Patients have a right to privacy and physicians have a duty of confidentiality arising from the patient-physician relationship to protect patient privacy. The right to privacy flows from the principle of respect for patient autonomy, based on the individual's right to conduct and control their lives as they choose.1 When approaching any ethical question around privacy, the principle of respect for patient autonomy must be balanced against other competing principles (e.g. beneficence, non-maleficence).
The protection of privacy and the concomitant duty of confidentiality are essential to foster trust in the patient-physician-relationship, the delivery of good patient care and a positive patient care experience. Privacy protection is an important issue for Canadians,2 and research suggests that patients may withhold critical health information from their health care providers because of privacy concerns.3 Patients will be more willing to share complete and accurate information if they have a relationship of trust with their physician and are confident that their information will be protected.4
In today's ever-evolving technological environment and due to the shift away from the traditional (paternalistic) physician-patient relationship, patients, physicians and other public and private stakeholders are using and sharing personal health information in new and innovative ways. This raises new challenges for clinical practice and, crucially, how to navigate expanded uses of data via the use of new technologies and the requirements of patient privacy.
Institutions, clinics, and physician-group practices may share responsibility with the physician for the protection of patient information. There is thus a tension between physician and institutional responsibilities to protect patient information, challenged by the rapidly changing use and adoption of new technologies. While this will continue to redefine expectations of privacy and confidentiality, there are several foundational principles that remain unchanged.
SCOPE OF POLICY
The Canadian Medical Association (CMA) Principles for the Protection of Patients' Personal Health Information aim to provide guidance on key ethical considerations pertinent to the protection of patient information in a way that takes into account a physician's (including medical learner) ethical, professional, and legal obligations. The Principles are not designed to serve as a tool for legislative compliance in a particular jurisdiction or to provide a standard of care. Physicians should be aware of privacy legislation in the jurisdiction in which they practice, the standards and expectations specified by their respective regulatory authorities (including Privacy Commissioners), publications and risk management education provided by the CMPA as well as policies and procedures of any given setting (e.g., a regional health authority or a hospital).
SUBSTANTIVE PRINCIPLES THAT GUIDE THE OBLIGATIONS OF THE PHYSICIAN TO PROTECT PATIENT PRIVACY
* Trust is the cornerstone of the patient-physician relationship and plays a central role in providing the highest standard of care.
* Physicians and their patients build relationships of trust that enable open and honest dialogue and foster patients' willingness to share deeply personal information (often) in conditions of vulnerability.
* Physicians can cultivate and maintain patient trust by, unless the consent of the patient has been obtained to do otherwise, collecting health information only to benefit the patient, by sharing information only for that purpose, and by keeping patient information confidential; patient trust has been found to be the most powerful determinant of the level of control patients want over their medical records.5
* To maintain trust, physicians must consider the duty to care and the duty not to harm the patient in evaluating privacy requirements.
* The extent to which a patient expects (and may tolerate a loss of) privacy and confidentiality is culturally and individually relative.6
* Physicians owe a duty of confidentiality to their patients; there is both an ethical (respect for autonomy) and a legal basis imposed by privacy legislation) for this duty.
* The duty to maintain patient confidentiality, like trust, is fundamental to the therapeutic nature of the patient-physician relationship; it creates conditions that allow patients to openly and confidently share complete health information, resulting in a stronger physician-patient relationship and better delivery of care.7
* The duty to maintain patient confidentiality means that physicians do not share the health information with anyone outside of the patient's circle of care, unless authorized to do so by the patient.1,8 There are varying interpretations of what constitutes the patient's circle of care; this depends on the facts of the situation and the jurisdiction.9
* Privacy requirements raise complex issues in learning environments and quality improvement initiatives. It is desirable that any of the patient's physicians who will have ongoing care interactions with the patient can remain included in information-sharing about the patient.
* Shared electronic health records present challenges to confidentiality. For example, patients may wish to limit some aspects of their record to only some providers within their circle of care.10
* In practice, respecting privacy and the duty of confidentiality govern the physician's role as data steward, responsible for controlling the extent to which information about the person is protected, used or disclosed.11 A central rule to balancing a patient's right to privacy and the duty of confidentiality is the "minimum necessary" use and disclosure of personal health information, whereby a data steward should use or disclose only the minimum amount of information necessary to fulfil the intended purpose. In some circumstances, de-identifying or aggregating personal health information before use or disclosure can minimize the amount of information disclosed.12
* The duty to maintain patient confidentiality is not absolute and is subject to exceptions in limited circumstances,13 i.e., when required or permitted by law to disclose information (see below in Data Stewardship: Collection, use and disclosure of personal health information).
* Patient consent is an important mechanism for respecting patient autonomy; obtaining voluntary and informed consent to share patient information is fundamental to the protection of privacy and the duty of confidentiality.
* Physicians are generally required to obtain informed consent from the patient before they can disclose the patient's personal health information. Consent is only informed if there is disclosure of matters that a reasonable person in the same circumstances would want to know, including 1) to whom the patient information will be disclosed, 2) whether it could be disclosed to other third parties, and 3) the purpose for which it could be used or disclosed.
* While informed consent is required as a general rule, physicians may infer that they have the patient's implied consent to collect, use, disclose and access personal health information 1) for the purpose of providing or assisting in providing care (i.e., share only the necessary information with those involved within the patient's circle of care); and 2) to store personal health information in a medical record (i.e., paper, electronic, or hospital-based). Physicians will want to consider if it is appropriate in the circumstances to advise the patient when a disclosure has been made.
* When the patient is a minor, the physician must consider whether it is the parent or the child who determines the use and disclosure of the minor's personal health information. A young person who is deemed to understand fully the implications of a decision regarding proposed collection, use or disclosure of personal health information is generally deemed to have control over their personal health information with respect to the decision.
* Where the patient is not capable to provide the required consent (e.g. is deemed to be incompetent), physicians must seek consent from the patient's substitute decision-maker.
4. Physician as data steward
* As data stewards, physicians have the responsibility to understand their role in protecting patient privacy and appropriate access to patient information.
* The information contained in the medical record belongs to the patient who has a general right of access to their personal health information, and the right to control the use and further disclosure and to the continued confidentiality of that information.
* A data steward (e.g., physician, institution or clinic) holds the physical medical record in trust for the care and benefit of the patient.14
* Physicians should provide their patients access to their medical record, if requested.15 (See below in Data Stewardship: Access to personal information).
