Alberta Data Protection Authority Issues Health Email Privacy, Encryption Guidelines

VANCOUVER, British Columbia—Alberta’s Office of the Information and Privacy Commissioner Aug. 16 released guidelines for health care data custodians on ensuring the privacy and security of electronic communications, particularly email.

Under the province’s Health Information Act (HIA), health information custodians have a duty to protect the privacy of patients and the confidentiality of health information, the Alberta data protection authority said in a statement announcing the new guidance.

The guidance (HIA Practice Note #5) said such communications include sending appointment reminders; setting up specialist appointments; offering a new service; and following up with patients on a treatment plan.

The practice ...