledge. The provincial government has not said that e-Health will keep your personal health information private from third parties. In fact, the government has admitted that ultimately e-Health is intended to link to other electronic data sources developed by law enforcement and social service agencies.
From the start, the government has told us e-Health is a cure-all: from cutting costs and increasing system efficiencies, to providing better health care.
The government's position is that they want to increase patient safety, contain costs and improve the quality of medical care. As advocates, we have no argument with some of the proposed goals. However, the current plans and methods raise a lot of privacy concerns and many of us question whether the current plans can even achieve those goals. In 2004, the Government of Canada invested $500 million in an independent not-for-profit corporation--Canada Health Infoway--to speed up the development and adoption of modern systems of information technology, such as electronic patient records. The province of BC has been moving to electronic surveillance of its citizens through services like welfare, income tax returns and banking information. This system will add another dimension that will erode personal privacy rights.
More people involved in your health care will have access to your personal information quickly and from many different locations. This does have the potential to improve care.
We need the right to choose whether or not to participate in e-Health. And, if we do wish to participate, then we need to be able to choose which information we're willing to share and which we aren't. Finally, we need a truly massive and impartial information campaign informing citizens about e-Health. The only tool we have been offered so far by government is the disclosure directive: the ability to mask all of your information in a particular HIB.
In its current form, e-Health will absolutely increase the risk to your constitutional right to privacy.
A coalition of community groups has put a website together with detailed information at The Big Opt Out: www.bcoptout.ca. The site has information for patients, doctors and others interested in how to protect their private medical health information.
Inform yourself. Read everything you can about these changes and ask questions. You can let your healthcare providers know that you want to assert your right to privacy and that any information they share about you must be done only with your consent. Glyn Townson is on the Board of Directors of BC Persons with AIDS Society BACK TO TOP
Excerpted from BC's Big Opt Out
The E-Health (Personal Health Information Access and Protection of Privacy) Act was passed in BC in 2008. It allows the BC government to gather electronic patient records and create large databases called Health Information Banks. Once in the database, the information can be used for many purposes by many people.
Under Bill 24, people can create a disclosure directive that limits access to their personal health information by users of an e-Health database. Making a directive is not an absolute right, however.
This is a general term referring to "electronic health" management. Rather than paper-based records, patient information will be entered into computers and electronically available. E-Health can also refer to Bill 24.
BC's FOIPPA governs how public bodies in BC can collect, use or disclose personal information, including personal health information about you.
This is the new "layer" of electronic access created by Bill 24. It allows government to link Health Information Banks together and to make the resulting combined database accessible to various parties.
This is a new term created in Bill 24 for a database containing large amounts of information from a single source. For example, HIBs will soon be created from blood tests, Pharmanet records, diagnostic images, and other health services. These banks will then be linked together in the Health Information Access Layer.
A person can be said to have given informed consent when consent is based upon a possession of and clear understanding of the facts, implications and future consequences of an action. Some advocates claim informed consent will be impossible with these new databases.
The aim of ICM is to electronically link information on individuals collected by organizations delivering services to the public, including government departments and not-for-profit organizations.
BC's PIPA governs how private sector and not-for-profit organizations can collect, use or disclose personal information about you. BACK TO TOP
BC has 2 laws that govern freedom of information and protection of privacy. Both of the Acts permit disclosure of your personal information in accordance with a provincial law. By enacting Bill 24, the government has greatly increased its ability to collect your personal health information from a wide range of private, public and not-for-profit bodies. What is personal information? Any recorded information that identifies you, such as your name, address, race, religion, sexual orientation, disability, fingerprints, information about your health care, educational, financial, criminal or employment history, and other people's opinions about you and your own opinions. Act One: FOIPPA The Freedom of Information and Protection of Privacy Act (FOIPPA) sets out the rules for how public bodies in BC can collect, use or disclose information. These public bodies include: provincial government ministries, municipalities, regional districts, universities, municipal police forces and hospitals, and professional bodies such as the College of Physicians and Surgeons, and the Law Society of BC. FOIPPA gives you the right to request access to records held by public bodies, request corrections to your personal information, and to have your personal information held by public bodies kept secure and private. If you have a concern, you can ask the Office of the Information and Privacy Commissioner (OIPCBC) to review decisions by public bodies about privacy and access to records. Act Two: PIPA The Personal Information Protection Act (PIPA) sets out rules for how private sector and not-for-profit organizations can collect, use or disclose personal information about you. These organizations include: businesses and associations, not-for-profits, labour organizations, landlords and doctors in private practice. PIPA gives you the right to know why an organization collects, uses or discloses your personal information, request access to your information and request corrections, or complain if you have a concern with how your personal information is being used. PIPA requires organizations to obtain your consent when they collect, use or disclose your personal information, tell you how your information is being used and to whom it has been disclosed, and destroy personal information about you that it no longer needs for the purpose it was collected for or for a related legal reason. If you are not satisfied with an organization's response to your concerns, you can ask the Office of the Information and Privacy Commissioner to review the matter. Contact OIPCBC
info@oipc.bc.ca • http://www.oipcbc.org/ For toll-free access, call Enquiry BC at one of the numbers below and request a transfer to (250) 387-5629. Enquiry BC Vancouver: (604) 660-2421 Elsewhere in BC: (800) 663-7867
Enquiry BC Vancouver: (604) 660-2421 Elsewhere in BC: (800) 663-7867
BACK TO TOP
For information on bequests and other forms of giving, please contact Sam Bradd tel 604-875-0188 email sam@bccpd.bc.ca or fax 604-875-9227.
For more information, please visit www.yorku.ca/drpi/Canada.html. You can also see more on BCCPD's website at www.bccpd.bc.ca, under Projects.
Shelley received this well-deserved recognition for her work when she was presented with a plaque by Mayor Gregor Robertson.
And, if you still want to receive Transition by mail, that’s ok too.
Edition Funding
The Law Foundation of BC
We're proud to have a Special Olympian at the BCCPD. Volunteer Joyce Groenevelt won a silver medal in the 10-pin Team Bowling competition, held in Abbotsford, BC this July. In the winning game, Joyce bowled an amazing 216, including 5 strikes.
"I feel really happy," Joyce said. "I had a lot of fun and winning the medal was a big surprise." Congratulations Joyce!
Editorial Statement The views and opinions expressed within the pages of Transition are not necessarily those held by the total membership or Board of Directors. The material presented herein is meant to be thought-provoking and to promote dialogue. Transition is a forum to share information within the disability community, and with government and the general public. It is also an opportunity for people with disabilities to display creative talent.
Disclaimer Any firm or company advertising in Transition is for our readers’ benefit and does not constitute an endorsement by the BCCPD.
Canadian Publications Mail Product Sales Agreement No.40051676
Our 2012 CPP Series guides are now available in English, Punjabi and Traditional Chinese.
How are we doing? Send us your feedback on BCCPD.
See our multilingual publications .
9-1-1 and You
Be Prepared
George Pearson Centre, gardens, orchards....find out about a wonderful new project here.
See our Disability Benefits Help Sheets , including new Chinese and Punjabi translations.
BCCPD Online
Open an RDSP
The Registered Disability Savings Plan can benefit people regardless of their income. Learn more.