Additional to the following Agenda, Tuesday April 17th will be dedicated to expert led, half-day optional workshops that you can sign-ip for! (seats are limited and extra charges apply)
View more details about the optional workshops.
Agenda
Day One: Monday, April 16, 2007
8:45am – 9:00am
Welcome & Opening Address
Speaker(s):
Gary Dickson, Q.C., Commissioner, Office of the Saskatchewan Information & Privacy Commissioner
Speaker(s):
Gary Dickson, Q.C., Commissioner, Office of the Saskatchewan Information & Privacy Commissioner
9:00am – 10:00am
Recent Cases: Stories from the Trenches
Speaker(s):
Leroy Brower, Director HIA, Office of the Information and Privacy Commissioner of Alberta
Diane Aldridge, Portfolio Officer, Office of the Saskatchewan Information And Privacy Commissioner
Gail Perry, Manager Research & Education, Manitoba Ombudsman Office
Even though each of the prairie provinces have had health information privacy laws in force now for differing periods of time (3, 5 & 10 years), the oversight bodies in all three investigate complaints when individuals allege that trustee/custodian organizations have misused his/her personal health information. Speakers from these oversight bodies will provide a recap of some of the more recent investigations undertaken by those offices and offer insight into what it takes to keep from being on the receiving end of a formal Investigation Report.
Speaker(s):
Leroy Brower, Director HIA, Office of the Information and Privacy Commissioner of Alberta
LeRoy Brower is the Director, Health Information Act (HIA) for the Alberta Office of the Information and Privacy Commissioner. Over the past four years he has led the health team in providing oversight of the HIA. This role involves investigation of privacy complaints, mediation of access requests and reviewing and commenting on privacy impact assessments submitted to the Commissioner. LeRoy has previously held FOIP positions within the Alberta Government as: FOIP Coordinator, Municipal Affairs; FOIP Advisor, Environment & Energy; and FOIP Coordinator, Social Services. LeRoy was a child abuse investigator for Social Services prior to becoming involved in the field of privacy.
Diane Aldridge, Portfolio Officer, Office of the Saskatchewan Information And Privacy Commissioner
Diane has been a mentor, coach, advocate, mediator, educator, board member, and manager. Diane has been an active volunteer in Saskatchewan, coaching 8 sports teams and has held various board positions including many years with a Family Services Bureau Board, Saskatchewan Coalition on Tobacco Reduction, and the Saskatchewan Labour Force Development Board. Diane graduated from the University of Regina with a Bachelor of Education. She has spent the last thirteen years working for different organizations including health regions and the WCB. She also has chaired many community working groups on a variety of development projects. In Diane's present role as Senior Portfolio Officer, she is involved with all aspects of the Office of the Information and Privacy Commissioner's (OIPC) mandate.
Gail Perry, Manager Research & Education, Manitoba Ombudsman Office
Gail Perry has worked at Manitoba Ombudsman for 19 years, mostly in the area of access and privacy, handling issues as an investigator and manager in the office's oversight role under Manitoba's information privacy laws. In spring 2006, Gail became the Manager of Research and Education for the office's Ombudsman Division and Access and Privacy Division. Gail has a law degree, has practiced law in Winnipeg and worked in government.
10:00am – 10:45am
Privacy Impact Assessments (PIA'S)
Speaker(s):
Brian Hamilton, Portfolio Officer, Office of the Information and Privacy Commissioner of Alberta
The Privacy Impact Assessment (PIA), if done properly, allows organizations to implement new programs or information systems while balancing the need to protect personal information. The PIA is quickly becoming "the standard", although it is fair to say that they are not conducted in a standard fashion. The Office of the Information and Privacy Commissioner of Alberta has evaluated hundreds of PIA's for many different projects. This presentation will highlight the traits of successful PIA's demonstrated through the evaluation process. Join Brian Hamilton of the Alberta Office while he discusses:
* When and why to do a PIA
* The attributes of an effective PIA
* Common doÕs and donÕts
Speaker(s):
Brian Hamilton, Portfolio Officer, Office of the Information and Privacy Commissioner of Alberta
Brian Hamilton joined the Office of the Information and Privacy Commissioner of Alberta as a Portfolio Officer in January 2006. Brian reviews and comments on Privacy Impact Assessments, and investigates privacy and access complaints. From 2001 to January 2006 he was Senior Manager, Privacy and Security at Alberta Health and Wellness. Brian's responsibilities included managing the Privacy Impact Assessment process, developing and implementing privacy and security policies, security threat-risk assessments, and privacy and security investigations. Brian's office coordinated efforts to ensure that Alberta's heath sector met minimum information security standards and lead the development of privacy and security assessment tools for the health sector.
