CWP Reading List

Offences against the PHIPA can result in fines up to $50,000 for individuals and up to $250,000 for corporations.

A data use agreement (DUA) is an agreement required by the HIPAA Privacy Rule between a covered entity and a person or entity that receives a “limited data set” from the covered entity. Even though a limited data set excludes many direct identifiers of the individual, when such information is in the hands of non-covered entities, the Privacy Rule attempts to protect the privacy of individuals through the use of DUAs.