What type of information is collected and why?

Patient information required to calculate a CTAS score is collected/entered into eCTAS. This information includes patient demographics (e.g. age), presenting complaints (why the patient came to the emergency department), and patient vital signs (e.g. blood pressure). As eCTAS is a clinical decision support tool, all information collected is used to calculate an accurate CTAS score and provide safe, consistent patient care.

Who accesses my personal health information and for what purpose?

Participating health information custodians (hospitals) will have access to your personal health information in order to deliver safe, high-quality patient care.

A limited number of authorized CCO employees will have access to the data for the purposes of monitoring and managing the provincial eCTAS system.

Personal information shall not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal information shall be retained only as long as necessary for the fulfillment of those purposes.

How is my personal health information protected by CCO?

We are committed to respecting personal privacy, safeguarding confidential information, and ensuring the security of personal health information. These commitments are met through our Privacy Program, which includes a governance structure, policies, and procedures. More about our privacy policy can be found on the Privacy Page.

Our extensive privacy program governs the collection, use and disclosure of personal health information, ensuring that it is accessed only for purposes consistent with our mandate. Our privacy practices undergo formal review by the Office of the Information and Privacy Commissioner / Ontario on a tri-annual basis. We require that all staff attend privacy training annually and sign a confidentiality agreement as a condition of employment. Employee access to data is granted on a ‘need-to-know’ basis and access rights are reviewed annually.

We employ modern security technologies and controls to protect the privacy and integrity of information during transfer, storage and use. Data is encrypted during transmission to us and stored on secured servers. Regular security reviews are performed to ensure that our systems remain secure. Systems are tested and backed-up regularly, and we have an active Disaster Recovery Plan. All staff are required to attend security training annually as a condition of employment.

Who can I speak to if I have questions about the privacy or security of eCTAS?

If you have questions about the privacy or security of eCTAS, please contact the CCO Legal and Privacy Office:

Mail: Cancer Care Ontario, 620 University Avenue, Toronto, Ontario, M5G 2L7
Phone: 416-971-9800 ext. 3200