55.7 (1) Despite the contents of a consent directive, a health information custodian may disclose personal health information that is subject to the directive by means of the electronic health record if the custodian that is seeking to collect the information obtains the express consent of the individual to whom the information relates. 2016, c. 6, Sched. 1, s. 1 (17). Same, protection of individual (2) Despite the contents of a consent directive, a health information custodian may disclose personal health information that is subject to the directive by means of the electronic health record if, (a)  the custodian that is seeking to collect the personal health information believes, on reasonable grounds, that the collection is necessary for the purpose of eliminating or reducing a significant risk of serious bodily harm to the individual to whom the information relates; and (b)  it is not reasonably possible for the health information custodian that is seeking to collect the personal health information to obtain the individual’s consent in a timely manner. 2016, c. 6, Sched. 1, s. 1 (17). Same, protection of others (3) Despite the contents of a consent directive, a health information custodian may disclose personal health information that is subject to the directive by means of the electronic health record, if the health information custodian that is seeking to collect the personal health information believes on reasonable grounds that the collection is necessary for the purpose of eliminating or reducing a significant risk of serious bodily harm to a person other than the individual to whom the information relates or to a group of persons. 2016, c. 6, Sched. 1, s. 1 (17). Use or disclosure (4) Despite any other provision in this Act or its regulations, a health information custodian that collects personal health information under subsection (1), (2) or (3) may only use or disclose the information for the purpose for which the information was collected. 2016, c. 6, Sched. 1, s. 1 (17). Audit, etc. (5) The prescribed organization shall audit and monitor every instance where personal health information is collected in the circumstances described in subsection (1), (2) or (3). 2016, c. 6, Sched. 1, s. 1 (17). Notice re consent overrides (6) Where personal health information has been collected in the circumstances described in subsection (1), (2) or (3), the prescribed organization shall immediately provide written notice, in accordance with the requirements in the regulations, to the health information custodian that collected the personal health information. 2016, c. 6, Sched. 1, s. 1 (17). Same (7) Upon receiving notice under subsection (6), the custodian that collected the personal health information in the circumstances described in subsection (1), (2) or (3) shall, at the first reasonable opportunity, (a)  notify the individual to whom the information relates, in accordance with the requirements in the regulations; and (b)  if the personal health information has been collected in the circumstances described in subsection (3), give written notice to the Commissioner, in accordance with the regulations, in a manner that does not provide identifying information about the individual to whom the information relates or the person or group of persons at significant risk of serious bodily harm. 2016, c. 6, Sched. 1, s. 1 (17). No identifying information (8) Where personal health information has been collected in the circumstances described in subsection (3), in notifying the individual to whom the information relates, the custodian shall not provide identifying information about the person or group of persons at significant risk of serious bodily harm. 2016, c. 6, Sched. 1, s. 1 (17). Section Amendments with date in force (d/m/y) 2016, c. 6, Sched. 1, s. 1 (17) - 01/10/2020