{"id":86,"date":"2017-12-31T18:34:00","date_gmt":"2018-01-01T01:34:00","guid":{"rendered":"https:\/\/blogs.ubc.ca\/arst516\/?p=86"},"modified":"2018-01-01T12:05:46","modified_gmt":"2018-01-01T19:05:46","slug":"records-management-technology-in-the-context-of-freedom-of-information-and-privacy-by-murray-schellenberg","status":"publish","type":"post","link":"https:\/\/blogs.ubc.ca\/arst516\/?p=86","title":{"rendered":"Records Management Technology in the Context of Freedom of Information and Privacy <\/em> by Murray Schellenberg <\/strong>"},"content":{"rendered":"

\u201cThere is a direct relationship between good records and information management and the ability of a public body to meet its responsibilities under either the Access to Information and Protection of Privacy Act or the Health Information Act.<\/em>\u201d <\/span><\/p>\n

NWT Information and Privacy Commissioner\u2019s Report ,\u00a0<\/span>2016-2017, p. 44<\/span><\/p>\n

 <\/p>\n

Recently, on Oct. 3, 2017, to be precise, Elaine Keenan Bengts, the Northwest Territories\u2019 Information and Privacy Commissioner, tabled her latest annual report in the Northwest Territories legislative assembly [<\/span>link1<\/span><\/i>]. Her report \u2013 and the subsequent news coverage about it [<\/span>link2<\/span><\/i>] \u2013 highlight the important role that good records management plays in the efficient and effective engagement of Freedom of Information and Protection of Privacy. However, the report also makes clear that records management still faces an uphill battle as it tries to strike a balance between making sure people can access and control data about themselves, and keeping that information out of the hands of people who don\u2019t need or shouldn\u2019t have access to it. One of the biggest obstacles in the Northwest Territories (and probably in many, if not most, other jurisdictions) is in the technologies used to manage and transmit the records and in people\u2019s willingness to use them.<\/span><\/p>\n

<\/p>\n

As evidenced in the privacy commissioner\u2019s report, recent changes have brought to light issues specifically relating to health information. The new Health Information Act, introduced in 2015, stipulates the right of patients to access and control who has access to their personal health information. It also recognizes the need for health care providers to collect, use and disclose that information for the purpose of providing health care. The difficulties in achieving and maintaining this balance are compounded in the Northwest Territories by the fact that a patient is not assigned to one physician, but, rather, is provided with primary health services by various teams. This means that the health records need to be accessible to a wide and diverse group of people \u2013 but not to everyone in the system! In the past year, these problems have been even further complicated by a major structural reorganization of the Health and Social Services Authority that took place in 2016. <\/span><\/p>\n

 <\/p>\n

Issues with Privacy <\/strong><\/p>\n

\u201cUnder the Act, health information custodians must have the ability to allow for a patient to put conditions on their consent<\/em>.\u201d <\/span><\/p>\n

NWT Information and Privacy Commissioner\u2019s Report,\u00a0<\/span>2016-2017, p. 38<\/span><\/p>\n

 <\/p>\n

Keenan Bengts notes in her report that in the past year the privacy commissioner\u2019s office has already received complaints about issues under the new legislation. One case, in particular, dealt with a patient who was having difficulties getting his health service provider to limit access to his health records to specific individuals \u2013 a legitimate condition for a patient to request under the new legislation. On examination, Keenan Bengts found that the health information system being used by that particular health authority \u201cdid not have the functional capacity to allow masking\u201d (p. 38). <\/span><\/p>\n

Similarly, another health authority reported that a clerk had been repeatedly accessing private health information inappropriately. Again, the software was a major obstacle. The system in place didn\u2019t allow for blocking to prevent this kind of inappropriate access.<\/span><\/p>\n

 <\/p>\n

Issues with Data Storage and Transfer<\/strong><\/p>\n

\u201cEvery employee is now expected to manage their own records \u2026 but little is done to ensure that employees are knowledgeable about and applying good information management practices. Every employee with a computer has control over his or her record keeping system, which leads to uneven records management<\/em>.\u201d <\/span><\/p>\n

NWT Information and Privacy Commissioner\u2019s Report,\u00a0<\/span>2016-2017, p.44<\/span><\/p>\n

