Maintaining Valid Privacy Impact Assessments
February 9, 2009
Please read the following information carefully before
allowing any changes or upgrades to your VCUR 2006 Physician Office
System.
One of the benefits of using a VCUR compliant product in your
clinic is a streamlined privacy impact assessment (PIA) process.
The Office of the Information and Privacy Commissioner and POSP
agreed on this streamlined process for use only with physician
office systems that meet the VCUR requirements.
This means that the validity of your current PIA depends on
continued conformance of your physician office system to VCUR
2006.
Any changes that may affect the VCUR 2006 conformance
status of your system may trigger a requirement for you to develop
and submit a revised PIA.
POSP recognizes that physician office systems do not remain
static after achieving conformance, but there is a process that
vendors must follow to maintain VCUR 2006 conformance if they make
modifications to their products.
We advise you take the following steps to ensure that you
continue to benefit from the streamlined PIA process and other
advantages of maintaining your system's VCUR 2006 status.
Before agreeing to any changes or upgrades to the physician
office system currently operating in your clinic (and/or the
associated contract or purchase orders) you must:
- Consult with POSP regarding the VCUR status of the physician
office system.
- Submit any changes to the contract or purchase orders for
review to POSP.
POSP is also reminding the vendors about this process. If you
have any questions, please consult your change management advisor.
If you don't know who your change management advisor is, call POSP
toll-free at 1.866.817.3875 or email.