skip to main content

web_page_header_privacy and security lg.jpg

Frequently Asked Questions

1. Who can take OMD's online privacy and security training?

OMD's online Privacy and Security Training Module is open to all Ontario physicians, existing OntarioMD.ca users, as well as other clinicians and practice staff. The OMD Virtual Care Privacy and Security Training Module is open to all Ontario family physicians, specialists, nurse practitioners, nurses, office managers / executive directors, non-IT administrative staff, IT administrative staff, clinic managers, dieticians, mental health/social workers, pharmacists, and other allied health professionals. 

2. Can my staff do the training on my behalf?

No, your staff cannot do the training on your behalf. Every user must complete the training on their own. To receive Continuing Medical Education (CME) credits from the College of Family Physicians of Canada or the Royal College of Physicians and Surgeons of Canada for completing the OMD Privacy and Security Training Module and/or the OMD Virtual Care Privacy and Security Training Module, it is mandatory for physicians to complete the training themselves. Each physician user must register for an account with OntarioMD.ca using their own email address to access the online training modules. Multiple users cannot access the training module using the same email address or account. Other clinician users must register for an account on OntarioMD.ca specifically for access to the OMD Virtual Care Privacy and Security Training Module.

3. Why do I need to take privacy and security training?

Privacy and security training for clinicians is a critical obligation inherent in the accountability that Health Information Custodians have with respect to the appropriate collection, viewing, use, disclosure and safeguarding of personal health information (PHI). Educating yourself and your staff enables you to comply with regulatory frameworks. Privacy and security training is also recommended to access provincial digital health assets such as the provincial Clinical Viewers, Health Report Manager (HRM®), eNotifications, Insights4Care Dashboard, Ontario Laboratories Information System (OLIS) and any future digital health assets as they become available and may become a mandatory requirement for access in the future. 

4. What does the training cover?

The OMD Privacy and Security Training Module covers:

  • the importance of privacy and security, and your legal and professional obligations
  • PHI and ownership of medical records
  • Ontario's EHR systems and your obligations as a user of such systems
  • consent and consent directives 
  • ways to safeguard PHI 
  • developing acceptable use policies
  • system and network controls that must be in place before you access EHR systems
  • how to manage relationships with electronic service providers
  • identifying and appropriately responding to privacy breaches and security incidents

The OMD Virtual Care Privacy and Security Training Module covers:

  • technology and patient information management
  • the importance of privacy and security, and your legal and professional obligations when using virtual care tools
  • consent and privacy policies
  • protocols for virtual visits and prescriptions
  • ways to safeguard PHI for virtual encounters

5. How long does the training module take to complete? 

On average, the Privacy and Security training Module takes about 45 minutes to complete while the Virtual Care Privacy and Security Training Module takes between 25 to 30 minutes to complete. If you are unable to complete a module in one session, you can log out and log back in to resume the training from where you left off.

6. What score do I need to pass the test at the end of the training modules to receive the certificates of completion? 

To be issued a certificate of completion upon completion of the Privacy and Security Training Modules, a minimum score of 80% must be achieved for the Privacy and Security module, however, the virtual care module is unscored. The test can be taken repeatedly until a passing grade has been achieved. 

7. How often should I take the training?

OMD recommends that all Ontario physicians, nurse practitioners, nurses, office managers/executive directors, non-IT administrative staff, IT administrative staff, dieticians, mental health/social workers, pharmacists, and other allied health professionals take the training at least once a year or whenever you feel you could use a reminder of the concepts and best practices covered in the Privacy and Security and Virtual Care Training Modules. Annual training ensures that you are educated on your obligations under current legislation, as well as on the most current best practices to protect your practice against privacy breaches and security incidents and new digital health tools such as those used to provide virtual care.

8. Can family physicians claim CME credits for completing the training module?

Yes, this Self-Learning program has been certified by the College of Family Physicians of Canada and the Ontario Chapter for up to 2 Mainpro+ credits for each module.

9. I claim credit(s) from the Royal College of Physicians and Surgeons of Canada under the Maintenance of Certification Program?

Yes, these modules can be claimed for credit(s) under the Royal College Maintenance of Certification (MOC) Program as a Section 2: Personal Learning Project for 2 credits/hour for each module. To claim the credit(s), you must record the activity in your MAINPORT ePortfolio and complete at least one learning outcome.