The EORC is committed to protecting the privacy and confidentiality of all personal information, including personal health information (PHI), of our clients.

All information is handled in accordance with applicable legislation, including the Personal Health Information Protection Act (PHIPA) and the Freedom of Information and Protection of Privacy Act (FIPPA). We ensure that client records are kept secure, confidential, and accessible only to authorized personnel.

• Personal and health information is collected, used, disclosed, retained, and disposed of only for authorized purposes.
• Consent is obtained before collecting, using, or disclosing PHI. Clients can withdraw consent at any time, and all consent is documented in client records.
• Records are physically and electronically secured, retained for 7 years post-service (or post-age 18 for minors), and safely disposed of when no longer required.

• Clients and authorized individuals can request access to their records or request corrections.
• Original records are reviewed with a staff member present and are not released unless legally required.

• Only authorized staff have access to client records.
• Client information is kept private except where disclosure is required by law, such as in emergencies or as mandated by legislation.
• Images or media use of clients requires explicit consent.

• Clients may contact the EORC Privacy Officer (Executive Director) with questions, concerns, or complaints.
• Complaints are investigated, documented, and corrective actions are taken as necessary.
• Issues can also be escalated to the Information and Privacy Commissioner of Ontario.