Keep health information controlled during a move or sale
The B.C. privacy commissioner's guidance explains responsibilities for private organizations under the Personal Information Protection Act. Determine the roles of the practice, company and software supplier. A change of business owner does not justify unrestricted sharing of patient information.
Plan how authorized staff access records before and after the move or transaction. Remove obsolete access when a worker leaves. Confirm who handles patient requests, security incidents and continuity of records. Ask advisers to assess the particular transfer rather than treating the business sale agreement as the entire privacy analysis.
Test the new office with fictional information. Check that displays, printers and conversations remain private. Confirm the intended recipient for outside reports after the address changes. A delayed result may still arrive through an old channel. Assign responsibility for those messages so the administrative move does not interrupt the doctor's review of unfinished clinical work. Keep the old contact route under authorized supervision for the agreed transition. Tell external senders how to update their details. A forwarding arrangement should preserve confidentiality and a record of who received the material, rather than sending it into an unattended inbox.