ENHANCE Ontario
Health Information Network Provider (HINP) Notice 

Notice for PCCG Initiative

​

Our Role as a HINP
ENHANCE Ontario (EO) acts as a Health Information Network Provider (HINP) under Ontario’s Personal Health Information Protection Act, 2004 (PHIPA) and Ontario Regulation 329/04. As a HINP, EO provides electronic services that enable Health Information Custodians (HICs) from the member hospitals to securely share Personal Health Information (PHI) for the Provincial Care Coordination Gateway (PCCG) initiative.

​

Information Practices

​EO is committed to protecting the privacy, confidentiality, and security of PHI. We adhere to the following practices:

​

1. Privacy and Security Governance

   • Designated privacy and security officers oversee compliance.

   • Written agreements with all participating organizations outline roles and responsibilities.

2. Policies and Procedures

   • Comprehensive privacy and security policies are implemented, monitored, and updated regularly.

   • All staff, contractors, and volunteers must comply with these policies.

3. Safeguards

   • Technical, administrative, and physical safeguards are in place to prevent unauthorized access, use, or disclosure of PHI.

   • Mandatory privacy and security training is provided to all personnel.

4. Third-Party Service Providers

   • EO contracts third-party providers for certain services. These providers must comply with PHIPA and EO’s privacy and security standards.

5. Confidentiality Agreements

   • All staff and service providers sign confidentiality agreements that include breach consequences.

​

Your Rights and Our Obligations

• EO will notify participating HICs promptly in the event of a privacy breach.

• EO maintains audit logs of all PHI access and transfers, available to HICs upon request.

• EO makes this notice and related policies publicly available, excluding any confidential or proprietary information.​​