The Ontario Medical Association (OMA) is subject to the requirements of the Personal Information Protection and Electronic Documents Act, 2000 (PIPEDA) for the services that it provides its members. In some instances, such as the Physician Health Program, the OMA is subject to the Personal Health Information Protection Act, 2004 (PHIPA) for the healthcare services that it provides its members.
Both Acts specify the OMA’s legal requirements to protect the privacy of individuals whose personal information or personal health information is in the OMA’s custody. The OMA also observes the GDPR, insofar as OMA collects web-based data analytics. The OMA is committed to ensuring that your personal information or personal health information is treated with the utmost respect, dignity, and sensitivity.
Purposes for Collecting, Using and Disclosing Your Personal Information
As an OMA member, we collect, use, and disclose your personal information for the following purposes:
- To register you as an OMA member;
- To communicate with you for OMA membership products, services, and information;
- To assess your needs as an OMA member to determine which OMA products and services are useful and relevant to you;
- To manage our continuing relationship with you;
- To conduct surveys and polls of OMA members;
- To permit affiliated and other reputable third-party organizations, subsidiaries, and preferred suppliers to provide products, services, and information to you;
- To facilitate communication and otherwise assist individuals or institutions during a public health or other emergency;
- To meet any legal or regulatory requirements such as disclosures under the Corporations Act; and
- For other purposes consistent with the above.
 From time to time, the OMA receives requests from members, under the Corporations Act sections 306-307, for member contact information. This information is restricted to names and business addresses kept in a register specific to the purposes of the Corporations Act.
Consent for Collecting, Using and Disclosing Your Personal Information
The OMA relies on implied consent to collect, use, and disclose your personal information for the purposes outlined above. Your personal information may include your name, date of birth, address, and contact information. If we require your personal information for purposes not outlined above or which were not communicated to you at the time that we collected the information from you, then we will obtain your consent to collect, use, or disclose your personal information for these purposes.
Your Privacy Rights
At any time, you may withdraw your consent for the OMA to collect, use, or disclose your personal information for OMA programs, services, or sharing with a third party organization or OMA subsidiary. If you choose to withdraw your consent, our employees will explain to you the potential implications of your withdrawal, after which the OMA will implement your withdrawal of consent request to the best of our abilities. In all cases, withdrawal of consent is not retroactive. You also have the right to request access to the personal information that we have collected about you, and to request a correction to this information if you believe it is inaccurate. The OMA has provided online services to assist you with correcting some of your personal information on your own. However, if you are unable to do so, you must submit an access or corrections request in writing to our Privacy Office. Forms for submitting these requests are also available through our Privacy Office, or on our website at www.oma.org.
How We Protect Your Personal Information
The OMA has put safeguards in place to protect your personal information from theft, loss and unauthorized access, copying, modification, use, disclosure, and disposal. We have created policies and training to ensure that everyone who performs services for us has received guidance on how to protect your privacy and to use your personal information only for authorized purposes. We also conduct audits and complete investigations to monitor and manage our compliance with our privacy obligations.
How to Contact Us or Make a Complaint
If you have any questions or concerns about how the OMA manages your personal information and protects your privacy, please contact our Privacy Officer at:
- Phone: 416.599.2580 or 1.800.268.7215
- Email: firstname.lastname@example.org
- Fax: 416.340.2944
You have the right to complain to the Office of the Privacy Commissioner of Canada if you think we have violated your privacy rights for personal information. The Commissioner can be reached at:
- 30 Victoria Street, Gatineau, Quebec K1A 1H3
- Phone: 819.994.5444 or 1.800.282.1376
- Fax: 819.994.5424
- Web: www.priv.gc.ca
If the OMA has provided you with healthcare services, you have the right to complain to the Information and Privacy Commissioner of Ontario if you think we have violated your privacy rights for personal health information. The Commissioner can be reached at:
- 1400 – 2 Bloor Street East, Toronto, ON M4W 1A8
- Phone: 416.326.3333 or 1.800.387.0073
- Fax: 416.325.9195
- Web: www.ipc.on.ca