HIPC Rule 3A: Notification requirements for indirect collection of health information
Source: Privacy Commissioner IPP3A is about an agency’s obligations when it collects personal information indirectly (collecting from someone other than the person themselves). Under IPP3A, if an agency collects someone’s personal information indirectly, they are required to notify them, unless one of the listed exceptions applies. We have general guidance on the requirements of IPP3A … Read more