InfoCare Coach Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.

1. What is something that you should consider before posting work-related information on social media?
   Does this post contain confidential business information?
2. What legislation governs identifiable patient information in Alberta?
   The Health Information Act (HIA)
3. What is an example of legislation that permits us to disclose health information without written consent?
   Gunshot and Stab Wound Mandatory Disclosure Act
4. When does an information disclosure occur?
   Any time information leaves AHS/APL/RA
5. How many elements are required for a consent to disclose health information to be valid under the HIA?
   6
6. This InfoCare behaviour means that we appreciate and safeguard the value and confidentiality of AHS business information.
   Manage AHS Information
7. This InfoCare Behaviour means that we take reasonable measures to safeguard all health and personal information to meet AHS polices, procedures, standards, protocols and guidelines.
   Safeguard Information
8. This InfoCare Behaviour means that we ensure that our health, personal, and AHS business information is available to the public in a timely manner; in accordance with proper processes to obtain access.
   Provide Access
9. This InfoCare Behaviour means that we speak up about any perceived departure (accidental or intentional) from these behaviours with each other, to our leaders, and/or through other AHS mechanisms for reporting.
   Speak Up
10. The maximum fine for an individual convicted of an offence under the HIA.
    $200,000
11. Is it against the law for a patient to record an AHS/APL/RA employee?
    No, the Criminal Code of Canada only requires one person to consent to the recording.
12. This InfoCare behaviour means that we recognize that photographs, audio and video recordings may include personal and health information and are mindful of how we use these media.
    Control Multimedia
13. Free!
14. Where can you report a privacy breach?
    InfoCare insite page
15. This is one approved way of accessing your own health information.
    MyAHS Connect
16. Is Recovery Alberta a custodian (HIA) and a public body (FOIP)?
    Yes, Recovery Alberta is a custodian and a public body.
17. What is one situation when you can disclose identifiable patient information without patient consent?
    To comply with a subpoena, warrant, production or court order.
18. Information that can be shared with patient's family without written consent as long as it is not against the patient's expressed wishes.
    Presence, location, condition, diagnosis, progress & prognosis
19. My family member has asked me to look at their health records to give them a second opinion. Can I?
    No, you are not assigned to provide care.
20. Is health information permitted in SharePoint Online?
    Yes, for short-term storage only.
21. How long should you pause to make sure that you are handing a prescription to the correct patient?
    30 seconds (or as long as needed to verify that you have the correct person)
22. When is email encryption required?
    When sending identifiable information to a non-AHS-managed email account.
23. Is patient information permitted in the subject line of an email?
    No, never in the subject line
24. How often is ROL - InfoCare - On Our Best Behaviours required?
    At hire and every 3 years after
25. This InfoCare behaviour means that we collect, use and share only the personal and health information that we require to perform our job duties and responsibilities.
    Act on Need
26. This InfoCare Behaviour means that we ask questions of our leaders, seek resources, complete training and follow best practices.
    Advocate & Learn
27. What is the name of the campaign that sends out monthly fake scam emails?
    AHS Phishing Campaign
28. What team should you contact before using a new app collecting patient information?
    AHS' Privacy Impact Assessment Team
29. Should anyone other than the Legal & Privacy team communicate directly with the OIPC?
    No, Legal & Privacy communicates with the OIPC on behalf of the organization.
30. What legislation governs the collection, use and disclosure of employee records of a public body in Alberta?
    The Freedom of Information and Protection of Privacy Act (FOIP)