What is Personal Information?
Personal information is any information about a particular individual, which includes information that relates to their own characteristics (e.g. age, date of birth, home address or phone number, ethnic background, family status), their health (e.g. health history, health conditions, health services received) or their activities and views (e.g. opinions expressed, or evaluations made by others). Of note is that there is a distinction between personal and business information; business information does not fall under the protection of privacy legislation.
Who is Driver Rehab Therapy?
Shirley Rolin, Occupational Therapist, is a Professional Corporation operating as Driver Rehab Therapy and is governed by the laws of Ontario and the College of Occupational Therapists of Ontario. The company is owned by Shirley Rolin. The company has administrative support working at head office, and Independent Contractor Occupational Therapists and driving instructors that work from clinics in the Greater Toronto Area. We utilize a number of consultants that may, in the course of their duties, have limited access to the personal information we hold. These include: business consultants; a bookkeeper; accountant; office maintenance; computer consultant; temporary workers to cover holidays; cleaners; equipment & systems service workers (e.g. equipment repair or telephone system repair); and lawyers. Their access to personal information is restricted as much as is reasonably possible and we have their assurance that they follow appropriate privacy principles.
Primary Purposes of Collecting Personal Information
Like all Occupational Therapists, we collect, use and disclose personal information such that we may provide effective intervention. For example, we collect information about a client’s health history, developmental history, and physical/cognitive/emotional/ behavioral abilities to assist us in determining driver ability and to make recommendations regarding intervention needs. Other examples of the type of personal information we collect for this primary purpose include: name, date of birth, previous health assessment results/reports. The information collected would be shared with the pertinent care provider(s). Under rare circumstances, the information may be used or disclosed without the client’s conveyed consent in the case of an emergency (e.g. the client is not able to communicate) or where we believe the client would consent if asked and it is impractical to obtain consent (e.g. a family member passing a message from our client and we have no reason to believe that the message is not genuine). Office personnel have limited access to certain types of information in the course of carrying out their administrative duties, but only as is required to deliver on our services (e.g. intake and dissemination of referrals, filing, managing billings, typing dictated reports, proof reading documents). At times, the personal information collected by Driver Rehab Therapy is shared within our own professional group to allow professionals to consult with one another and to collaborate on programming ideas to optimize service delivery to our clients. Note that all consultants are required to collect, use and store client information as per the College of Occupational Therapists of Ontario as per guidelines for record keeping.
Members of the General Public
Members of the general public may contact us to inquire about the occupational therapy services that we provide. In this case, our primary purpose for collecting personal information is to assist us in determining their potential candidacy for accessing service through our facility, to determine how we can best meet their needs. Through collection of this personal information, we may determine that a referral to an alternate service may be more appropriate, thus we may be able to provide that member of the general public with a more appropriate contact. In addition, we may be able to develop specialized programs to suit the needs of inquiring individuals, based on the personal information that they provide (e.g. a number of inquiries or requests for a printing group may result in the organization of such). Any collected information is destroyed if they choose not to proceed with our service. If they do proceed, they become a client and thus the information is used and disclosed in the manner described in Clients. On our website, we only collect the personal information that you provide and only use that information for the purpose that you gave it to us (e.g. to respond to your email message, to send you information on our service).
A primary purpose for collecting personal information from individuals contracted to do work for us (e.g. Occupational Therapists) is to ensure that they are qualified to provide the services for which they are contracted, and to ensure timely and effective work-related communications (e.g. assigning referrals, relaying messages urgent in nature). A second primary purpose is to ensure that we can contact them in the future (e.g. if inquiries or legal issues were to arise around intervention provided to a client by that contract staff while providing services through Driver Rehab Therapy). If contract personnel were to require a letter of reference or a verbal reference, information about their work-related performance would be collected and provided only as authorized by them.
Why do we require your permission?
We collect, use or disclose your personal information only with your consent. Your consent may be express or implied, and you may give it to us in writing, verbally, electronically, or through your authorized representative. When you use our services we consider that you have implied your consent for us to collect, use and disclose your personal information for the purposes identified above. You may withdraw your consent at any time, subject to legal and regulatory restrictions and reasonable notice. We do not provide or sell customer lists to any outside company for marketing, solicitation or any other such purpose.
We will not use or disclose your personal information without your consent except in the following circumstances:
- When required by law or law enforcement purposes.
- For an emergency that threatens life, health or security i.e. imminent danger
- To collect a debt that you owe us or to evaluate your credit worthiness.
- To a third party that we have contracted with to work on our behalf in providing services to you or to assist us in understanding your needs and preferences.