 <\/p>\n

The report also highlights issues related to record keeping and technology that do not arise out of specific complaints but which the commissioner felt worthy of noting. One such area is data transfer. As Keenan Bengts points out (p. 45) the reality is that \u201cinformation has to flow to provide effective services.\u201d However, this flow needs to be carefully controlled when dealing with the data covered by privacy laws.<\/span><\/p>\n

One persistent issue in this regard is the use of personal web-based e-mail accounts and instant messaging services for taking notes and storing sensitive communications. Despite the prohibitions against doing this, workers still favour the convenience and familiarity of this and often don\u2019t think about the security issues involved. <\/span><\/p>\n

Another problem raised in the report is the continued use of fax machines to transmit patient data and other sensitive information. Fax technology is now considered old technology; nevertheless, Keenan Bengts states that she still receives a significant number of reports of faxes being sent to the wrong telephone number causing a breach of patient privacy.<\/span><\/p>\n

 <\/p>\n

So What Can We Do?<\/span><\/p>\n

\u201cGood access and privacy \u2026 require strong leadership, good policies, and good information management<\/em>\u201d <\/span><\/p>\n

NWT Information and Privacy Commissioner\u2019s Report,\u00a0<\/span>2016-2017, p. 44<\/span><\/p>\n

 <\/p>\n

The report is not, of course, just a litany of problems and mistakes. Keenan Bengts, in responding to the complaints and on observing ongoing problems, offers suggestions for fixing the problems; suggestions that are relevant not only in the Northwest Territories, but to records professionals everywhere. Interestingly, most of the solutions involve educating those we work with.<\/span><\/p>\n

There\u2019s often not much we can do about the software we have to work with, but we need to make sure we understand its limitations and draw any problems to the attention of those who can fix them. Explaining not only what the problems are, but being clear in explaining what needs to be done to fix them is key. Offering clear suggestions makes it not only easier to get a solution, but is often cheaper as there is a specific goal to work towards. <\/span><\/p>\n

It\u2019s very difficult to stop people from using their personal devices but Keenan Bengts points out that emails can be made very secure by the simple addition of encryption. While this is not currently a widespread practice, it is, again, something that can be brought to the attention of those who need to transfer records and, with education, is something that can be implemented fairly easily. <\/span><\/p>\n

As records professionals, it\u2019s sometimes easy to forget that records are intimately related to the people who use them; without these people there would be no records. We, however, are more directly involved with the records in ways that the users frequently are not. One of the key roles we can play is to ensure that the users have both the tools and the knowledge to interact with the records appropriately.<\/span><\/p>\n


\n<\/span>Links<\/b><\/p>\n

\u00a0\u00a0\u00a0\u00a0Link1<\/span><\/i><\/p>\n

http:\/\/www.assembly.gov.nt.ca\/sites\/default\/files\/td_465-182_0.pdf<\/span><\/a><\/p>\n

\u00a0\u00a0\u00a0\u00a0Link2<\/span><\/i><\/p>\n

http:\/\/www.cbc.ca\/news\/canada\/north\/privacy-commissioner-nwt-report-1.4343978<\/span><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

\u201cThere is a direct relationship between good records and information management and the ability of a public body to meet its responsibilities under either the Access to Information and Protection of Privacy Act or the Health Information Act.\u201d NWT Information and Privacy Commissioner\u2019s Report ,\u00a02016-2017, p. 44   Recently, on Oct. 3, 2017, to be […]<\/p>\n","protected":false},"author":54249,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3142386,3100255,328,1],"tags":[],"class_list":["post-86","post","type-post","status-publish","format-standard","hentry","category-access-to-information-and-public-accountability","category-digital-transformation","category-privacy","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/blogs.ubc.ca\/arst516\/index.php?rest_route=\/wp\/v2\/posts\/86","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.ubc.ca\/arst516\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.ubc.ca\/arst516\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.ubc.ca\/arst516\/index.php?rest_route=\/wp\/v2\/users\/54249"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.ubc.ca\/arst516\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=86"}],"version-history":[{"count":1,"href":"https:\/\/blogs.ubc.ca\/arst516\/index.php?rest_route=\/wp\/v2\/posts\/86\/revisions"}],"predecessor-version":[{"id":87,"href":"https:\/\/blogs.ubc.ca\/arst516\/index.php?rest_route=\/wp\/v2\/posts\/86\/revisions\/87"}],"wp:attachment":[{"href":"https:\/\/blogs.ubc.ca\/arst516\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=86"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.ubc.ca\/arst516\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=86"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.ubc.ca\/arst516\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=86"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}