10:45am – 11:05am
Break
Speaker(s):
11:05am – 12:05pm
1A: Health Information Protection Legislation 101 - Panel
Speaker(s):
Gail Mildren, General Counsel, Civil Legal Services, Manitoba Justice
Trish Livingstone, Director, Health Information Policy and Analysis, Saskatchewan Health
Wendy Robillard, Senior Manager, Information Policy and Compliance, Alberta Health & Wellness
This panel discussion will examine Health Information Protection Legislation across CanadaÕs three prairie provinces and is suitable for individuals who require a basic level of understanding. Delegates will also have the opportunity to clarify nagging questions and learn where to go when answers are not so clear.
Speaker(s):
Gail Mildren, General Counsel, Civil Legal Services, Manitoba Justice
Gail has been a lawyer with Civil Legal Services (CLS) of Manitoba Justice since her call to the Manitoba Bar, and was appointed General Counsel in 1990. She is also the team leader for the CLS Crown Law team of lawyers and the senior lawyer on CLS's Access and Privacy Law Group. Gail's legal practice is varied, and her involvement with access to information and privacy issues dates back to 1985 with the passage of Manitoba's former Freedom of Information Act. In 1996 - 1997, she was involved in the development and drafting of The Freedom of Information and Protection of Privacy Act and The Personal Health Information Act, and she continues to be involved in the implementation of these Acts.
Trish Livingstone, Director, Health Information Policy and Analysis, Saskatchewan Health
Trish Livingstone, MA, is currently employed as the Director of Health Information Policy and Analysis, and Chief Privacy and Access Officer, with Saskatchewan Health. She has been an employee of the Saskatchewan public service for nearly 10 years and has experience in a variety of areas including privacy and access, health policy and program development, applied research, and performance planning and measurement. Trish's role includes managing and implementing a privacy framework for the health sector including developing new information / privacy policies to ensure compliance with applicable legislation.
Wendy Robillard, Senior Manager, Information Policy and Compliance, Alberta Health & Wellness
Wendy Robillard is the Senior Manager of the Information Policy and Compliance Unit at Alberta Health and Wellness. The Unit is responsible for policy development and interpretation, for establishing and implementing appropriate security standards and for maintaining the privacy framework. The Unit provides leadership and direction to both the health sector and the department regarding the Health Information Act (HIA). The Unit assists in the development of e-health information management initiatives including the provincial electronic health record known as Alberta Netcare, ensuring health information is collected, used, protected and disclosed in compliance with HIA and other legislative requirements. Wendy was on the technical support team for the HIA Review conducted in 2004 and provides ongoing support to the Electronic Health Record Data Stewardship Committee. She capitalizes on her previous experience as a front line worker in the health sector and takes a pragmatic approach in addressing privacy, security and policy related issues.
1B: Maintaining Privacy in Remote, Rural, or other Geographically Challenged Communities
Speaker(s):
Mark Pettitt, Director CQI & Strategic Planning, Sun Country Health Region
Shelley Barnes, Electronic Health Records Coordinator, Central Regional Health Authority
In a recent report posted on www.rural.gc.ca Alberta had a rural population of 24.6%, Manitoba was 33.4%, and Saskatchewan was 42.3%. Communities can be small, isolated, and in the case of First Nations reserves, uniquely encounter an additional level of authority in the federal government. Such prairie realities pose extraordinary health privacy challenges. How to tackle privacy when everyone knows everyone else? How can technology assist remote locations? How to navigate the laws of multiple jurisdictions? This session will be anything but flat.
Speaker(s):
Mark Pettitt, Director CQI & Strategic Planning, Sun Country Health Region
Mark Pettitt is a Registered Dietitian who has held positions in clinical nutrition, food service management, and public health nutrition. While working as a Quality of Care Coordinator for the Sun Country Regional Health Authority, Mark was designated as the regionÕs Privacy Officer when The Health Information Protection Act (HIPA) was proclaimed in September of 2003. Since that time, he has assumed the role of the Regional Director of CQI and Strategic Planning but has maintained the Privacy Officer responsibility.