* Physicians ought to have appropriate access to personal health information and have the ability to provide their patients with access to their medical record. Appropriate access should be interpreted to include access for patient follow up (as part of the duty to care) and review for the purpose of improving patient care.
* Physicians should consider consulting available resources to assist them in fulfilling their duties as data stewards.
PROCEDURAL PRINCIPLES THAT GUIDE THE APPLICATION OF PHYSICIAN OBLIGATIONS
Physicians must manage personal health information in compliance with relevant legislation that establishes rules governing the access, collection, use, disclosure, and retention of personal health information, provincial privacy laws, and professional expectations and regulations specified by their respective regulatory authorities.
1. Data Stewardship: Access to personal information
* Patients have a right of reasonable access to the personal health information in their medical record (i.e., paper, electronic, or hospital-based) under the control or in the custody of a physician, institution, or clinic.
* In exceptional situations, physicians can refuse to release the information in the patient's medical record.
2. Data Stewardship: Collection, use and disclosure of personal health information
* There are circumstances where there are required (e.g., monitoring of claims for payment, subpoenas) and permitted disclosures of personal health information without patient consent (e.g., where the maintenance of confidentiality would result in a significant risk of substantial harm to the patient or to others).
* Security safeguards must be in place to protect personal health information in order to ensure that only authorized collection, use, disclosure or access occurs.
* Physicians play an important role in educating patients about possible consensual and non-consensual uses and disclosures that may be made with their personal health information, including secondary uses of data for, e.g., epidemiological studies, research, education, and quality assurance, that may or may not be used with explicit consent.
3. Data Stewardship: Retention of personal health information
* Personal health information should be retained for the period required by any applicable legislation and as specified by their respective regulatory authorities. It may be necessary to maintain personal health information beyond the applicable period where there is a pending or anticipated legal proceeding related to the care provided to the patient.
* Likewise, physicians should transfer and dispose of personal health information in compliance with any applicable legislation and professional expectations outlined by their respective regulatory authorities.
* Physicians are encouraged to seek technical assistance and advice on the secure transfer, disposal, and/or selling of electronic records.15
4. Data Stewardship: Use of technology
* Physicians should obtain patient consent to use electronic means and/or devices for patient care (e.g., sending digital photographs) and for communicating patient information (e.g., the use of email). To obtain informed consent, physicians should explain to patients that there are necessary benefits and risks in using technologies in clinical contexts. The CMPA has provided a written consent form to that effect that can be included in the patient's medical record.
* As a general practice, physicians are encouraged to make use of technological innovations and must evaluate whether the technology is appropriate for patient care and has reasonable safeguards to protect patient privacy.
Approved by the CMA Board of Directors December 2017
See also Background to CMA Policy Principles for the Protection of Patient Privacy
1 Martin JF. Privacy and confidentiality. In: ten Have H, Gordijn B (Eds). Handbook of global bioethics. New York: Springer, Dordrecht; 2014. p.119-37.
2 Office of the Privacy Commissioner of Canada. Canadians and privacy final report. Gatineau: Office of the Privacy Commissioner of Canada; 2009. Available: https://www.priv.gc.ca/information/por-rop/2009/ekos_2009_01_e.asp (accessed 2017 Nov 17).
3 Canadian Medical Protective Association (CMPA). Privacy and a wired world - Protecting patient health information. Ottawa: CMPA; 2011 Dec. Available: https://www.cmpa-acpm.ca/en/advice-publications/browse-articles/2011/privacy-and-a-wired-world-protecting-patient-health-information (accessed 2017 Nov 17).
4 Royal College of Physicians and Surgeons of Canada (RCPSC). Duty of confidentiality. Ottawa: RCPSC; 2017. Available: http://www.royalcollege.ca/rcsite/bioethics/cases/section-3/duty-confidentiality-e (accessed 2017 Dec 15).
5 Damschroder LJ, Pritts JL, Neblo MA, Kalarickal RJ, Creswell JW, Hayward RA. Patients, privacy and trust: patients' willingness to allow researchers to access their medical records. Soc Sci Med 2007;64:223-35.
6 Campbell JI, Eyal N, Musiimenta A, Haberer JE. Ethical questions in medical electronic adherence monitoring. J Gen Intern Med 2016;31:338-42. Available: https://link.springer.com/content/pdf/10.1007%2Fs11606-015-3502-4.pdf (accessed 2017 Nov 17).
7 Crook MA. The risks of absolute medical confidentiality. Sci Eng Ethics 2013;19:107-22.
8 Cohen I, Hoffman A, Sage W (Eds). The Oxford Handbook of U.S. Health Law. New York: Oxford University Press; 2015.
9 Canadian Medical Protective Association (CMPA). The voice of professionalism within the system of care. Ottawa: CMPA; 2012 Oct. Available: https://www.cmpa-acpm.ca/en/advice-publications/browse-articles/2012/the-voice-of-professionalism-within-the-system-of-care (accessed 2017 Nov 17).
10 Canadian Medical Protective Association (CMPA). Did you know? Patients can restrict access to their health information. Ottawa: CMPA; 2017 Nov. Available: https://www.cmpa-acpm.ca/en/advice-publications/browse-articles/2017/did-you-know-patients-can-restrict-access-to-their-health-information (accessed 2017 Nov 17).
11 Francis JG, Francis LP. Privacy, confidentiality, and justice. J Soc Philos 2014;45:408-31.
12 Burkle CM, Cascino GD. Medicine and the media: balancing the public's right to know with the privacy of the patient. Mayo Clin Proc 2011;86:1192-6.
13 Canadian Medical Protective Association (CMPA). When to disclose confidential information. Ottawa: CMPA; 2015 Mar. Available: https://www.cmpa-acpm.ca/en/advice-publications/browse-articles/2015/when-to-disclose-confidential-information (accessed 2017 Nov 17).
14 Canadian Medical Protective Association (CMPA). Releasing a patient's personal health information: What are the obligations of the physician? Ottawa: CMPA; 2012 Oct. Available: https://www.cmpa-acpm.ca/en/advice-publications/browse-articles/2012/releasing-a-patient-s-personal-health-information-what-are-the-obligations-of-the-physician (accessed 2017 Nov 17).
