Go to content

Data Holding PIA Summaries

Below are the Privacy Impact Assessments (PIAs) related to ICES Data Holdings approved by the Privacy & Legal Office. The PIAs are listed by the date of approval.

  1. ICES Data Holding: DDARD
    Completion Date: December 21, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with a proposed amendment to the ICES data holding titled DDARD, which involves expanding the scope of its use to include linkage with all ICES data and use by third party researchers.
  2. ICES Data Holding: Indigenous data holding
    Completion Date: December 22, 2023
    Summary: The purpose of this Privacy Impact Assessment was to assess a request for ICES to collect data from an Indigenous partner.
  1. ICES Data Holding: Note: CLD (Clinical Liver Database) is currently retained by ICES as a Controlled Use Data Holding (CUD), collected by ICES from Toronto Western Hospital/UHN, subject to the DSA#2677, for use in ICES Projects
    Completion Date: November 14, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with a proposed amendment to the ICES data holding titled CLD, which involves changing the obligations associated with its use, specifically, changing the person who approves each of ICES’ uses of CLD and the acknowledgments and credits required in each publication that uses CLD.
  2. ICES Data Holding: Drug and Drug/Alcohol Related Deaths data (“DDARD”) collected from OCC that is linked with ICES Data Holdings (collectively the “ICES Data”) to OCC
    Completion Date: November 17, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with a requested disclosure of ICES data to the Office of the Chief Coroner.
  1. ICES Data Holding: OSR
    Completion Date: September 14, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with a proposed amendment to the ICES data holding titled OSR, which involves changing the number of Ontario hospitals from which additional personal health information (“PHI”) pertaining to stroke patients seen between April 1, 2022, to March 31, 2023, will be collected, and adding an additional variable to a case list that was generated by ICES from its PHI holdings and that will be sent to one of the hospitals.
  1. ICES Data Holding: MOH
    Completion Date: August 31, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ collection, use and/or disclosure of ICES data holdings from the Ministry of Health, specifically, ADP, CAPE, CCRS, CPDB, DAD, HCDMOH, HCES, INST, LOC, NACRS, NRS, ODB, OHCAS, OHIP, OMHRS, OTR, PCAS, RAIHCMOH, RPDB, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004 is permitted to do.
  2. ICES Data Holding: CIHI
    Completion Date: August 30, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ collection, use and/or disclosure of ICES data holdings from the Canadian Institute for Health Information, specifically, CCRS, DAD, NACRS, OMHRS, and CORR, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004 is permitted to do.
  3. ICES Data Holding: HYPER
    Completion Date: August 30, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ creation, use, and/or disclosure of the ICES data holding, HYPER, derived from existing ICES data holdings sourced from the Ministry of Health and the Canadian Institute for Health Information, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004 is permitted to do, including evaluation, planning and monitoring of the health system, as well as research, involving hypertension.
  4. ICES Data Holding: HIV
    Completion Date: August 30, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ creation, use, and/or disclosure of the ICES data holding, HIV, derived from existing ICES data holdings sourced from the Ministry of Health and the Canadian Institute for Health Information, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004, is permitted to do, including evaluation, planning and monitoring of the health system, as well as research, involving HIV.
  5. ICES Data Holding: SDS
    Completion Date: August 30, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ creation, use, and/or disclosure of the ICES data holding, SDS, derived from existing ICES data holdings sourced from the Ministry of Health and the Canadian Institute for Health Information, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004, is permitted to do, including evaluation, planning and monitoring of the health system, as well as research, involving ambulatory surgical care.
  6. ICES Data Holding: ASTHMA
    Completion Date: August 30, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ creation, use, and/or disclosure of the ICES data holding, ASTHMA, derived from existing ICES data holdings sourced from the Ministry of Health and the Canadian Institute for Health Information, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004, is permitted to do, including evaluation, planning and monitoring of the health system, as well as research, involving asthma.
  7. ICES Data Holding: MOMBABY
    Completion Date: August 30, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ creation, use, and/or disclosure of the ICES data holding, MOMBABY, derived from existing ICES data holdings sourced from the Ministry of Health and the Canadian Institute for Health Information, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004, is permitted to do, including evaluation, planning and monitoring of the health system, as well as research, involving perinatal care.
  8. ICES Data Holding: OCCC
    Completion Date: August 30, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ creation, use, and/or disclosure of the ICES data holding, OCCC, derived from existing ICES data holdings sourced from the Ministry of Health and the Canadian Institute for Health Information, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004, is permitted to do, including evaluation, planning and monitoring of the health system, as well as research, involving Crohn’s disease or Ulcerative Colitis.