Shelley Barnes, Electronic Health Records Coordinator, Central Regional Health Authority
Shelley Barnes was appointed the Regional Health Authority - Central Manitoba Inc.'s Electronic Health Records Coordinator in November 2006. She is responsible for coordinating the deployment efforts of an electronic health record (EHR) across the continuum of care including the complete development of an EHR Team. Specifically, she will establish a competent group of core staff who will function in a project team environment tasked with the development and implementation of a region-wide health record.
1C: The interaction between health research & privacy: Can they co-exist?
Speaker(s):
Patricia Kosseim, General Counsel, Office of the Privacy Commissioner of Canada
There is extensive and varied interaction between those who conduct health research and those who provide and use health services. Some argue that in order to improve health and health care personal information is a necessity and should be readily available to health researchers. Others argue personal health information needs to be obtained consensually, regardless of the purpose or how beneficial the outcome. Join this session for what will surely raise interesting questions and spark spirited debate.
Speaker(s):
Patricia Kosseim, General Counsel, Office of the Privacy Commissioner of Canada
Patricia Kosseim is General Counsel at the Office of the Privacy Commissioner of Canada (OPC) since January 2005. Before joining OPC, Patricia spent five years at the Ethics Office of the Canadian Institutes of Health Research leading major policy initiatives on ethical/legal/social issues related to health research. During this period, she was briefly seconded to Canada Health Infoway Inc. to advise on legal issues related to the development of pan-Canadian electronic health record systems. Prior to this, Patricia practiced in Montreal for over six years with a major national law firm in areas of human rights, health law, labour and employment law, administrative law and professional regulation/liability. Patricia was called to the QuŽbec Bar in 1993. She holds degrees in Business and in Law from McGill University, as well as a Master's Degree in Medical Law and Ethics from King's College,London, U.K.
12:05pm – 1:05pm
Lunch
Speaker(s):
1:05pm – 2:05pm
2A: Wrestling with Rogue Factions within Your Organization
Speaker(s):
Dawn Lake, Information Access and Privacy Consultant, Palliser Health Region
Bryan Salte, Associate Registrar, College of Physicians and Surgeons of Saskatchewan
As the individual responsible for privacy and security in your organization, have you ever found out after the fact about a new program or project implemented with serious privacy implications that were never properly considered? Have you ever found yourself in the difficult position of trying to manage the response to a privacy or security incident for a program or project you never knew existed? This session will provide guidance and advice about how to round up the rogue factions in your organization that implement before considering risk assessment or think they can complete their own risk assessment without the assistance of the privacy officer.
Speaker(s):
Dawn Lake, Information Access and Privacy Consultant, Palliser Health Region
Dawn is Information Access and Privacy Services Consultant for the Palliser Health Region, encompassing Medicine Hat and area in Alberta. Her responsibilities include chairing a Regional Access Management Committee, coordinating the education and training to all employees and contracted affiliates with in the Region, and establishing policy, guidelines and best practices in access and privacy. Dawn is the liaison between the Region and Law Enforcement and the single point of contact for Research for Palliser. In addition Dawn sits on various provincial steering committees on Research and Ethics and Alberta Health's Information Access and Privacy Committee. Dawn a graduate of the University of Alberta's IAPP Program (2006) and is perusing her education towards obtaining a degree in Law.
Bryan Salte, Associate Registrar, College of Physicians and Surgeons of Saskatchewan
Bryan Salte is currently the Associate Registrar, Legal Counsel and Privacy Officer of the College of Physicians and Surgeons of Saskatchewan. Bryan's primary responsibilities include preparing and presenting discipline cases to the discipline committee of the College of Physicians and Surgeons, drafting bylaws for consideration by the Council of the College of Physicians and Surgeons and representing the College of Physicians and Surgeons in court matters. Bryan received his B.Ed. in 1975 and LL.B. 1978 both from the University of Saskatchewan. Before joining the College, Bryan practiced with Robertson Stromberg and its predecessor firms from 1979 to 1999.
2B: Incident Response
Speaker(s):
Mike Tolfree, Manager of Privacy & Security, Calgary Health Region
Does your organization have a plan when it learns about a potential privacy breach? Regardless if a privacy breach actually took place, it is imperative that your organization establishes protocols for responding to potential privacy breaches. These protocols will make the investigation of these breaches more efficient, will aid in determining what actually happened, and ensure that breaches are resolved in a timely fashion. Through an examination of Calgary Health Region's "incident response" processes you will see how these protocols function and learn the benefits of having such a system in the first place.
