Think Of ThemJuridique
Politique de confidentialité
Comment BioMD Genetics recueille, utilise et protège les renseignements cliniques, personnels et génétiques.
Ce document est publié en anglais, langue qui fait foi à toutes fins. Si vous souhaitez qu'il vous soit expliqué en français ou en espagnol, écrivez-nous.
Health information and HIPAA
Where a clinic in the United States is a covered entity under the Health Insurance Portability and Accountability Act, BioMD Genetics acts as its business associate. The platform has been audited for HIPAA compliance, and we enter into a Business Associate Agreement with the clinic before any protected health information is created, received, maintained or transmitted on its behalf.
Under that agreement we use and disclose protected health information only as the agreement and the law permit; we apply administrative, physical and technical safeguards to it; we require the same of any subcontractor that handles it; we make information available so the clinic can answer a patient’s request for access, amendment or an accounting of disclosures; and we report to the clinic any use or disclosure not provided for by the agreement, including any breach of unsecured protected health information, without unreasonable delay. Access to records is limited by role and is logged. When a clinic’s agreement with us ends, protected health information is returned or destroyed as that agreement provides.
How long we keep information
Clinical records are kept for as long as the clinic needs them for the care of its patients and for the retention period its own regulator imposes, and we act on the clinic’s instructions in that respect. Genetic data is kept for as long as it is needed to deliver and support the result. Physical samples are destroyed after analysis unless the client has asked us to store them.
Access, correction and withdrawal of consent
A person whose information we hold may ask to see it, to have it corrected if it is inaccurate, and to withdraw a consent previously given, including consent to the use of genetic data in research. Patients of a clinic normally make such a request through the clinic, which holds the clinical relationship; a request sent to us directly will be routed appropriately. We do not charge for a first request, and we answer within the period the applicable law allows.
If something goes wrong
If personal, clinical or genetic information is lost, or accessed or disclosed without authorisation, we investigate, contain the incident and notify the affected clinic without unreasonable delay, along with any regulator the applicable law requires us to notify. The notice states what happened, what information was involved, what we have done about it, and what the clinic or the individual can do.
Who to contact
Questions about this policy, and requests concerning your information, go to info@biomdgenetics.com, or by post to BioMD Genetics Inc., 5th floor, 1275 Avenue des Canadiens-de-Montréal, Montréal QC, H3B 5E8, Canada.
Changes to this policy
We revise this policy as the service and the law change. The version published here is the current one, and the date it was last revised is shown at the top of this page.
Our customers trust us with their clients’ data privacy and personal information security. Protecting that information, and respecting their privacy, is fundamental to maintaining that trust. We operate with integrity and abide by the most stringent requirements and compliance. Our privacy and security policies meet the requirements of applicable laws, rules and regulations.
Privacy legislation requires organizations to have such policies in place that demonstrate the strong, commonly accepted privacy standards that the public expects. These policies are generally based on the Canadian Standards Association’s Code for the Protection of Personal Information (CAN/CSA-Q830-96). BioMD Genetics incorporates these principles into its business practices.
BioMD Genetics’s policies govern how we collect, use and manage customers’ information – from respecting their permissions and preferences, to protecting and securing their information. We use industry standard security practices to store clinical data, DNA test results, and other personal data separate from a person name or other common identifying information. When our customers enter or transfer information during any use of our services, we encrypt that information using secure socket layer technology (SSL). Our SSL security is equal to the ones your bank uses for online transactions. Any information that we hold as part of our services will be held in a database with physical and technological security controls and procedures in place, as per the applicable regulations.
We do not store the physical DNA sample unless customers explicitly request it. We do not share with third parties names or other common identifying information linked to the genetic data, except as legally required or with a tested client’s explicit consent. BioMD Genetics does not use genetics data for research unless participants sign an Informed Consent Form and are explicitly informed that their data is used for research purpose. BioMD Genetics does not share the clinical data, personal information, or information of the genetic analysis outside the needs of performing, delivering, and improving our services. For further information regarding privacy, please see the Genetics Analysis Agreement, contact us directly, else refer to Canadian Standards Association.
Canadian Standards Association
The addresses below belong to the Canadian Standards Association, not to BioMD Genetics.
Website: www.csagroup.org
Corporate head office
178 Rexdale Blvd. Toronto, ON, Canada M9W 1R3
Tel: 416 747 4000; Toll-Free: (800) 463 6727
Montréal
865 Ellingham Avenue, Pointe-Claire, QC, H9R 5E8
Tel: 514 694 8110