ONE ID ensures that only health care professionals and their staff have access to a patient’s personal health information. In addition to safeguards that apply to all of our products and services, ONE ID features the following:
Registration
All registrants must be sponsored by their health care organization in order to enroll. Sponsors are responsible for identifying a registrant’s service entitlement.
We use local registration authorities, trained to handle personal registration information securely, to identify and authorize users. Our processes and systems securely transport, store and process this information.
All local registration authorities receive training on ONE ID policies, practices and their responsibilities when handling sensitive information.
Registration has different levels of identity validation or assurance depending on the requirements of the service. For instance, for handling personal health information, the minimum level of assurance is medium – meaning, users must present, in person, two pieces of valid ID, one of which must include a photo to access this service.
Our Practices
We have a policy, standards and procedures that must be followed when registering users. We conduct privacy and security assessments to ensure that the collection, storage, use and disclosure of personal identity information related to registration comply with legislative and privacy protection requirements.
User Responsibility
Users must follow strong password composition rules. Registrants set up two challenge questions that help desk staff verify a clinician’s identity over the telephone if they forget or lose their password. Challenge questions are questions to which only the registrant knows the answer, allowing their identity to be verified without divulging the password. Online verification of challenge questions is also available. Users must agree to follow our acceptable use policy.
Client Responsibility
Clients are responsible for training their users to protect privacy and security when using eHealth Ontario products.
ONE ID clients vary widely and include clinicians such as physicians, nurses and dentists. The service is used by health care providers to access secure information on public health, oral health and the Ontario drug benefit program.