Reporting health privacy breaches under PHIPA

All health information custodians in Ontario, including optometrists, are required to report information related to health privacy breaches on an annual basis to the office of the Information and Privacy Commissioner of Ontario via the Online Statistics Submission website.

The report does not ask for personal health information, but focuses on the cause of the breach, the number of individuals affected, and the number of times health information was stolen, lost, used, and/or disclosed without authority.

Further information on how to submit annual health information breach statistics can be found here.