37 (1) A health information custodian may use personal health information about an individual, (a)  for the purpose for which the information was collected or created and for all the functions reasonably necessary for carrying out that purpose, but not if the information was collected with the consent of the individual or under clause 36 (1) (b) and the individual expressly instructs otherwise; (b)  for a purpose for which this Act, another Act or an Act of Canada permits or requires a person to disclose it to the custodian; (c)  for planning or delivering programs or services that the custodian provides or that the custodian funds in whole or in part, allocating resources to any of them, evaluating or monitoring any of them or detecting, monitoring or preventing fraud or any unauthorized receipt of services or benefits related to any of them; (d)  for the purpose of risk management, error management or for the purpose of activities to improve or maintain the quality of care or to improve or maintain the quality of any related programs or services of the custodian; (e)  for educating agents to provide health care; (f)  in a manner consistent with Part II, for the purpose of disposing of the information or modifying the information in order to conceal the identity of the individual; (g)  for the purpose of seeking the individual’s consent, or the consent of the individual’s substitute decision-maker, when the personal health information used by the custodian for this purpose is limited to the name and contact information of the individual and the name and contact information of the substitute decision-maker, where applicable; (h)  for the purpose of a proceeding or contemplated proceeding in which the custodian or the agent or former agent of the custodian is, or is expected to be, a party or witness, if the information relates to or is a matter in issue in the proceeding or contemplated proceeding; (i)  for the purpose of obtaining payment or processing, monitoring, verifying or reimbursing claims for payment for the provision of health care or related goods and services; (j)  for research conducted by the custodian, subject to subsection (3), unless another clause of this subsection applies; or (k)  subject to the requirements and restrictions, if any, that are prescribed, if permitted or required by law or by a treaty, agreement or arrangement made under an Act or an Act of Canada.  2004, c. 3, Sched. A, s. 37 (1); 2007, c. 10, Sched. H, s. 12. Agents (2) If subsection (1) authorizes a health information custodian to use personal health information for a purpose, the custodian may provide the information to an agent of the custodian who may use it for that purpose on behalf of the custodian.  2004, c. 3, Sched. A, s. 37 (2). Research (3) Under clause (1) (j), a health information custodian may use personal health information about an individual only if the custodian prepares a research plan and has a research ethics board approve it and for that purpose subsections 44 (2) to (4) and clauses 44 (6) (a) to (f) apply to the use as if it were a disclosure.  2004, c. 3, Sched. A, s. 37 (3). Mixed uses (4) If a research plan mentioned in subsection (3) proposes that a health information custodian that is an institution within the meaning of the Freedom of Information and Protection of Privacy Act or the Municipal Freedom of Information and Protection of Privacy Act or that is acting as part of such an institution use personal health information, together with personal information within the meaning of those two Acts that is not personal health information, those two Acts do not apply to the use and this section applies to the use.  2004, c. 3, Sched. A, s. 37 (4). Section Amendments with date in force (d/m/y) 2007, c. 10, Sched. H, s. 12 - 04/06/2007 Disclosure