Issuer banner

The Osgoode Certificate in Privacy Law and Information Management in Healthcare

The Osgoode Certificate in Privacy Law and Information Management in Healthcare

Issued on 17 Mar 2025 by

Osgoode Professional Development, York University

Osgoode Professional Development, York University

Globally, in recent years, healthcare has accounted for more privacy breaches than any other industry. The number of incidents continues to rise as healthcare institutions are frequently in the news for mismanaging personal health information. Breaches and missteps can result in significant reputational risk and institutional liability. Maintaining adequate privacy around health information is a core priority of patients, medical institutions and professionals, software vendors, and clinical researchers. A web of regulatory instruments and best practices have developed to protect sensitive medical data. These ensure that only those who require access for treatment or research purposes are able to view this most personal category of private information. Failure to adopt adequate protective initiatives can leave patients vulnerable to the loss of highly sensitive personal information and medical organizations liable for breeches that can lead to class actions and a loss of trust by their patient populations.

Issuer

Osgoode Professional Development is the lifelong learning arm of Osgoode Hall Law School, one of Canada’s leading law schools.

We provide a uniquely broad and flexible range of interdisciplinary graduate-level legal education to professionals with and without law degrees.

Criteria

What You’ll Learn

  1. Demystifying the regulatory landscape: PHIPA, PIPEDA, MFIPPA, FIPPA and other targeted or sector specific laws (such as Public Hospitals Act, Mental Health Act, Health Protection and Promotion Act, Long-Term Care Homes Act etc.) and Privacy Act

  2. Strategies and tactics for lost or stolen devices, including best practices for storing data

  3. Responding to privacy breaches

  4. Creating effective consent directives

  5. Managing data sharing agreements with vendors and other patient services

  6. Best practices for effective data management and ensuring data integrity

  7. Determining and minimizing risk: medical devices and other sources of patient information

  8. Conducting privacy impact assessments

  9. Managing threat risk assessments

  10. Understanding how to meet audit requirements and managing the costs of data verification

  11. Guidelines for cross border data sharing (particularly in cloud-based services)

Assessment Criteria

In order to obtain the Certificate, the learner must:

  1. complete/attend all modules; and
  2. successfully complete an online assessment, obtaining at least 80%.

Estimated learning effort

Approximately 35 hours of learning effort, spread over multiple weeks.

LEARN MORE