  9. ICES Data Holding: OMID
    Completion Date: August 30, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ creation, use, and/or disclosure of the ICES data holding, OMID, derived from existing ICES data holdings sourced from the Ministry of Health, the Canadian Institute for Health Information, and Statistics Canada, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004, is permitted to do, including evaluation, planning and monitoring of the health system, as well as research, involving acute myocardial infarction.
  10. ICES Data Holding: CHF
    Completion Date: August 30, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ creation, use, and/or disclosure of the ICES data holding, CHF, derived from existing ICES data holdings sourced from the Ministry of Health and the Canadian Institute for Health Information, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004, is permitted to do, including evaluation, planning and monitoring of the health system, as well as research, involving congestive heart failure.
  11. ICES Data Holding: COPD
    Completion Date: August 30, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ creation, use, and/or disclosure of the ICES data holding, COPD, derived from existing ICES data holdings sourced from the Ministry of Health and the Canadian Institute for Health Information, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004, is permitted to do, including evaluation, planning and monitoring of the health system, as well as research, involving chronic obstructive pulmonary disease.
  12. ICES Data Holding: ORAD
    Completion Date: August 30, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ creation, use, and/or disclosure of the ICES data holding, ORAD, derived from existing ICES data holdings sourced from the Ministry of Health and the Canadian Institute for Health Information, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004, is permitted to do, including evaluation, planning and monitoring of the health system, as well as research, involving rheumatoid arthritis.
  13. ICES Data Holding: PHYSNET
    Completion Date: August 30, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ creation, use, and/or disclosure of the ICES data holding, PHYSNET, derived from existing ICES data holdings sourced from the Ministry of Health and the Canadian Institute for Health Information, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004, is permitted to do, including evaluation, planning and monitoring of the health system, as well as research, involving linking patients and/or physicians to physician networks in Ontario.
  14. ICES Data Holding: PIBD
    Completion Date: August 30, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ creation, use, and/or disclosure of the ICES data holding, PIBD, derived from existing ICES data holdings sourced from the Ministry of Health and the Canadian Institute for Health Information, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004, is permitted to do, including evaluation, planning and monitoring of the health system, as well as research, involving children in Ontario with inflammatory bowel disease.
  15. ICES Data Holding: CONTACT
    Completion Date: August 30, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ creation, use, and/or disclosure of the ICES data holding, CONTACT, derived from existing ICES data holdings sourced from the Ministry of Health and the Canadian Institute for Health Information, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004, is permitted to do, including evaluation, planning and monitoring of the health system, as well as research, involving health services research.
  16. ICES Data Holding: STATSCAN
    Completion Date: August 30, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ creation, use, and/or disclosure of the ICES data holdings, CCHS, NPHS, and OHSurvey, derived from personal information sourced from Statistics Canada, to be used for evaluation, planning and monitoring of the health system, as well as research, in the areas of evaluating population health status, healthcare service usage, and lifestyle risk factors.
  17. ICES Data Holding: ERCLAIM
    Completion Date: August 29, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with ICES’ creation, use, and/or disclosure of the ICES data holding, ERCLAIM, derived from existing ICES data holdings sourced from the Ministry of Health, for purposes consistent with what a prescribed entity under section 45 of the Personal Health Information Protection Act, 2004, is permitted to do, including evaluation, planning and monitoring of the health system, as well as research, involving emergency room claims.
  1. ICES Data Holding: REDCap
    Completion Date: July 23, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications of the various steps and requirements for primary data collection performed by ICES, using REDCap.
  2. ICES Data Holding: IMPACT Amendment
    Completion Date: July 21, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with a proposed amendment to the controlled use data holding (“CUD”) titled IMPACT (the “IMPACT CUD”), the purpose of which is to extend the time frame for the subset of the IMPACT CUD referred to in PIA-304 as IMPACT CNS data to December 31, 2019, from December 31, 2017.
  3. ICES Data Holding: SMART-EVT Amendment
    Completion Date: July 21, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with a proposed amendment to the ICES data holding titled OSR, which involves collection of an additional year of personal health information (“PHI”) from various hospitals pertaining to stroke patients seen between April 1, 2022, to March 31, 2023. To facilitate such collection, ICES will use its PHI holdings to generate case lists of individuals to disclose to each Ontario hospital from which ICES will be collecting PHI about stroke patients.
  4. ICES Data Holding: interRAI HC and interRAI CA) originally collected from Ontario Health (OH)
    Completion Date: July 29, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with a proposed amendment to the ICES data holdings titled interRAI HC and interRAI CA, the purpose of which is to collect from Ontario Health (OH) additional variables.
