These are "uses" of data but they don't seem to in any way involve making the data public - I think if you published deidentified data to a public forum of any kind under the auspice of "educating agents" you'd get a very big fine! (You need example charts to educate certain healthcare workers, using real ones with the name blanked out is fine - publishing that on the Internet probably going to get you a violation.)
These are just standard legislative exceptions saying "you can use the data you have to run the operation without fear of getting in trouble" not publication rules.
ETA: You obviously know about the legislation, if you know of instances of orgs using these rules to publish data.. blow that damn whistle!
There is no protection against the use and disclosure of deidentified health information as regulated by PHIPA or the IPC of Ontario. The IPC has clarified through guidance that deid data is not protected however the act of deid constitutes “use” and therefore must be through an approved means. These scenarios are approved exceptions to patient consent for use.
Some institutions and systems have internal policies that add exceed PHIPA. For example ConnectingOntario which is the closest thing to a provincial EMR only allows access for direct patient care (i.e. not even REB approved research). Some academic hospitals also add approval requirements for the disclosure of deid data to other institutions or on credentialed access repositories.
I started my medical career in Ontario and this is done all the time for things like publishing case reports, online (or non-institutional) lectures and case banks (e.g. on the publicly accessible Radiopaedia).
Not sure what you mean by whistleblowing, this is completely legal in both Ontario and the US and in my opinion entirely ethical (for the most part).
I’m not saying it’s a good idea or ethical to use these exceptions to consent for posting marketing materials on TikTok. The CPSO which regulates physicians may still find the action unprofessional/unethical for reasons not related to violating the law, but their standard is different (“behavior unbecoming of the profession” and “behavior that degrades patient trust in the practice of physicians”).
On a side note I think I’m getting old but what does “ETA” mean (other than estimated time to arrival)?
These are just standard legislative exceptions saying "you can use the data you have to run the operation without fear of getting in trouble" not publication rules.
ETA: You obviously know about the legislation, if you know of instances of orgs using these rules to publish data.. blow that damn whistle!