← Data Privacy & Medical Records

Records & research · NPC advisory opinion

Medical records for cancer registries

Reference
Advisory Opinion 2019-031
Date
5 September 2019

Overview

The NPC considered requests from two population-based cancer registries under the National Integrated Cancer Control Act. It found that relevant health information could be shared under the law without patient consent, while still requiring transparency, proportionality and secure handling.

Practice implications

Parao Law practice guidance

For physicians

When a registry requests records, confirm its authority and the required data fields. Arrange controlled review or extraction, protect unrelated chart material and communicate the purpose through the hospital’s privacy notice.

For lawyers

Match the registry request to its statutory mandate and limit the dataset to what is necessary. Set procedures for researcher access, secure transmission and confidentiality. This opinion concerns the named registries and statutory framework; it is not a blanket research exemption.