Privacy Policy

Calgary Care Medical Clinic
PIPEDA • Alberta Health Information Act (HIA) • CPSA Aligned
Version 1.0 – Date: Dec 2, 2025

CPSA COMPLIANCE & PROFESSIONAL OBLIGATIONS

Calgary Care Medical Clinic operates in accordance with the standards, guidelines, and professional obligations established by the College of Physicians & Surgeons of Alberta (CPSA).

All physicians and regulated healthcare providers affiliated with Calgary Care Medical Clinic are required to comply with CPSA requirements related to:

  • Confidentiality of patient information

  • Collection, use, and disclosure of health information

  • Secure storage and retention of medical records

  • Patient access to health records

  • Delegation, supervision, and accountability

  • Virtual care and telehealth delivery standards

This Privacy Policy is designed to support CPSA expectations and does not replace professional judgment or statutory obligations under Alberta law.

HEALTH RECORDS & CPSA MEDICAL RECORD STANDARDS

Medical records maintained by Calgary Care Medical Clinic are created, stored, retained, and destroyed in accordance with:

  • College of Physicians & Surgeons of Alberta (CPSA) Medical Records Management Standards

  • Alberta Health Information Act (HIA)

  • Applicable professional and regulatory guidelines

Health records may include:

  • Clinical notes and encounter documentation

  • Diagnoses, assessments, and treatment plans

  • Lab orders, results, and diagnostic reports

  • Prescriptions and medication records

  • Virtual care encounter records

  • Consent documentation and correspondence

Records are maintained in a secure electronic medical record (EMR) system with access restricted to authorized users only.

ACCESS TO HEALTH RECORDS (CPSA & HIA)

Patients have the right to request access to their health records in accordance with:

  • Alberta Health Information Act (HIA)

  • CPSA requirements regarding reasonable access

Access requests may be subject to:

  • Identity verification

  • Reasonable administrative fees (as permitted by CPSA and HIA)

  • Timelines permitted under Alberta law

Access may be limited or refused only in circumstances permitted by law (e.g., risk of harm, third-party confidentiality).

Requests should be submitted to:
📧 info@calgarycare.ca

CORRECTIONS & AMENDMENTS TO RECORDS

Patients may request corrections to inaccurate or incomplete health information.

In accordance with CPSA and HIA requirements:

  • Corrections will be reviewed by the responsible healthcare provider

  • If a correction is accepted, the record will be amended without removing original entries

  • If a correction is refused, a Statement of Disagreement may be attached to the record

CONFIDENTIALITY & PHYSICIAN DUTY OF CARE

All healthcare providers affiliated with Calgary Care Medical Clinic are bound by:

  • CPSA confidentiality standards

  • Professional codes of ethics

  • Alberta Health Information Act (HIA)

  • Applicable federal privacy legislation

Patient information is accessed only on a need-to-know basis and solely for authorized clinical, administrative, or legal purposes.

Unauthorized access, use, or disclosure of health information may result in:

  • Disciplinary action

  • Termination of access privileges

  • Mandatory reporting to regulatory authorities, where required

VIRTUAL CARE & TELEHEALTH (CPSA STANDARDS)

Calgary Care Medical Clinic provides virtual care services in accordance with CPSA Virtual Care Standards, including:

  • Use of secure, encrypted telehealth platforms

  • Verification of patient identity

  • Documentation of virtual encounters in the medical record

  • Informed consent for virtual care

  • Privacy safeguards equivalent to in-person care

Virtual care is delivered only when clinically appropriate and within the provider’s scope of practice.

DELEGATION & THIRD-PARTY ACCESS

Access to patient information by staff, contractors, or service providers is permitted only when:

  • Authorized under CPSA and HIA requirements

  • Necessary for clinic operations or patient care

  • Subject to confidentiality agreements and privacy safeguards

The clinic remains accountable for delegated activities involving personal or health information.

PRIVACY BREACH MANAGEMENT (CPSA & HIA)

In the event of a suspected or confirmed privacy breach:

  • The incident will be investigated promptly

  • Containment and mitigation steps will be taken immediately

  • Affected individuals will be notified as required by law

  • Reporting to the Office of the Information and Privacy Commissioner of Alberta (OIPC) will occur when required

  • Corrective actions will be implemented to prevent recurrence

PRIVACY OFFICER & CPSA ACCOUNTABILITY

Calgary Care Medical Clinic has designated a Privacy Officer responsible for:

  • CPSA and HIA compliance

  • Privacy training and awareness

  • Handling access requests and complaints

  • Breach management and reporting

Contact Information:
📧 info@calgarycare.ca
📞 587-887-1710