15 Canadian Medical Protective Association (CMPA). Protecting patient health information in electronic records. Ottawa: CMPA; 2013 Oct. Available: https://www.cmpa-acpm.ca/en/advice-publications/browse-articles/2013/protecting-patient-health-information-in-electronic-records (accessed 2017 Nov 17).
(c) 2017 Canadian Medical Association. You may, for your non-commercial use, reproduce, in whole or in part and in any form or manner, unlimited copies of CMA Policy Statements provided that credit is given to Canadian Medical Association.
BACKGROUND TO CMA POLICY
PRINCIPLES FOR THE PROTECTION OF PATIENT PRIVACY
See also CMA Policy on Principles for the Protection of Patient Privacy
The advent of Electronic Medical Records, the rapid spread of mobile health apps, and the increasing use of social media within the health care community, have each created new challenges to maintaining a duty of confidentiality within the physician-patient relationship. These technologies present both opportunities and challenges with respect to medical professionalism.1 The permeation of these types of interactions into everyday life now places physicians in new situations that some find difficult to navigate.2 These challenges will only increase in the coming years, as the use of online technologies in health care is continuously growing.3 Canada is only in the early stages of managing the emerging issues of technology-induced errors that compromise privacy in the health care setting.4 Therefore, this paper will briefly discuss the importance of protecting privacy, followed by an overview of the main challenges to maintaining privacy as the physician-patient relationship evolves at the backdrop of emerging technologies.
Privacy and Confidentiality
The overlapping, but not identical, principles of the protection of privacy and the duty of confidentiality are essential to the physician-patient relationship. These principles not only foster trust, but also the delivery of effective and lasting care. Rooted in the Hippocratic Oath, the modern-day right to privacy flows from the principle of autonomy, which attributes to individuals the right to conduct and control their lives as they choose.5 Privacy protection is an important issue to Canadians,6 with research suggesting that patients may even withhold critical health information because of privacy concerns.7 Health care professionals are bound by legal and ethical standards to maintain privacy and confidentiality of patient information.8 Physicians must therefore be aware of the implications of privacy legislation specific to their jurisdiction.7 The duty to protect patient privacy is important to uphold, as health information can potentially be identifiable and sensitive; the confidentiality of this information must therefore be protected to ensure that patient privacy is not breached. 9 While the traditional, and largely obsolete, models of the physician-patient relationship involve a unidirectional flow of information, the ease at which patients can now access medical information through the Internet, and the use of social media within the health care community, have reinterpreted how information is communicated from physician to patient, and vice versa.10 We must therefore re-define expectations of privacy and confidentiality, first by distinguishing one from the other.
The terms "privacy" and "confidentiality" are often used interchangeably by both researchers and clinicians. Several bioethics discussions on the distinction between these terms places confidentiality under the umbrella of privacy.11 While confidentiality involves the information itself, which is disclosed or not, privacy is about the impact of that disclosure on the person.9 Privacy seems to be more intimately linked to the individual, focusing on the circumstances under which the information is used.12-13 Confidentiality, on the other hand, is a duty that health professionals have towards their patients to not share the information exchanged during their encounter, unless authorized by the patient.5,12 In practice, the duty of confidentiality governs the physician's role as data stewards, responsible for controlling the extent to which information about the person is protected, used or disclosed.14 As one paper describes, "privacy is invaded, confidentiality is breached."13
From a patient perspective, it is important to respect and protect privacy because it allows individuals time and space to share their concerns without feeling judged or misunderstood,11 resulting in a stronger physician-patient relationship and better delivery of care. However, from a research perspective, a fine balance must be struck between using accurate information while still upholding the privacy rights of individuals.11 As such, the argument for absolute confidentiality puts a near impossible burden on research clinicians.11 Moreover, from a public safety perspective, a physician may be morally and legally required to break confidentiality in order to protect both the patient and others who may be involved. The challenge is to balance the traditional goal of confidentiality - to protect patient privacy and interest - with that of third parties and public health.5 Therefore, a central rule to balancing confidentiality with a patients' right to privacy is the "minimum necessary" use and disclosure of personal health information, whereby a data steward should use or disclose only the minimum amount of information necessary to fulfil the intended purpose.8 It is equally important to recognize that the extent to which a patient may tolerate a loss of privacy is culturally and individually relative.15 Health care providers have a legal and ethical obligation to keep patient health information private, sharing it only with the authorization of the patient.16 Informed consent, therefore, appears to be a fundamental requirement to upholding confidentiality and patient privacy rights.
While emerging privacy issues touch many areas of practice, this section will emphasize three of the most prominent issues in recent literature: access and use of information, electronic medical and health records and, online communication and social media.
1. Technological change and institutional data stewardship
In today's ever-evolving technological environment, including the emergence of shared electronic health records, online communication, social media, mobile applications, and big data, physicians, patients and other public and private stakeholders are using and sharing personal health information in new and innovative ways. The traditional (paternalistic) model of the physician-patient relationship involved a bidirectional flow of information. However, the ease at which patients can now access medical information from alternative sources via the Internet, and the use of social media within the health care community, has redefined how information is communicated from physician to patient, and vice versa.10 This raises new challenges for clinical practice, specifically how to navigate expanded access of data via the use of new technologies and the requirements of patient privacy by effectively managing security concerns.
In many situations, the physician may not be the sole or primary custodian of (i.e., control access to) the patient's records once the health information is collected. Institutions, clinics, and physician-group practices may also have responsibility for patient information and therefore play an important role in ensuring it is protected. There is thus a grey area between physician and institutional responsibilities to protect patient information, challenged by the rapidly changing use and adoption of new technologies, such as electronic health and medical records. While this will continue to redefine expectations of privacy and confidentiality, there are several foundational principles that remain unchanged.
