Privacy

Novari Health Privacy & Information Practices

What services does Novari Health provide?

Novari Health provides software that improves access to care for patients.  It does this through providing software that allows care providers to track and manage patients who require services.  Our software typically replaces paper-based processes in favour of an improved electronic process, ensuring that patients are managed safely and efficiently. 

Novari Health offers these services through the following software products, all part of the Novari Access to Care platform.

Novari ATC

Novari ATC is a solution used by physicians to manage patients who are waiting for access to procedure-based services such as surgery.   It provides physicians with electronic waiting lists, as well as the ability to send scheduling requests electronically, eliminating cumbersome paper-based processes reliant on paper and fax.

Novari eRequest

Novari eRequest allows any care provider to request services on behalf of their patients, for virtually any kind of service.  It can be used to support electronic referrals for a huge cross-section of services in the healthcare sector.  This includes specialist referrals, diagnostic imaging referrals, requests for access to patient education programs, and more.  Requests can, where appropriate, be routed to central intake programs who will coordinate care, and route to the most appropriate and next available resource (often to help load-balance services, ensuring patients are seen faster).

Novari eVisit

Novari eVisit allows patients to have direct and timely access to family physicians using their browser or mobile device.  Patients can request virtual visits with their own primary care physician, or with on-call physicians who can respond to urgent requests.  Virtual visits can take place securely over the phone, video chat, or messaging.

Where does Novari get personal health information?

For Novari eRequest and Novari ATC, Novari Health receives personal health information (PHI) through care providers, typically physicians, who are requesting services on behalf of their patients.  It also collects PHI through hospitals and clinics who coordinate the provision of services. 

For Novari eVisit, Novari Health receives personal health information directly from patients, as well as from primary care physicians who are providing services to their patients.

Collectively in this context, physicians, hospitals and clinics are referred to as Health Information Custodians under the Ontario Personal Health Information Protection Act, 2004 (PHIPA).

How does Novari Health use personal health information?

Novari health uses the personal health information it collects as follows:

  1. For Novari ATC
    1. Coordinate patient access to procedure-based care (usually surgery)
    2. Prepare patients for their procedure
    3. Communicate details regarding the patient to hospital scheduling staff
    4. Where appropriate and legally required, report wait-time information to government agencies responsible for coordinating access to care
  2. For Novari eRequest
    1. Coordinate patient access to a variety of healthcare services
    2. Communicate details of the service request to care providers, so that they may understand the nature of the request
  3. For Novari eVisit
    1. Coordinate patient access to primary care
    2. Communicate details of the request for a virtual visit to primary care physicians
    3. Allow primary care physicians to document virtual visits
    4. For on-call primary care physicians

To whom does Novari Health disclose personal health information?

Novari Health does not disclose Personal Health Information (PHI) unless required or permitted to by law.  Novari shares PHI based on implied consent, which allows Health Information Custodians (HICs) to disclose your PHI to another custodian for the purposes of providing or assisting in providing health care.  As such, Novari Health discloses PHI under the following circumstances:

  • Between HICs for providing services to patients (e.g. a referral between a primary care physician and a specialist, a scheduling request from a surgeon to the hospital)
  • Where appropriate and legally required, reporting information to government agencies responsible for coordinating access to care

What safeguards are in place to protect personal health information?

Novari Health aggressively protects personal health information to ensure it is protected at all times.  Novari employs the following safeguards to protect personal health information:

  • All PHI is hosted in secure, access controlled facilities
  • All information is encrypted while “at rest” (stored in a database) and “in transit” (being viewed in Novari Health software over the internet)
  • Novari Health uses software access controls to limit access to its software solutions to authorized users
  • Novari Health software solutions audit all user access to PHI

What policies does Novari Health have in place to ensure personal health information is protected?

Novari Health adheres to a rigid privacy policy to ensure personal health information is protected.  This policy includes the following:

  • All staff are aware of the purposes for which PHI is collected and trained on their legal obligations to protect PHI.
  • Novari Health ensures that that third-parties acting on behalf of Novari are contractually obligated to protect PHI to the same standard that Novari adheres to.
  • Novari Health has staff to monitor security on a scheduled basis to detect for any possible breaches in security.
  • Novari Health will report any security incident to the affected health information custodian, should they occur.
  • Novari Health has a privacy officer who is responsible for managing compliance with privacy requirements, and implements best practice as it relates to privacy software features and requirements.
  • PHI is not used or disclosed for purposes other than those for which it was collected.
  • PHI is retained only as long as necessary for the fulfillment of the purposes above, and as required by law.
  • Novari Health works with health information custodians to ensure that the data in its custody is as accurate, complete and up-to-date as possible.

Can patients withdraw consent to disclose personal health information?

Yes.  Patients may withdraw consent at any time.  Patients also have the right to restrict access to all or part of their personal health information.  In either case, this is done by notifying the relevant health information custodian (usually, the patient’s physician) who is a user of the Novari Health software. 

Who may I speak with if I have questions about Novari Health’s privacy policies & procedures?

If you have complaint, question or concern regarding Novari Health’s privacy policies and procedures, please contact:

Novari Health

Suite 401 - 1473 John Counter Blvd.

Kingston, ON, K7M 8Z6

Attention:  Privacy Officer

 

You may also reach us by email at:

privacy@novarihealth.com