Control Alt Delete: Control Data, Use Alternatives, and Delete Risks

Transcription

1 Keynote Address: Keynote Speaker: Big Data/Big Privacy Nora Young (Host & Creator, Spark (CBC)) As individuals, we re generating more data all the time about our movements, habits, and tastes. We re on the cusp of a Data Boom, a new era in information, fueled by our digital devices. It will offer new personal insights, open opportunities for new services, and change the nature of our cities and communities. The Data Boom has the power to make our personal lives and communities better, but it also carries tremendous privacy risks. Drawing on her book, and her experience as host and creator of CBC s technology show, Spark, Nora explains how this Data Boom will change society, and what it means for individuals, businesses, and communities.

2 Keynote Address: Cybersecurity Keynote Speakers: Travis Barlow and Derrick Westhaver (GoSecure Inc.) This session will discuss: - the types of threats GoSecure Inc. has observed at its Advanced Response Centre (ARC) over the past year from its global client base; - the motivation behind the threat actors; - what has worked well to detect and defend; and - what we expect to see in the next year.

3 Breakout Session #1A: Panelists: Secondary Use of Data in Health Research - Ethics, Data Access, and Privacy Considerations Michael Bannister (Government of NL (HCS)), Sean Murray (OIPC), Donna Roche (NLCHI) and Sandra Veenstra (HREA) This session will focus on the ethics, data access, and privacy considerations of the secondary use of data in health research. Topics to be addressed will include best practices for access to data, privacy, information management and information security. Ethical considerations related to privacy and consent, as well as the various approval processes that need to be in place prior to access or disclosure, will be reviewed in the local context. Open discussion with session attendees will be encouraged regarding how other jurisdictions manage the ethics review of research that relies on data held by external organizations and how data custodians process requests for secondary use of data for research purposes.

4 Breakout Session #1B: Speaker: Ashley Dinn (NLCHI) Expanding Telehealth in Newfoundland and Labrador Telehealth enables the delivery of equitable health services to patients in Newfoundland and Labrador regardless of location. By reducing the need for patients, family, and health care specialists to travel for medical appointments, Telehealth enhances the continuity and capacity of care throughout the health care system. In a province like ours, with its vast geography, dispersed and aging population, harsh weather conditions and growing health care demands, Telehealth works to close the gaps resulting from these challenging realities. As of March, 2018 Telehealth is accessible in over 64 communities and 104 health care facilities. Under the Newfoundland and Labrador Centre for Health Information s (NLCHI) leadership and in continued collaboration with the regional health authorities and the Provincial Government, Telehealth is reducing barriers and closing gaps in the health care system. Telehealth enables many residents to avail of specialized and critical health care services without leaving their communities. Medical specialists can consult, treat and manage care without having to be in the same room with their patients. With a focus on chronic diseases prevalent in our province, in addition to oncology, nephrology, diabetes, mental health and neurology, the benefits and opportunities for Telehealth in Newfoundland and Labrador are being recognized. The Provincial Telehealth Program is currently expanding to bring these services into Primary Health Care and within the client s home. NLCHI is establishing a provincial Telehealth infrastructure to meet the growing demands on the health care systems and allow new ways to deliver health care across the province. This presentation will examine the importance of privacy and security of the provincial telehealth infrastructure, responsibilities for the Provincial Telehealth Program, and current expansion opportunities.

5 Breakout Session #1C: Speaker: Lori Collins (CNA) The Evolution of Enterprise Content Management: How APSIM Practitioners can Maximize Benefits Through 2017 industry experts, bloggers and associations took turns trying to redefine and rebrand Enterprise Content Management (ECM). AIIM, the leading ECM professional association, was in such agreement with a January 2017 Gartner blog post titled "The Death of ECM and Birth of Content Services" that reflected that "ECM is now dead (kaput, finite, an ex-market name)" that announced it would replace ECM with the term Intelligent Information Management (IIM). This new term would encompass the management of data and content, not just content by itself. But what does it mean for the Access, Privacy, Security and Information Management (APSIM) professionals on the ground? Is there a way to harness this new approach to benefit a wide range of APSIM practices? This presentation will review the evolution of ECM and show just how this new approach can help APSIM professionals tackle some of their highest priority challenges.

6 Breakout Session #2A: Speaker: Information Asset Management Donna O Toole (Government of NL (OCIO)) Managing information assets involves stakeholders from the fields of access, privacy, security and information management. Broadening your information technology awareness can support your IM program s ability to monitor and verify IM performance and compliance. A managed IM program supports compliance in all our fields of practice. Learn about your role in the many enterprise responsibilities undertaken by your organization each day. Account Setups, Active Directory, Network Security Groups and Distribution Groups Standard Document and Forms Management Collaboration Tools (Intranet and Extranet) Employee Orientation including exit strategies Corporate culture and employee engagement

7 Breakout Session #2C: Panelists: Fees & Costs Associated with ATIPP Requests Stacey Pratt (OIPC) and Jennifer Taylor (ATIPP Office) Under Section 25 of the Access to Information and Protection of Privacy Act, 2015, the legislation lays out where and when it is appropriate to charge an applicant for the processing of a request. As this has changed substantially since previous iterations of the legislation, it has changed how coordinators must approach the processing of large requests, but has also ensured the ATIPP process is accessible to all in the public, without limiting by financial ability. In this session, we will look at some of the opportunities and challenges presented through the revised legislation.

8 Plenary Session: Panelists: Privacy Tools Blaine Edwards (Government of NL (HCS)), Jennifer Taylor (ATIPP Office), and Ruth Marks (OIPC) There are a number of privacy tools available for practitioners, including preliminary privacy impact assessments/privacy impact assessments (PPIAs/PIAs), policies and procedures, training, agreements, audits, and privacy management programs. Sometimes it is difficult to identify the best tool for the task at hand and determine which tools to action first. Using a hypothetical scenario involving a newly created organization, this presentation will teach participants about the most appropriate tool for the situation, as well as how to prioritize tasks. Panelists will also highlight the resources and tools available specific to the Access to Information and Protection of Privacy Act, 2015 (ATIPPA, 2015) and the Personal Health Information Act (PHIA).

9 Breakout Session #3B: Panelists: PHIA Legislative Review Blaine Edwards (Government of NL (HCS)), Dave Morgan (Morgan Privacy Consulting; PHIA Review Chair), and Sean Murray (OIPC) Mix 2 parts public servant together with 1 part consultant. Add a dash of health privacy legislation, 116 pages of report, and a bunch of audience questions, all while making sure there is enough oversight: what do you get? A panel on the recent Personal Health Information Act Legislative Review. Featuring three of the key players in the PHIA Review, this panel session will offer insights into the PHIA Review that go beyond Terms of Reference, committee structures, and final reports. Come hear about government challenges, oversight body expectations, and resourcing constraints that helped shape the review. Understand which topics were the most challenging to address and why some topics could not be tackled. And, most importantly, come to learn about what the legislative next steps are. There will be lots of time for questions, so every attendee will have an opportunity to hear about the topics that are important to them.

10 Breakout Session #3C: Speaker: Building a Privacy Culture in Post-Secondary Institutions (or any institution for that matter) Rosemary Thorne, CIPP/C (Memorial University of Newfoundland) Using a hypothetical personal information request, this presentation uniquely demonstrates how to build a privacy culture in your organization. A public post-secondary institution receives an access to information request. Responding reveals the importance of the ten fair information practices and five key activities to bring them to life in your organization: 1. Buy-in from the top 2. Change the rules 3. Sow the seeds 4. Work with your allies 5. Know the risks Wash, rinse, repeat.