2. Electronic medical and health records
Medical records are compiled primarily to assist physicians and other health care providers in treating patients.16 Yet, they are particularly vulnerable to privacy breaches when this information is exposed to secondary uses, including epidemiological studies, research, education and quality assurance. As contemporary information management and stewardship have had to evolve in response to emerging technology, the parameters of the "medical record" have grown increasingly ambiguous.17 With the proliferation of a wide variety of new health information technology (including electronic health and medical records), concerns about quality and safety have been raised.4 There is evidence that if such technology is not designed, implemented and maintained effectively, it may result in unintended consequences, including technology-induced errors and breaches of patient privacy.4 Reports involving Canada Health Infoway have even pointed to health information technology as a tool that may sometimes reduce rather than enhance patient safety, most often due to human factors. 4 As a result, recommendations have been made to develop a reporting system that would allow health professionals to anonymously report human errors resulting from the use of health information technology - a challenge in itself, as the distinction between human and technological error is often blurred.4 In Canada, a number of efforts have been undertaken by several organizations, including Health Canada and Canada's Health Informatics Organization.4 Yet, services aimed at improving health information technology safety, from a national level, remain poor.4 As a result, organizations like Canada Health Infoway have promoted the need for collaborative efforts to improve health information technology safety standards in Canada, 4 so to ensure that the current and future uses of "medical record" data are accurate and respectful of patient privacy.
3. Access and use of personal health information for research
The courts have long established that health information belongs to the patient.18 As a result, privacy ownership refers to the belief that patients own their private information as well as the right to control access to this information.19 As in other jurisdictions, the overarching challenge in Canada is to strike a balance between enabling access to health and health-related data for research while still respecting Canadians' right to privacy and control over the confidentiality of their information.20 The integrity of healthcare information is fundamental, given that it is the basis on which treatment decisions are made both in research and in clinic. 9 There are three principles upon which information security is based: 9 1) only authorized people have access to confidential information; 2) information must be accurate and consistent, may only be modified by authorized people in ways that are appropriate; 3) information must be accessible by authorized users when needed. Canadian research ethics have demonstrated that beneficial work can be done while maintaining confidentiality to sensitive personal health information.21 Yet, the challenge remains to create a uniform system for accessing data and performing data-based research due to 1) the lack of consistency and clarity in Canada's ethical and legal framework and, 2) varied interpretations of key terms and issues across the country.21 For example, the term "non-identifiable data" remains ambiguous across provinces and is subject to interpretation by data custodians, who may consider their legal duty to protect privacy as precluding access to data.21 This lack of legal clarity has contributed to varied cautious and conservative interpretations of data access legislation.21 National uniform guidelines on the appropriate access, disclosure and use of personal health data would allow data stewards to advance their research while respecting their patients' right to privacy.
4. Online communication with patients and social media
Social media and online communication is pervasive in Canadian society; from Facebook to Twitter, social media has changed the way people interact and disseminate information.21 There is currently widespread discussion among health care professionals and academics regarding the role that social media and online communication should play in the physician-patient relationship.22 A growing number of physicians have embraced the opportunities of interconnectivity that social media affords, implementing their own privacy procedures to reflect this new type of data collection, use and storage.7 While evidence has been lacking on whether the use of social media does improve patient outcomes,22 there is no denying that patients are seeking health care information from online platforms, including social media.22 This type of communication poses a unique set of opportunities and challenges for physicians: while the use of social media could increase physician reach and patient engagement, it can also blur boundaries between one's personal and professional life.22 Although patient-physician online communication is currently limited, physicians still feel that they are encountering an ethical dilemma, especially when they find themselves in boundary crossing situations, like a friend request from a patient.2 Physicians are particularly concerned that, through online communication, they may be exposed to medico-legal and disciplinary issues, especially with respect to patient privacy.2 Given different studies have suggested that unprofessional uses of social media are not uncommon,23 physicians who choose to communicate with patients online or through social media must remember that they are still governed by the same ethical and professional standards that remain paramount.22
As technology continues to evolve, so too will the traditional parameters of the patient-physician relationship. The physician's ethical and professional obligation to protect patient privacy, however, must remain paramount at the backdrop of technology use. Simply banning social media and online communication would neither eliminate risk, nor benefit patient care outcomes. 24 Instead, institutions should establish stringent policies that outline how to prevent or minimize the effects of privacy breaches associated with social media and online communication.25 This should also include a tracking mechanism to help balance the obligation to privacy with evolving technology.25
See also CMA Policy on Principles for the Protection of Patient Privacy
1 Farnan JM, Snyder Sulmasy L, Worster BK, Chaudhry HJ, Rhyne JA, Arora VM. Online medical professionalism: patient and public relationships: policy statement from the American College of Physicians and the Federation of State Medical Boards. Ann Intern Med 2013;158(8):620-627.
2 Brown J, Ryan C. How doctors view and use social media: a national survey. J Med Internet Res 2014;16:e267. Available: https://doi.org/10.2196/jmir.3589 (accessed 2017 Nov 17).
3 Lambert KM, Barry P, Stokes G. Risk management and legal issues with the use of social media in the healthcare setting. J Healthc Risk Manag 2012;31(4):41-47.
4 Kushniruk AW, Bates DW, Bainbridge M, Househ MS, Borycki EM. National efforts to improve health information system safety in Canada, the United States of America and England. Int J Med Inform 2013;82(5):e149-160.
5 Martin JF. Privacy and confidentiality. In: ten Have H, Gordijn B (Eds). Handbook of global bioethics. New York: Springer, Dordrecht; 2014. p.120-1.
6 Office of the Privacy Commissioner of Canada. Canadians and privacy final report. Gatineau: Office of the Privacy Commissioner of Canada; 2009. Available: https://www.priv.gc.ca/information/por-rop/2009/ekos_2009_01_e.asp (accessed 2017 Nov 17).
7 Canadian Medical Protective Association (CMPA). Privacy and a wired world - Protecting patient health information. Ottawa: CMPA; 2011 Dec. Available: https://www.cmpa-acpm.ca/en/advice-publications/browse-articles/2011/privacy-and-a-wired-world-protecting-patient-health-information (accessed 2017 Nov 17).
8 Burkle CM, Cascino GD. Medicine and the media: balancing the public's right to know with the privacy of the patient. Mayo Clin Proc 2011;86:1192-6.
9 Williams PA. Information security governance: a risk assessment approach to health information systems protection. Stud Health Techol Inform 2013;193:186-206.
10 Borza LR, Gavrilovici C, Stockman R. Ethical models of physician-patient relationship revisited with regard to patient autonomy, values and patient education. Rev Med Chir Soc Med Nat Iasi 2015;119(2):496-501.