Speaker(s):
Mike Tolfree, Manager of Privacy & Security, Calgary Health Region
Mike Tolfree manages the Information & Privacy Department of the Calgary Health Region. The Calgary Health Region is one of the largest health organizations in Canada, employing 24,000 individuals and providing a wide range of health care services to over one million people. His responsibilities include: ensuring compliance with privacy legislation, contract negotiation, drafting and review, mitigating and remediating breaches of patient confidentiality and responding to freedom of information requests.
2C: Examining Information Management Challenges in the Health Sector
Speaker(s):
John Swiniarski, Assistant Registrar, College of Physicians and Surgeons of Alberta
Landis Esposito, Chief Privacy Officer, Winnipeg Regional Health Authority
The protection of personal information is an act of information management, albeit a serious one. The combination of legislation and case law, ethical principles, and efficient business practices makes management of health information a particular challenge. Finding the right balance between operational efficiencies and keeping an individual's information safe is paramount to a healthy Health Sector.
Speaker(s):
John Swiniarski, Assistant Registrar, College of Physicians and Surgeons of Alberta
Mr. John Swiniarski is an Assistant Registrar with the College of Physicians and Surgeons of Alberta (Canada). Following his MBA from the University of Alberta in 1979, he went to work for the Alberta Medical Association. During his ten years there, Mr. Swiniarski was responsible for the economic research to support the AMAÕs fee negotiations, the fee allocation process, and Association operations. As well, Mr. Swiniarski represents the College on various aspects of the Alberta NetCare initiative (a province-wide health information system), including chairing the Pharmaceutical Information Network Stewardship Committee.
Landis Esposito, Chief Privacy Officer, Winnipeg Regional Health Authority
Landis assumed the role as WRHA Chief Privacy Officer July of 2006. Prior to taking on this new challenge, Landis spent the past 18 years managing Health Information Services at St. Boniface General Hospital and Community Health Services. She also has nine years experience as an Education Consultant with Canadian Healthcare Association. During her years with Community Health Services, Landis was project lead on the development of requirements, selection of a vendor, and implementation of a solution to meet the needs of an integrated EHR. Landis is also a member of the International Association of Privacy Professionals.
2:05pm – 3:05pm
3A: Access Requests versus Permissible Disclosures
Speaker(s):
Gary Dickson Q.C., Commissioner, Office of the Saskatchewan Information And Privacy Commissioner
When is the action of passing on personal health information a ÒdisclosureÓ and when is it a question of "access"? This session will examine real life information management examples that will help clarify and distinguish the two activities. This session should help you if you are a health information custodian, a health research organization or even if you are a member of the public.
Speaker(s):
Gary Dickson Q.C., Commissioner, Office of the Saskatchewan Information And Privacy Commissioner
3B: EHRs: Current Debates and Future Considerations
Speaker(s):
Jayden Stephens, Privacy Officer, Saskatoon Health Region
Heather McLaren, Director, Legislative Unit, Manitoba Health
Robert Martin, Manager, Information Security and Privacy, Alberta Health & Wellness
Electronic health records are anticipated to improve healthcare delivery, providing widely accessible, accurate and timely information for improved patient safety and an integrated, more secure, healthcare system. What are the challenges for technology, the law, policies and procedures? What might be the expectations for the patient and the trustee/custodian?
Speaker(s):
Jayden Stephens, Privacy Officer, Saskatoon Health Region
Jayden Stephens is the Privacy Officer for Saskatoon Health Region, Saskatchewan's largest Health Region and the province's largest employer. His responsibilities span the areas of privacy and access providing support to the numerous programs delivered regionally, provincially and nationally. Over his six years with the Saskatoon Health Region his role within privacy evolved from his work within the Electronic Health Record development and he continues to provide ongoing support to provincial, regional and national Electronic Health Record advancement. He has chaired numerous community boards and is an active volunteer within Saskatoon.
Heather McLaren, Director, Legislative Unit, Manitoba Health
Heather McLaren is the Director of the Legislative Unit at Manitoba Health. She was involved in the policy development and drafting of The Personal Health Information Act and the Personal Health Information Regulation, both of which have been in force since December 1997. Since that time, she has directed the development and dissemination of informational materials on the Act and the regulation and has participated in federal/provincial/territorial working groups on privacy of health information. She has also delivered presentations at national conferences on implementation of the legislation. Her unit continues to be the first contact point for trustees and the public who have questions about the legislation.
