Duty LXD-6587
Distributes a software product, in Newfoundland and Labrador
Personal Health Information Act, information managers and suppliers of electronic meanssince 4 lines
S.N.L. 2008, c. P-7.01, ss. 2 (1) (l), 14 (4), 22 · Read the law's page
- If you provide goods or services that enable a custodian to use electronic means to collect, use, modify, disclose, retain or dispose of personal health information, comply with the Act and the regulations (s. 14(4)).
- If you process, retrieve, store or dispose of personal health information for a custodian, or provide it information management or information technology services, enter into a written agreement with the custodian that provides for protection of the information against unauthorized access, use, disclosure, disposition, loss or modification (ss. 2(1)(l), 22(1)-(2)).
- Use or disclose the information only for the purpose the agreement authorizes, and comply with the Act, the regulations and the terms of the agreement (s. 22(3)-(4)).
- Do not let an employee or anyone acting on your behalf access the information unless that person has agreed in writing to comply with the Act and the restrictions imposed on you (s. 22(5)).