11 Crook MA. The risks of absolute medical confidentiality. Sci Eng Ethics 2013;19(1):107-122.
12 Cohen I, Hoffman A, Sage W (Eds). The Oxford handbook of U.S. health law. New York: Oxford University Press; 2015.
13 Francis L. Privacy and confidentiality: the importance of context. The Monist; 91(1);2008:52-67.
14 Francis JG, Francis LP. Privacy, confidentiality, and justice. J Soc Philos 2014;45:408-31.
15 Campbell JI, Eyal N, Musiimenta A, Haberer JE. Ethical questions in medical electronic adherence monitoring. J Gen Intern Med 2016;31:338-42. Available: https://link.springer.com/content/pdf/10.1007%2Fs11606-015-3502-4.pdf (accessed 2017 Nov 17).
16 Canadian Medical Association (CMA). Medical record confidentiality, access and disclosure. Ottawa: CMA; 2000. Available: https://www.cma.ca/Assets/assets-library/document/en/advocacy/policy-research/CMA_Policy_The_medical_record_confidentiality_access_and_disclosure_Update_2000_PD00-06-e.pdf (accessed 2017 Oct 30).
17 Fenton SH, Manion F, Hsieh K, Harris M. Informed Consent: Does anyone really understand what is contained in the medical record? Appl Clin Inform 2015;6(3):466-477.
18 Canada. Supreme Court. McInerney v MacDonald. Dom Law Rep. 1992 Jun 11;93:415-31.
19 Petronio S, Dicorcia MJ, Duggan A. Navigating ethics of physician-patient confidentiality: a communication privacy management analysis. Perm J 2012;16(4):41-45.
20 Council of Canadian Academies (CCA). Accessing health and health-related data in Canada. Ottawa: The Expert Panel on Timely Access to Health and Social Data for Health Research and Health System Innovation, Council of Canadian Academies; 2015. Available: http://www.scienceadvice.ca/uploads/eng/assessments%20and%20publications%20and%20news%20releases/Health-data/HealthDataFullReportEn.pdf (accessed 2017 Nov 17).
21 Canadian Medical Association (CMA). Social media and Canadian physician: Issues and rules of engagement. Ottawa: CMA; 2011. Available: https://www.cma.ca/Assets/assets-library/document/en/advocacy/CMA_Policy_Social_Media_Canadian_Physicians_Rules_Engagement_PD12-03-e.pdf (accessed 2017 Oct 30).
22 Eysenbach G. Medicine 2.0: Social networking, collaboration, participation, apomediation, and openness
J Med Internet Res 2008;10(3):e22.
23 Mayer MA, Leis A, Mayer A, Rodriguez-Gonzalez A. How medical doctors and students should use social media: A review of the main guidelines for proposing practical recommendations. Stud Health Technol Info 2012;180:853-857.
24 Moses RE, McNeese LG, Feld LD, Feld AD. Social media in the health-care setting: Benefits but also a minefield of compliance and other legal issues. Am J Gastroenterol 2014;109(8):1128-1132.
25 Yang YT, Silverman RD. Mobile health applications: The patchwork of legal and liability issues suggests strategies to improve oversight. Health Aff (Millwood) 2014;33(2):222-227.
SCOPES OF PRACTICE
This policy outlines the principles and criteria that are important for physicians to consider when they are involved in the determination of the scopes of practice of physicians and other health care providers, whether regulated or unregulated, in all settings.
The primary purposes of scopes of practice determinations are to meet the health care needs and to serve the interests of patients and the public safely, efficiently, and competently.
There are many factors impacting the scopes of practice of health providers: broadening definition of health, emerging use of alternative therapies, increasing patient consumerism, advances in technology and in treatment and diagnostic modalities, information technology, legislation, changing demographics, increasing health care costs, and the shortage of physicians, nurses and other providers. Scopes of practice must reflect these changes in societal needs (including the need of the public for access to services), societal expectations, and preferences of patients and the public for certain types of health care providers to fulfill particular roles and functions, while at the same time reflecting economic realities. These factors and related issues (e.g., access, availability and cost) are influencing
governments and other stakeholders to consider new roles and expanded scopes of practice for health care providers.
There is a need to define principles and criteria for understanding and articulating scopes of practice that ensure public safety and appropriate utilization of provider skills.
Principles for determining scopes of practice
Focus: Scopes of practice statements should promote safe, ethical, high-quality care that responds to the needs of patients and the public in a timely manner, is affordable and is provided by competent health care providers.
Flexibility: A flexible approach is required that enables providers to practise to the extent of their education, training, skills, knowledge, experience, competence and judgment while being responsive to the needs of patients and the public.
Collaboration and cooperation: In order to support interdisciplinary approaches to patient care and good health outcomes, physicians engage in collaborative and cooperative practice with other health care providers who are qualified and appropriately trained and who use, wherever possible, an evidence-based approach. Good communication is essential to collaboration and cooperation.
Coordination: A qualified health care provider should coordinate individual patient care.
Patient choice: Scopes of practice should take into account patients' choice of health care provider.
Criteria for determining scopes of practice
Accountability: Scopes of practice should reflect the degree of accountability, responsibility and authority that the health care provider assumes for the outcome of his or her practice.
Education: Scopes of practice should reflect the breadth, depth and relevance of the training and education of the health care provider. This includes consideration of the extent of the accredited or approved educational program(s), certification of the provider and maintenance of competency.
Competencies and practice standards: Scopes of practice should reflect the degree of knowledge, values, attitudes and skills (i.e., clinical expertise and judgment, critical thinking, analysis, problem solving, decision making, leadership) of the provider group.
Quality assurance and improvement: Scopes of practice should reflect measures of quality assurance and improvement that have been implemented for the protection of patients and the public.
Risk assessment: Scopes of practice should take into consideration risk to patients.
Evidence-based practices: Scopes of practice should reflect the degree to which the provider group practices are based on valid scientific evidence where available.
Setting and culture: Scopes of practice should be sensitive to the place, context and culture in which the practice occurs.
Legal liability and insurance: Scopes of practice should reflect case law and the legal liability assumed by the health care provider including mutual professional malpractice protection or liability insurance coverage.
Regulation: Scopes of practice should reflect the legislative and regulatory authority, where applicable, of the health care provider.
Principles and criteria to ensure safe, competent and ethical patient care should guide the development of scopes of practice of health care providers. To this end, the CMA has developed these principles and criteria to assist physicians and medical organizations when they are involved in the determination of scopes of practice.
The CMA welcomes opportunities to dialogue with others on how scopes of practice can be improved for the benefit of patients and society in general.