Related and Secondary Purposes of Collecting Personal Information
Like most organizations, we also collect, use and disclose information for the purposes related or secondary to our primary purposes. You can choose to be part of some of these related purposes and will declare so on your Consent form. Some related or secondary purposes are externally regulated and we do not have a choice.
- The most common examples of our related and secondary purposes are as follows:
- To invoice clients for services rendered.
- To process payments for services rendered.
- To invoice third parties for services provided to eligible clients (e.g. motor vehicle insurance, private agencies, Workers Safety and Insurance Board-WSIB, March of Dimes). These third party payers often have your consent or legislative authority to direct us to collect and disclose to them certain information about you in order to demonstrate client entitlement to this funding.
- To provide year-end receipts for taxation purposes.
- To advise clients that their ongoing progress and/or maintenance of acquired skills would be appropriate to review (e.g. after a phase of intervention, a client may be on a hiatus from direct treatment, requiring a reassessment at a later date).
- To conduct a follow-up call subsequent to discharge from the active client caseload to ensure maintenance of acquired skills and to answer any questions or respond to any clinical concerns that may have arisen since the last client contact. We also provide ongoing services for many or our clients over a period of months or years for which our previous records are pertinent.
- To advise clients and others of special programs, educational events, development of a new service that we have available (e.g. upon discharge from individual treatment, a client may be appropriate for a group intervention program; we may contact the client if and when such a group comes available).
- Our clinic reviews client and other documentation for the purpose of quality control – to ensure that we deliver on our vision: that Occupational Therapy becomes recognized for all that it is and all that it can offer as a comprehensive and cost-effective health care solution. Further, our firm, driven by caring, passion and integrity, will lead in the delivery of these services across Ontario. This review includes assessing the performance of all staff and clinicians.
- To complete audits provided by external consultants (e.g. auditors, business consultants, accreditation programs), which may include reviewing client files and interviewing staff and/or contract workers.
- To meet the regulatory policies of the College of Occupational Therapists of Ontario (COTO) who may on occasion inspect our records and interview our staff and clinicians as a part of their regulatory activities in the public interest.
- To report serious misconduct, incompetence, or incapacity of health care professionals.
- To comply with requests made by various government agencies (e.g. Canada Customs and Revenue Agency, Information and Privacy Commissioner, Human Rights Commission, etc) that have the authority to review our files and interview our staff as a part of their mandates. Under these circumstances, we may consult with professionals (e.g. lawyers, accountants) who will investigate the matter and report back to us.
- To conduct a “due diligence” review of Driver Rehab Therapy’ records, to ensure that it is a viable business and has been honestly portrayed, in the event that Driver Rehab Therapy or its assets are sold.
Protection of Personal Information
Driver Rehab Therapy understands and highly respects the importance of protecting personal information, and have thus taken the following measures:
- Paper information is either under supervision or secured in a locked or restricted area at all times.
- Electronic hardware is either under supervision or secured in a locked or restricted area at all times. Passwords are used on computers and these are locked when not in use.
- Paper information is transmitted through sealed addressed envelopes or packaging by Canada Post or by a bonded and insured courier company and is stamped Private & Confidential.
- Electronic information is transmitted either through a direct fax line with a confidentiality clause or is password protected on email.
- Cell phones are digital, with signals more difficult to intercept.
Retention and Destruction of Personal Information
In order to protect your privacy, we do not want to retain personal information for too long however there is a need to keep the information long enough to ensure that we may answer any questions that you may have in the future, about the services you received through our organization. Further, we are obligated, through our external regulatory body (COTO) to retain information per their standards. The College of Occupational Therapists of Ontario (COTO) enforces that we keep our client files for 10 years, or in the case of children, 10 years after the 18th birthday. We regularly update contact information related to marketing activities to the general public, and can remove that information immediately if requested to do so. Our contact directories for contract personnel are updated regularly. When a resume is received for a position at our organization and the sender is not hired at that time we may wish to keep the resume on file for potential future positions, unless the candidate indicates otherwise. Contact directories are very difficult to systematically destroy, so we delete such information when we can if it appears that we will not have the need to contact you again. If requested, we will remove such contact information immediately. Paper files containing personal information are shredded. Electronic information is deleted. When electronic hardware is discarded, the hard drive is physically destroyed.
