Distributes a software product, in Saskatchewan

S.S. 1999, c. H-0.021, s. 18 · Read the law's page

• If you are a trustee, enter into a written agreement with an information management service provider before giving it personal health information; the agreement must govern access to and use, disclosure, storage, archiving, modification and destruction of the information, provide for its protection and meet the regulations (s. 18(2); Regulations, s. 7).
• If you are an information management service provider, do not use, disclose, obtain access to, process, store, archive, modify or destroy personal health information received from a trustee except to process, store, archive or destroy it for the trustee, to provide the trustee with information management or information technology services, to take custody and control of it when the trustee ceases to be a trustee, or to combine records (s. 18(1), (3)).
• If you are an information management service provider, comply with the terms of the agreement with the trustee and notify the trustee at the first reasonable opportunity of any breach of the agreement (s. 18(4); Regulations, s. 7(f)).
• Keep secure the personal health information in your custody or control as the Act requires; you do not contravene the requirement if you can establish that you took all reasonable steps to prevent the contravention (s. 64(1.1), (1.2)).