Privacy and Security
When using the Health System Insights (HSI) Platform, users are responsible for:
- following hospital privacy and security policies,
- abiding by the HSI End User License Agreement,
- never sharing username or password with others,
- never posting username or password in a place where others can see or access it,
- always logging out of HSI when not using it, or when leaving workstations,
- storing all printed or exported HSI data securely,
- shredding or destroying all printed or exported HSI data when no longer needed, and
- reporting privacy or security breaches.
Reporting Privacy or Security Breaches
Suspected and/or actual privacy or security breaches must be reported.
- Notify your facility's Privacy Officer, HSI FRA and ONE® ID LRA immediately and follow hospital policies.
- The HSI FRA and/or ONE® ID LRA should mitigate the breach by disabling HSI user accounts in question.
- The facility must notify Ontario Health. Explain the purpose of the call is to report a privacy or security breach, if leaving a message provide your contact details and explain your call is regarding a privacy or security breach.
Important: Do not include personal health information (PHI) in your email or voice messages.