Accessing Your Information
Although there are a few exceptions, you have the right to see what personal information we retain about you. If asked, we can help you determine what records we may have about you and we will try to assist you in understanding any information that may not be clear to you. Confirmation of identity may be required if we are not familiar with you, prior to providing you with this access. Access should be granted within 30 days unless there is reason for refusal. There may be a nominal fee associated with such requests, as it may require administrative and/or professional clinical time. You may be asked to put your request in writing if your initial request was verbal. If for some reason we are unable to give you access, we will notify you within 30 days if at all possible and will attempt to explain, to the best of our ability, why we are not able to give you access. If you believe there is a mistake in factual information retained, you have the right to ask for it to be corrected. This does not apply to any professional opinions we may have formed. We may request documentation to demonstrate that our files are inaccurate. Where there is consensus that a mistake was make, we will make the correction and notify anyone to whom we sent this information. If there is not consensus that the information was inaccurate, you may provide a brief statement to be included in our file and we will forward that statement to anyone else to whom we sent the original information.
Questions or Concerns
If you have any questions or concerns, please contact our Information Officer:
Driver Rehab Therapy
1822-3230 Yonge Street
Toronto ON M4N 3P6
Formal complaints about our privacy practices may be made in writing to our Information Officer. She will acknowledge receipt of our complaint by telephone or in writing and will ensure that it is investigated promptly. Your will be provided with a formal decision and reasons in writing. If you have concerns about the professionalism or competence of our services or staff, we request that you discuss your concerns with us. If we are unable to satisfy your concerns, you are entitled to contact our regulatory body:
College Occupational Therapists of Ontario (COTO)
20 Bay Street
Suite 900, PO Box 78
Toronto, ON, M5J 2N8
This policy is made under the Personal Information Protection and Electronic Documents Act (PIPEDA). The PIPEDA is a complex Act that provides some additional exceptions to the privacy principles that are too detailed to set out in this document. There are some rare exceptions to the commitments set out above.
For more general inquiries, the Information and Privacy Commissioner of Canada oversees the administration of the privacy legislation in the private sector. The Commissioner also acts as a kind of ombudsman for privacy disputes.
The Information and Privacy Commissioner can be reached at:
112 Kent Street
Ottawa, ON, K1A 1H3
Phone: (613) 995-8210
Toll Free: 1-800-282-1376
Fax: (613) 947-6850
TTY: (613) 992-9190
Visiting the Driver Rehab Therapy Website
A visitor to Driver Rehab Therapy, www.driverrehabtherapy.com, is not required to reveal any personal information, such as name, address, or telephone number. Nor is such information collected passively by electronic means. Your personal information is only collected when you voluntarily complete an online application, request form, or survey. Personal information collected during the online application is only used to respond to your inquiries or requests and is not used for any other purposes. We will not send you any unsolicited electronic communication and as per the Canadian Anti-Spam Legislation (July 1, 2014) you are required to “opt in” to any communication. Our website does not collect visitor information in the form of the visitor’s domain or Internet Protocol (“IP”) address but does collect information regarding which pages are accessed and from what general geography. This information is used internally, only in aggregate form, to better serve you by helping us manage and improve the content of our website, to structure marketing initiatives, and to diagnose technical problems.
Drivere Rehab Therapy’s Commitment to the Ten Privacy Principles
Principle #1: Accountability
Driver Rehab Therapy is responsible for personal information under its control and has designated an Information Officer who is accountable for Driver Rehab Therapy’ compliance with the ten privacy principles.
Principle #2: Identifying Purposes
Driver Rehab Therapy shall identify the purposes for which personal information is collected at or before the time of collection.
Principle #3: Obtaining Consent
The knowledge and consent of a customer are required for the collection, use, or disclosure of personal information, except where inappropriate.
Principle #4: Limiting Collection
The collection of personal information shall be limited to that which is necessary for the purposes identified by Driver Rehab Therapy. Personal information shall be collected by fair and lawful means.
Principle #5: Limiting Use, Disclosure and Retention
Driver Rehab Therapy shall not use or disclose personal information for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Driver Rehab Therapy shall retain personal information only for as long as necessary to achieve fulfillment of the identified purposes.
Principle #6: Keeping Personal Information Accurate
Driver Rehab Therapy shall keep personal information as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used.
Principle #7: Safeguarding Personal Information
Driver Rehab Therapy shall protect personal information by security safeguards appropriate to the sensitivity of the information.
Principle #8: Openness Concerning our Privacy Practices
Driver Rehab Therapy shall ensure that specific information about its policies and practices relating to the management of personal information is made readily available to customers and potential customers.
Principle #9: Customer Access
Driver Rehab Therapy shall, upon request, inform a customer of the existence, use, and disclosure of his or her personal information and shall give such customer access to that information.
Principle #10: Challenging Compliance
A customer shall be able to address a challenge concerning Driver Rehab Therapy compliance with PIPEDA to the Driver Rehab Therapy Information Officer.