Protecting Healthcare Data in the USA and Canada

The United States of America

ensure standard data minimization practices are realized

invest in internal/external compliance expertise

sign BAA before sharing PHI

remember that investments in preventing data breaches are steep n comparison with the ones for their reimbursements.

Canada

Is the collection, use, or disclosure demonstrably necessary to meet a specific need ?

Is it likely to be effective in meeting that need ?

Is the l oss of privacy proportional to the benefit gained?

Is there a less privacy-invasive way of achieving the same end ?

Summing Up