Robert Martin, Manager, Information Security and Privacy, Alberta Health & Wellness
Robert Martin is responsible for the information security policy, controls and auditing of Alberta Health and Wellness and the Alberta Electronic Health Record. Prior to joining the Government of Alberta, Robert consulted for numerous Canadian and American organizations on all aspects of information security, and he has delivered over 35 courses on information security and enterprise networking.
3C: Who is responsible for organizational health privacy?
Speaker(s):
Wendy Robillard, Senior Manager, Information Policy and Compliance, Alberta Health & Wellness
Who do you need to get involved? What level of understanding should they have on the issues? How do you bring them up to speed? All of these questions and more will be answered in this session dedicated to ensuring your organization has all of its components working with privacy on the mind.
Speaker(s):
Wendy Robillard, Senior Manager, Information Policy and Compliance, Alberta Health & Wellness
3:05pm – 3:30pm
Break
Speaker(s):
3:30pm – 4:20pm
CommissionerÕs Panel Ð Current and Future Issues Surrounding the Secondary Usage of Health Information
Speaker(s):
Gary Dickson Q.C., Commissioner, Office of the Saskatchewan Information And Privacy Commissioner
Irene Hamilton, Ombudsman, Manitoba Ombudsman Office
Frank Work Q.C., Commissioner, Office of the Information & Privacy Commissioner of Alberta
As we continually move towards improving the delivery of healthcare while utilizing technology to create efficiencies for those using and managing personal health information we are faced with many issues that need to be considered thoroughly, especially from a personal information privacy perspective. This panel is dedicated to highlighting some of these issues and discussing the current Ôtrains of thoughtÕ guiding the development of potential solutions. Some of the issues to be discussed are:
áSecondary usage of health information
áMedical research
áPublic health surveillance and epidemic response
áHealth system management
áQuality assurance
áLaw enforcement
Speaker(s):
Gary Dickson Q.C., Commissioner, Office of the Saskatchewan Information And Privacy Commissioner
Gary Dickson was appointed Saskatchewan's first full-time Information and Privacy Commissioner effective November 1, 2003. He practiced law in Calgary, Alberta for 23 years. He then served as the Member of the Alberta Legislative Assembly for Calgary Buffalo from 1992 to 2001. From 2001 until his Saskatchewan appointment he worked exclusively in the areas of privacy and access to information. He was directly involved in the creation, enactment and implementation of public and private sectors privacy laws in the province of Alberta.
Irene Hamilton, Ombudsman, Manitoba Ombudsman Office
Irene Hamilton was appointed Ombudsman for Manitoba March 31, 2005. She has a Bachelor of Arts, University of Winnipeg and a Bachelor of Law, University of Manitoba. She was called to the Manitoba Bar in 1980. Prior to becoming Ombudsman, Irene was the Assistant Deputy Minister of Justice, Courts Division from January 2000. From 1991 to 2000 she was the Public Trustee of Manitoba. She had previously been the Vice President, Licensing and Corporate Counsel and Secretary for the Liquor Control Commission. Irene has been actively involved in the voluntary sector as well serving on the Board and as the Chair of the United Way of Winnipeg, Manitoba Theatre for Young People and the Deer Lodge Hospital Ethics Committee. She is currently a Bencher of the Law Society of Manitoba.
Frank Work Q.C., Commissioner, Office of the Information & Privacy Commissioner of Alberta
Mr. Work was born in Calgary, received his Bachelors Degree in Political Science and Masters Degree in Environmental Design from the University of Calgary and obtained a law degree in 1981 from McGill University. He practiced corporate commercial law in Calgary, worked for the Attorney General of Bermuda, and was seconded to the United Nations Environmental Program. After returning to Canada in 1987, Mr. Work took a contract position with the World Bank and was assigned to the country of Mauritius. From 1991 to 1996 Mr. Work worked as Parliamentary Counsel to the Legislative Assembly of Alberta, and General Counsel to the Ethics Commissioner of Alberta. In 1996 Mr. Work began his career at the Office of the Information and Privacy Commissioner as General Counsel and Assistant Commissioner. Mr. Work was appointed to a five-year term as Information and Privacy Commissioner in May 2002.