TUITION FEE ESCALATION AND DEREGULATION IN UNDERGRADUATE PROGRAMS IN MEDICINE (Update 2009)
The Canadian Medical Association (CMA) is very concerned about high and rapidly escalating, undergraduate medical school tuition fees across Canada. Ontario set a precedent for the deregulation of tuition fees in May 1998 and many provinces have since followed. This policy gives universities, including medical schools, the discretion to set fees for training in those areas that lead to professional careers, such as medicine. For the 2008-2009 academic year, first-year tuition fees at most Ontario medical schools were triple the tuition fees in 1997-1998 at an average of $16,550 per year;1 this figure does not include compulsory "other fees" that can be as much as $1,700 per year.2 Irrespective of whether tuition fees have been regulated, some medical schools outside of Ontario have doubled their tuition fees within the same time period. Decreased government funding to universities is increasing the fiscal pressures on institutions and is driving these dramatic tuition fee increases. The CMA believes that high tuition fees, coupled with insufficient financial support systems, have a significant and detrimental impact on not only current and potential medical students, but also the Canadian health care system and public access to medical services.
Broad Effects of High Tuition Fees
Lack of Diversity
Medical education in Canada has traditionally been affordable and accessible to individuals from a range of socioeconomic and ethnic groups who later serve an equally diverse population. Unfortunately, the introduction of high tuition fees may close the door to individuals who either cannot afford the high costs of a medical education or wish to avoid the prospect of significant debt load upon graduation. High tuition fees may therefore create an imbalance in admissions to medical school by favouring those who represent the affluent segment of society and not the variety of groups reflected in the Canadian population. The proportion of medical students from lower income families is already extremely low and decreasing further.3 Paradoxically, funds that should be injected to making tuition fees reasonable - and therefore more accessible by a broader range of society - may soon need to be allocated to creating career promotion and special financial support programs that target those groups that have been alienated by high tuition fees.
Influence on Practice Choice and Practice Location ("Brain Drain")
It is likely that paying off debts as quickly as possible will become a key consideration when determining practice location and specialty. For instance, more students may feel compelled to maximize their earning potential by pursuing those specialties that generate high incomes; others may choose those specialties with short training periods so they can enter the workforce and start to pay off debts sooner.
Debt load may also influence where graduating physicians choose to practise medicine. The increasing willingness of American recruiters to pay off the debts of new graduates provides tremendous incentive to practise in the U.S. and explore research opportunities; unfortunately, it only aggravates the ongoing problem of the "brain drain" of Canadian physicians.4 While we have been enjoying a net gain of physicians from the U.S., we may experience net loss with physician shortages expected in the U.S. More physician retention and recruitment initiatives are needed to encourage physicians to remain in or return to Canada. This is especially true for rural and remote communities. Urban areas are often in a better financial position to offer incentives to new graduates than rural and remote communities where physician shortages are most pronounced.
Effects on Rural and Remote Areas
The CMA believes that governments must be made aware of the potentially negative impact of high tuition fees and student debt on physician workforce supply for the rural and remote areas of Canada. Research shows that medical students from rural and remote areas have a greater likelihood of returning to these communities to practise medicine.5 Research also shows that students of rural origin have higher student debts6 and are underrepresented in Canadian medical schools.7 Students from rural and remote communities face the challenge of not being able to live at home while they attend university. They must assume high relocation expenses and travel costs, as well as separation from their families while they are away at school. Of student respondents to the 2007 National Physician Survey, 53.1% of rural students compared with 67.4% of urban medical students had no debt upon entering medical school. When asked to predict their expected debt upon completion of medical school, 33.2% of rural students compared with 23% of urban students expected their debtload to exceed $100,000.8 Unfortunately, the introduction of high tuition fees might make both the personal and financial costs of pursuing a medical education too significant for students from rural and remote areas to even consider. As a result, this may generate fewer physicians willing to practise in these areas and exacerbate the problem most rural and remote communities already face in attracting and retaining physicians. High tuition fees might also further increase the reliance on international medical graduates in rural and remote communities. While the CMA values the contributions of international medical graduates in alleviating shortages in physician supply, it believes that Canadian governments must adopt the guiding principle of self-sufficiency in the production and retention of physicians to meet population needs.
Effects on New and Potential Medical Students
Medical students affected by high and escalating tuition fees will graduate with unprecedented debt loads. Enormous education costs, already a reality in some provinces, are a growing trend. In 2007, over one third (36%) of students said they expected debtloads of $80,000 or more upon completion of medical school.9
A number of factors, as highlighted below, contribute to students' financial burden and may affect their ability to pay off debts and meet financial obligations. This, in turn, may influence their choice of medical discipline and practice location. Exorbitant education costs may also result in students considering dropping out of, or taking longer to complete, their medical studies because they cannot afford the ongoing costs, or are too overwhelmed with the combined stress of their medical studies and trying to make financial ends meet. The CMA is very concerned that excessive debt loads will exacerbate the stress already experienced by medical students during their training and will have a significant and negative impact on their health and well-being.
Previous Education Debt and Accumulative Debt
Most Canadian medical schools make an undergraduate degree a prerequisite to application. As such, by the time most students are accepted into medical school, they may have already accumulated debt from a previous undergraduate degree. Many students have also completed postgraduate degrees before entering medical school.10 This debt continues to accumulate during the undergraduate years of medical school and into the postgraduate training period, which is anywhere from two years to seven years in duration. This does not include additional time spent doing fellowships. It may be very useful to establish a national clearinghouse of public and private financial assistance programs to help students in their search for financial support.
Limited or No Employment Opportunities during Undergraduate Training
Tuition fees, along with ongoing increases in living expenses, are already making it very difficult for some students to make ends meet. It makes matters worse that there are limited or no opportunities to generate income through employment during the academic year and the summer months. Given the intensity of the medical school program, some schools strongly advise against working part time. To further compound the problem, some schools have very short summer breaks. For those schools that do provide summer holidays, the holidays often start later than other university programs, by which time employment opportunities are scarce or low paying. There is also the common expectation that medical students will undertake unpaid clinical or research elective experiences during the summer to enhance their desirability for postgraduate medical programs.
