You work in a human resource department and have access to the personal health information of employees. A front line manager contacts you and requests that you look at an employee's file and let her know if there are any health issues that could explain an employee's "bizarre behaviour" (the employee seems extremely quiet). Which of the following actions should you do, so as to be compliant with Bill C-6?
A) Email the file to the manager but scrub it so only information that may be related to the "bizarre behaviour" is included.
B) Email the employee's file to the manager, including any health-related information you may have.
C) Do not share any health-related information with the manager, even if she tells you she is going to escalate the request.
D) Email the requested information but tell the manager not to share it with anyone.

Question

Quizplus · Accepted Answer

The best choice is to not share any health-related information with the manager, even if she tells you she is going to escalate the request. Under Bill C-6, personal health information can only be shared for a specific purpose with the individual's consent or in limited circumstances outlined in the legislation. In this case, there is no indication that the employee has given consent for their health information to be shared with their manager and there are no indications that the limited circumstances outlined in the legislation apply. Therefore, it is not appropriate to share any health-related information with the manager in this scenario.

You Work in a Human Resource Department and Have Access