CIPP-C Web TestEngine demo

Health information custodians or trustees be specified only by applicable law or regulation

An individual's consent may be implied unless the individual has refused consent or if the purpose of the disclosure is not to provide health care.

Notification to the individual be made in the event of a data breach of personal health information (PHI) by an organization that is based in Canada

Consent must be expressed or implied when a custodian discloses personal health information (PHI) to another custodian for the purpose of providing health care.