  5. ICES Data Holding: Canadian Deprivation Index (CDI)
    Completion Date: July 28, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy implications associated with making the following revisions pertaining to creation by ICES of a new data holding which is sourced from publicly available data that is not personal information.
  1. ICES Data Holding: Indigenous data holding
    Completion Date: June 14, 2023
    Summary: The purpose of this PIA is to amend an agreement between ICES and an Indigenous Partner.
  1. ICES Data Holding: DR (Database Recovery)
    Completion Date: May 18, 2023
    Summary: The purpose of this PIA is to assess the privacy risks associated with transfer of ICES’ disaster recovery (DR) site to a new location.
  1. ICES Data Holding: BORN
    Completion Date: March 7, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the
    privacy risks associated with a proposed amendment to the controlled use data holding titled BORN. The amendment involves collection of additional variables from CHEO and extending the data timeframe to March 31, 2021, from the current timeframe of March 31, 2018.
  2. ICES Data Holding: CLSA
    Completion Date: March 20, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the
    privacy risks associated with creating a new ICES Data Holding consisting of personal information about the changing biological, medical, psychological, social, and economic aspects of people’s lives as they age over a 20-year period, to assist with policy development around issues affecting an aging population.
  1. ICES Data Holding: CCM
    Completion Date: February 27, 2023
    Summary: The purpose of this Privacy Impact Assessment is to assess the privacy risks associated with a proposed amendment to an existing disclosure of data that ICES, acting as a prescribed entity, makes to Ontario Health, also acting as a prescribed entity. The nature of the proposed amendment is disclosure of additional variables.
  1. ICES Data Holding: OBI
    Completion Date: January 25, 2023
    Summary: The purpose of this PIA is to amend the process used for generating a crosswalk that enables linkage of personal health information (“PHI”) provided by the Ontario Brain Institute (“OBI”) with ICES data while protecting the privacy of Ontarians by keeping health numbers separate from other direct identifiers. This crosswalk supports a research partnership between OBI and ICES in which OBI discloses PHI on a per project basis to ICES for use in research and analytics conducted pursuant to the Personal Health Information Protection Act, 2004, SO 2004, c 3, Sched A and/or pursuant to ICES’ corporate objectives.
  2. ICES Data Holding: Indigenous data holding
    Completion Date: January 26, 2023
    Summary: The purpose of this PIA was to assess a request for ICES to collect data from an Indigenous partner.
  1. ICES Data Holding: Indigenous data holding
    Completion Date: November 8, 2022
    Summary: The purpose of this PIA was to assess a request for ICES to collect data from an Indigenous partner.
  2. ICES Data Holding: IRCC
    Completion Date: November 24, 2022
    Summary: The purpose of this PIA was to assess a request to amend governance of ICES’ handling of personal information disclosed to it by Immigration, Refugees, and Citizenship Canada for use in research and statistical purposes by ICES and to add variables.
  3. ICES Data Holding: DATIS
    Completion Date: November 30, 2022
    Summary: The purpose of this PIA was to assess a request to amend DATIS by adding variables and amending the list of participating data custodians.
  4. ICES Data Holding: IMPACT
    Completion Date: November 30, 2022
    Summary: The purpose of this PIA was to assess a request to create a new ICES Data Holding concerning the diagnosis, treatment, outcomes and healthcare utilization of Ontario adolescents and youth with cancer for use by ICES for its functions as a prescribed entity for the purposes of section 45 of the Personal Health Information Protection Act, 2004, including analysis or compilation of statistical information with respect to the management of, evaluation or monitoring of, the allocation or resources to or planning for all or part of the health system; research conducted by ICES; and research conducted by third party researchers.
  1. ICES Data Holding: GEMINI
    Completion Date: October 4, 2022
    Summary: The purpose of this PIA was to assess a request to amend the existing ICES Data Holding GEMINI by updating the data variables.
  1. ICES Data Holding: Canadian COVID-19 Emergency Department Rapid Response Network: Real-World Vaccine Effectiveness and Duration of Protection in Special Populations
    Completion Date: September 1, 2022
    Summary: The purpose of this PIA is to create a new ICES Data Holding consisting of an Ontario-specific COVID-19 registry that includes information about suspected and confirmed COVID-19 patients who present to Canadian Emergency Departments, including their health outcomes and vaccination data, to be used to support observational studies about patients with suspected or confirmed COVID-19 to generate research capacity and initiate a rapid knowledge-to-action cycle to inform responses to the evolving COVID-19 pandemic, and to help plan for the next pandemic.