08Drawer 08, Trust & privacy
Card 6 of 10
Custodian and information manager
The question: Who is the custodian of patient records, and what is Arxeon's role under the Health Information Act?
Your clinic and its physicians stay the custodians of health information. Arxeon is the clinic's information manager under section 66 of Alberta's Health Information Act, on the terms of the Information Manager Agreement in the subscriber agreement: it handles health information only to provide the service or on the clinic's instructions, and notifies the clinic of a confirmed breach within 72 hours.
Roles
- Custodian: the clinic and its physicians. Custody never moves to Arxeon.
- Information manager: Arxeon, under section 66 of the HIA, on the terms of Schedule A of the subscriber agreement.
What Arxeon may do
Handle health information only to provide, secure and support the service, on the clinic's instructions, or as the law requires. Schedule A commits Arxeon never to sell it, use it for advertising, or use it to train AI models.
Breaches
A confirmed breach is reported to the clinic without unreasonable delay, and within 72 hours of confirming it, to support the clinic's own duties.
Requests from patients
A patient's access or correction request sent to Arxeon is referred to the clinic within 5 business days.
Where to look