Privacy

We collect, use, and share your information to:

• Provide safe, high‑quality mental health care
• Consult with other health‑care providers involved in your treatment
• Manage and improve hospital programs and services
• Comply with legal and regulatory requirements
• Support research, education, planning, and statistical reporting - we will request your express consent before reaching out to you about participating in any research study
• Participate in shared electronic health‑record systems across Ontario

Your information may be shared with:

• Health care providers at The Royal who are involved in your care
• External health‑care providers involved in your care, such as your family physician
• Partner hospitals and agencies through secure electronic health‑record systems
• Government and health‑sector organizations when required by law

We use strong safeguards to protect your information from loss, theft, or unauthorized access.

These safeguards include:

• Physical and digital security measures
• Privacy training and confidentiality requirements for staff and partners
• Regular tracking and auditing of access to electronic records
• De‑identifying information whenever possible such as removing your name and other identifiers to protect your privacy while supporting research, planning, or quality improvement initiatives
• We strive to keep your information only as long as it is required by law and securely destroy or anonymize it when no longer needed.

Your information is stored securely at The Royal and its health-care partners in electronic and paper systems. When needed for your care, it may also be shared through secure provincial digital health systems used by hospitals and authorized care providers. We do not sell your information or store it outside Canada.

Under PHIPA, you have the right to:

• View or get a copy of your medical record.
• Ask for corrections if you believe your record is incomplete or inaccurate.
• Ask how your information has been used or shared.
• Be notified if your information is lost, stolen, or improperly accessed.
• Withdraw consent for sharing your information, unless required by law.
• Opt-out of Foundation fundraising communications.

You can request access to your personal health information or ask for corrections by contacting The Royal’s Health Records department through our website. Hospitals in Ontario generally have 30 days to respond to an access request.

Before we collect, use, or share your personal health information, we usually need your consent. Depending on the circumstances, consent can be:

• Implied: This is assumed when you seek care. For example, your information may be shared with members of your care team so they can provide safe, high‑quality treatment.
• Express: You clearly say “yes” - verbally or in writing. This may be needed when sharing your information with people or organizations not involved in your care.

You may withdraw consent at any time. You can do so by placing a consent directive or lockbox on part or all your personal health information.

Please discuss with a member of your health team the risks and benefits of placing a consent directive on your health record. A consent directive may be overridden with your express consent, or in other circumstances permitted by law.

To withdraw consent to the collection, use or disclosure of your PHI, please contact the Privacy Office.

PHIPA allows us to use or share your PHI without consent for:

• Providing or coordinating your health care
• Quality assurance and patient safety activities
• Hospital planning and operations
• Reporting required by law
• Public health and safety purposes