Law / Canada / Northwest Territories
Health Information Act, information managers and their agreements with custodians
archived copy
Read from a public archive copy, not the publisher directly. The publisher does not serve this page to automated readers, so a direct fetch was not an option here; how we access sources. Archived . Publisher's page: https://www.justice.gov.nt.ca/en/files/legislation/health-information/health-information.a.pdfIn force since .
A sensitive categories rule binding public and private bodies.
- Obligation class
- Governance, Security
As of .
What it requires
- If you provide a custodian with storage, processing, retrieval, disposal, transformation, information system or information technology services for personal health information, you are an information manager: enter into a written information management agreement with the custodian before it uses your services, unless an exception in s. 13(3) applies (s. 13(2)-(3)).
- Agree in that agreement to comply with the Act, the regulations and the custodian's standards, policies and procedures, and to maintain administrative, technical and physical safeguards for the personal health information (s. 13(4)).
- Do not collect, use or disclose the personal health information except in accordance with the information management agreement, and do not contravene its terms (s. 13(8)).
These lines are LexLint's reading of the law's text, as of .
What this law does
An information manager is a person or organization that provides a health information custodian with the processing, storage, retrieval or disposal of personal health information, the transforming of it, or information management, information system or information technology services. Before using the services of an information manager, a custodian shall enter into an information management agreement with it, subject to subsection (3) and any exceptions set out in the regulations.
The agreement must contain terms under which the information manager agrees to comply with the Act, the regulations and the custodian's standards, policies and procedures, and to maintain administrative, technical and physical safeguards for the information. An information manager to which personal health information is disclosed shall not collect, use or disclose it except in accordance with the agreement, and shall not contravene the agreement.
When LexLint raises it
When your app profile says your app handles health records or distributes a software product.