Limited or No Remuneration for the Clinical Clerkship
During the clerkship years, there are no summertime breaks because students spend these years working in hospitals and other clinical settings. All Canadian medical students (outside of Québec) receive a relatively small stipend during their clerkship varying from $2,808 to $6,000;11 however, the stipend had previously been abolished in medical schools in Ontario and Québec in the early 1990s. Fortunately Ontario reinstated the stipend as the Final Year Medical Student Bursary in 2004.12
In addition to very limited or no opportunities to generate employment income, medical students must bear a number of unique and significant costs. These include very high textbook and instrument costs, as well as a variety of expenses associated with their clerkship, such as travel to and from the clinical setting and the need for professional attire. The introduction of distributed medical education including satellite campuses, co-campuses and rural learning sites has increased the amount of travel required of medical students as well as the associated costs.
Off-site electives also generate many additional expenses, including the cost for travel to the site - which may be in a different province - as well as accommodation and other living expenses. A 1999 survey of graduating medical students revealed that more than half took an off-site elective at a specific institution in order to increase their chances of being matched to that site.13 As postgraduate training becomes even more competitive, the number of students taking off-site electives may increase and so will the number of students who are adding this expense to their overall debt load.
Medical students must also assume considerable costs related to interviews for residency training, including the high costs for travel to various interview sites, accommodation expenses, application fees for the resident matching service and other miscellaneous expenses. There is also a considerable fee for the qualifying examination that is written at the end of medical school.
Insufficient Public Funding and Increasing Reliance on Bank Loans
Government financial support programs (bursaries and loans) are not increasing to meet students' needs due to rising tuition costs and living expenses. As a consequence, the number of students who must rely on interest-bearing bank loans to help support themselves while they are in school may increase. Unlike some government programs, repayment of bank loans often cannot be postponed until after graduation and interest payment is required during the course of study; this further exacerbates students' financial stress.
Upon graduation from medical school, students must pursue two to seven years of postgraduate training to obtain a licence to practise medicine. This training period is marked with fees for examinations as well as an annual tuition and/or registration fee. During 2008-2009, the tuition fee was as much as $3,900 in some provinces.14 Residents are also required to work long hours in hospitals and other clinical settings and have frequent on-call responsibilities. Although residents do receive a salary for this work, the remuneration is relatively modest when these factors and debt servicing payments are considered. In fact, mandatory debt maintenance can consume a very significant proportion of a resident's pay.15 The CMA opposes tuition fees for residents. While the CMA's opposition to residency tuition is based on a number of factors not limited to its financial impact, clearly, tuition fees exacerbate debt.
High Practice Start-up Costs and Decreased Pay Potential
Licensed physicians wanting to establish a clinical practice currently face start-up costs estimated between $30,000 and $50,000, depending on their practice specialty and type (e.g., solo versus group practice).16 Some specialties require capital investment over and above the basic start-up costs. These expenses will add to the significant debt that new physicians will bear in the next few years.
In addition to significantly higher debt load than the previous generation of new physicians, a number of factors may influence the net income of physicians and their ability to pay off debts. These include billing caps, stagnant fees for services, high malpractice insurance fees, overhead expenses and increasing non-remunerative administrative responsibilities.
In summary, the CMA believes that high tuition fees, coupled with insufficient financial support systems, have a significant impact on not only current and potential medical students, but also the Canadian health care system and public access to medical services. This impact includes:
* creating socioeconomic barriers to application to medical school and threatening the diversity of future physicians serving the public
* exacerbating the physician brain drain to the U.S. where new physicians can pay off their huge debts more quickly
* generating fewer physicians available or interested in practising in rural and remote areas of Canada
In response to its concerns regarding the deregulation of tuition fees and high tuition fee increases, the CMA recommends that:
1 governments increase funding to medical schools to alleviate the pressures driving tuition increases
2 any tuition increase should be regulated and reasonable
3 financial support systems for students be developed concomitantly or in advance of any tuition increase, be in direct proportion to the tuition fee increase and provided at levels that meet the needs of students.
Glossary of Terms
Undergraduate Program in Medicine, also known as "Medical School"
Medical school is the period of study, usually four years in duration that leads to the doctor of medicine or "MD" degree upon graduation. Most Canadian universities require applicants to the undergraduate medicine program to have at least a three-year degree (e.g., Bachelor of Science degree) before they are eligible to apply. Although the title "Doctor" is conferred upon successful completion of the undergraduate program, an additional two to seven years or more of residency training is required before these individuals can apply for a licence to practise medicine in Canada.
The clerkship is the period during the last one to two years of undergraduate studies in medicine during which medical students work in hospitals, clinics and physicians' offices.
Many students take off-site electives during their clerkship. An "elective" is a course or training that is not mandatory to the curriculum, but may be elected or chosen by the student. An "off-site" elective means that the training is being provided at a location different from the medical school where the student is enrolled; for example, the elective may be in a different city, province, or even a different country.
During the last year of undergraduate training, most graduating medical students participate in a national process that matches them with available residency training positions in Canada.
Residency/Postgraduate Training Period
After earning his/her MD degree and receiving the title "Doctor," additional training is required in a specific area before an individual may practise medicine in Canada. This period of training is referred to as "residency" or "postgraduate training;" the individuals undergoing the training are called "residents." Residents usually work in hospitals (also called "teaching hospitals") under the supervision of a licensed physician. Depending on the field of study, residency training may range from two to seven years or longer if subspecialty training is pursued (e.g., pediatric cardiology). At the end of residency training, individuals must pass a number of examinations to practise medicine in Canada.
A fellowship is training sought by individuals who wish to obtain expertise in a specific area of medicine above and beyond basic residency requirements.
1 Tuition Fees in Canadian Faculties of Medicine: Session Commencing Fall 2008. Office of Research and Information Services, Association of Faculties of Medicine of Canada, November 2008.
3 Kwong JC, Dhalla IA, Streiner DL, Baddour RE, Waddell AE & IL Johnson. Effects of rising tuition fees on medical school class composition and financial outlook. CMAJ 2002; 166 (8): 1023-8.
4 "Are We Losing Our Minds? Trends, Determinants and the Role of Taxation in Brain Drain to the United States," The Conference Board of Canada, July 1999.
5 Advisory Panel Report on the Provision of Medical Services in Underserviced Regions. Canadian Medical Association, 1992.
6 2007 National Physician Survey.
7 Dhalla IA, Kwong JC, Streiner DL, Baddour RE, Waddell AE, Johnson IL, et al. Characteristics of first-year students in Canadian medical schools. CMAJ 2002;166(8):1029-35. 
