Privacy FAQs

Welcome to Kensington Health!

Page is currently loading...

Privacy Downloads

Privacy FAQs

The Personal Health Information Protection Act (PHIPA) is Ontario’s health-specific privacy legislation. PHIPA sets out the rules for the collection, use and disclosure of personal health information.

Personal Health Information (PHI) is any identifying information about an individual, whether oral or recorded, if the information:

  • relates to the individuals physical or mental health status, including family health history;
  • relates to the provision of health care, including the identification of a health care provider;
  • relates to payments or eligibility for health care, including health insurance number;
  • relates to the donation of any body part or bodily substance or is derived from the testing/examination of such; or
  • identifies a substitute decision-maker.

Kensington Health uses your information for the delivery of health care programs and services, quality improvement, research, education, fundraising, and to meet legal and regulatory requirements.

Kensington Health shares personal health information with individuals directly involved in delivering health care programs and services to our patients, clients and residents.

Health information may also be disclosed to other provincial organizations, including the Ministry of Health and Long-Term Care (MOHLTC), The Canadian Institute for Health Information (CIHI), Toronto Public Health and Cancer Care Ontario.

To access your health records, you must complete and submit an Authorization to Disclose Personal Information form to your health care provider.

Please allow a maximum of 30 days for Kensington Health to respond to your request. Processing fees may apply.


If an individual believes their record is inaccurate or incomplete, they may request Kensington Health to correct the record by contacting the Privacy Office.

If you are unable to give consent due to reasons of competency or consciousness, the consent decision falls to the appointed substitute decision maker.

A substitute decision maker is an individual who is authorized under PHIPA to consent on your behalf to the collection, use and disclosure of your personal health information.

A ‘consent directive’ or ‘lock-box’ is a term to describe the right of individuals to withhold or withdraw their consent to the collection, use of disclosure of personal health information for health care purposes.

If you do not want Kensington Health to use or disclose your personal health information, you must complete and submit a Lockbox Request Form to our Privacy Office.

Administrative Safeguards

Technical Safeguards

Physical Safeguards

Privacy & security policies

Logging, auditing & monitoring

Controlled access to facilities

Training & awareness

Strong password encryption

Visitor supervision

Confidentiality agreements

Firewalls, anti-virus, anti-spam

Workstation security

Third party contracts

Threat risk assessments

Password protected system access

For more information about your privacy rights and the protection of your personal health information, please contact Kensington Health’s Privacy Office at:

Privacy Office

25 Brunswick Avenue | Toronto ON | M5S 2L9

Phone: 1-437-828-9300