Prescribed Entity and Non-Prescribed Entity/Person Use of Personal Information for Research Purposes under Part X (Personal Information) of the Child, Youth & Family Services Act, 2017 (CYFSA)
Bill or Act:
Child, Youth and Family Services Act, 2017.
Summary of Proposal:
Overview of Part X:
The CYFSA received Royal Assent on June 1, 2017. Part X of the Act establishes a new personal information privacy framework for the sector which includes new:
•Rules for the collection, use, and disclosure of clients' personal information by service providers under the Act.
•Rights for children, youth and family members to access and correct their personal information held by those service providers.
•Ministry authority to collect data and information, including personal information from clients and service providers, for purposes such as monitoring and oversight, research, evaluation and system planning.
MCYS funds and/or licenses a variety of service providers to provide services across the child and youth sector. Some of these service providers are governed by the Freedom of Information and Protection of Privacy Act (FIPPA), the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), or the Personal Health Information Protection Act (PHIPA). However, many MCYS-funded service providers are currently not governed by any legislation that sets rules for the handling or sharing of personal information (e.g. Children's Aid Societies). Part X fills the 'legislative gap' in the child and youth service sector by providing consistent protections and rights for children, youth, and families related to their personal information.
The data collection authorities included in Part X will enhance the ability of the ministry to use data about its clients to make evidence-based decisions about its programs and services while protecting the privacy and confidentiality of that data.
Policy Intent in Legislation:
In general, Section 293 of the CYFSA establishes authorities for service providers to disclose PI to PEs and Non-PEs for the purpose of planning and managing services.
Section 293(9) specifies that PEs and Non-PE (i.e. First Nations, Inuit or Métis entities/persons) can only use PI for this specific purpose unless additional exceptions and requirements are prescribed in regulation.
Policy Intent of Regulation:
The proposed regulation would permit PEs and Non-PEs to use PI for their own research purposes and to disclose PI to researchers for research purposes. PEs could also disclose PI to other PEs to analyze or compile statistical information for the management, evaluation, or monitoring of services; to allocate resources to these services; or to plan these services. The regulation also outlines specific privacy-related requirements and obligations that must be met before any such use or disclosure of PI could occur.
Permitting additional uses and disclosures of PI supports innovation and new knowledge creation about sector needs and priorities; accelerates service improvements through the use of evidence-based decision-making; and ultimately improves outcomes for children, youth, and families.
December 4, 2017
Comments Due Date:
January 26, 2018
Ministry of Children and Youth Services
56 Wellesley St West, 15th Floor
Toronto, ON M5S 2S3