8 2007 National Physician Survey.
9 2007 National Physician Survey.
10 "Educational Attainment at Time of Application of Registered and Not Registered Applicants to Canadian Faculties of Medicine - 2006-2007 (Table 105)." 2008 Canadian Medical Education Statistics. Association of Faculties of Medicine of Canada, Volume 30, p154.
11 "Duration of Clinical Clerkship and Amount of Stipend in Canadian Faculties of Medicine 2008-2009 (Table 7)." 2008 Canadian Medical Education Statistics. Association of Faculties of Medicine of Canada, Volume 30, p9.
12 Clinical Clerkship Stipends by Faculty of Medicine, 1995-1996 to 1999-2000, Canadian Medical Association Research Directorate, January 2000.
13 Results of the Post-Match Survey of Students Graduating 1999, Canadian Resident Matching Service.
14 "Post-MD Clinical Trainee Fees in Canadian Faculties of Medicine - 2008-2009 (Table 6)." 2008 Canadian Medical Education Statistics. Association of Faculties of Medicine of Canada, Volume 30, p8.
15 2007 National Physician Survey.
16 Practice Management, MD Management Ltd.
Vision for e-Prescribing: a joint statement by the Canadian Medical Association and the Canadian Pharmacists Association
By 2015, e-prescribing will be the means by which prescriptions are generated for Canadians.
e-Prescribing is the secure electronic creation and transmission of a prescription between an authorized prescriber and a patient's pharmacy of choice, using clinical Electronic Medical Record (EMR) and pharmacy management software.
Health Information Technology (HIT) is an enabler to support clinicians in the delivery of health care services to patients. The Canadian Medical Association (CMA) and the Canadian Pharmacists Association (CPhA) each have identified e-prescribing as a key tool to deliver better value to patients. The integration of HIT into clinics and health care facilities where physicians and pharmacists provide care is a priority for both associations1.
As part of its Health Care Transformation initiative, the CMA highlighted the need to accelerate the introduction of e-prescribing in Canada to make it the main method of prescribing. In its policy on optimal prescribing the CMA noted that one of the key elements was the introduction of electronic prescribing. The CPhA, as part of its Blueprint for Pharmacy Implementation Plan, highlights information and communication technology, which includes e-prescribing, as one of five priority areas.
We applaud the ongoing efforts of Canada Health Infoway, provinces and territories to establish Drug Information Systems (DIS) and the supporting infrastructure to enable e-prescribing. We urge governments to maintain e-prescribing as a priority and take additional measures to accelerate their investments in this area.
It is our joint position that e-prescribing will improve patient care and safety. e-Prescribing, when integrated with DIS, supports enhanced clinical decision-making, prescribing and medication management, and integrates additional information available at the point of care into the clinical workflow.
The following principles should guide our collective efforts to build e-prescribing capability in all jurisdictions:
* Patient confidentiality and security must be maintained
* Patient choice must be protected
* Clinicians must have access to best practice information and drug cost and formulary data
* Work processes must be streamlined and e-prescribing systems must be able to integrate with clinical and practice management software and DIS
* Guidelines must be in place for data sharing among health professionals and for any other use or disclosure of data
* The authenticity and accuracy of the prescription must be verifiable
* The process must prevent prescription forgeries and diversion
* Pan-Canadian standards must be set for electronic signatures
Benefits of e-Prescribing
A number of these benefits will be realized when e-prescribing is integrated with jurisdictional Drug Information Systems (DIS).
o Improves patient safety and overall quality of care
o Increases convenience for dispensing of new and refill prescriptions
o Supports collaborative, team-based care
o Supports a safer and more efficient method of prescribing and authorizing refills by replacing outdated phone, fax and paper-based prescriptions
o Eliminates re-transcription and decreases risk of errors and liability, as a prescription is written only once at the point-of-care
o Supports electronic communications between providers and reduces phone calls and call-backs to/from pharmacies for clarification
o Provides Warning and Alert systems at the point of prescribing, supporting clinician response to potential contraindications, drug interactions and allergies
o Facilitates informed decision-making by making medication history, drug, therapeutic, formulary and cost information available at the point of prescribing
* Health Care System:
o Improves efficiency and safety of prescribing, dispensing and monitoring of medication therapy
o Supports access to a common, comprehensive medication profile, enhancing clinical decision-making and patient adherence
o Increases cost-effective medication use, through improved evidence-based prescribing, formulary adherence, awareness of drug costs and medication management
o Improves reporting and drug use evaluation
While evidence of the value of e-prescribing is established in the literature, its existence has not fostered broad implementation and adoption. In Canada, there are a number of common and inter-related challenges to e-prescribing's implementation and adoption. These include:
* Improving access to relevant and complete information to support decision-making
* Increasing the level of the adoption of technology at the point of care
* Focusing on systems-based planning to ensure continuum-wide value
* Integrating e-prescribing into work processes to gain support from physicians, pharmacists and other prescribers
* Increasing leadership commitment to communicate the need for change, remove barriers and ensure progress
* Updating legislation and regulation to support e-prescribing
Enabling e-Prescribing in Canada
CMA and CPhA believe that we can achieve the vision that is set out in this document and address the aforementioned challenges by working collectively on five fronts:
* Health care leadership in all jurisdictions and clinical organizations must commit to make e-prescribing a reality by 2015
* Provinces and territories, with Canada Health Infoway, must complete the building blocks to support e-prescribing by increasing Electronic Medical Record (EMR) adoption at the point of care, finishing the work on the Drug Information Systems (DIS) in all jurisdictions and building the connectivity among the points of care and the DIS systems
* Pharmacist and medical organizations in conjunction with provinces, territories and Canada Health Infoway must identify clear benefits for clinicians (enhancing the effectiveness of care delivery and in efficiencies in changing workflows) to adopt e-prescribing and focus their efforts on achieving these benefits in the next three years
* Provinces, territories and regulatory organizations must create a policy/regulatory environment that supports e-prescribing which facilitates the role of clinicians in providing health care to their patients
* Provinces and territories must harmonize the business rules and e-health standards to simplify implementation and conformance by software vendors and allow more investment in innovation.
1 Health Care Transformation in Canada, Canadian Medical Association, June 2010; Blueprint for Pharmacy Implementation Plan, Canadian Pharmacists Association, September 2009