Canadian Dental Care Plan - Privacy

Official title: Privacy protection in the Canadian Dental Care Plan

On this page

Privacy management

To deliver the Canadian Dental Care Plan (CDCP), Health Canada works with Government of Canada partners and Sun Life Financial Inc. (Sun Life), a contracted third-party administrator.

Government of Canada institutions must protect your personal information and uphold your privacy rights as required by the Privacy Act and related policies.

Health Canada works with the following Government of Canada partners to deliver the CDCP:

Sun Life, as a private-sector partner, complies with the Personal Information Protection and Electronic Documents Act. As the contracted third-party administrator for the CDCP, Sun Life must also comply with the Privacy Act and related policies.

Privacy notice

ESDC/Service Canada provides CDCP member applicants with a privacy notice, and Sun Life provides oral health providers agreeing to participate in the CDCP with a privacy notice. The privacy notice that follows does not replace other CDCP privacy notices. It is an overview of Health Canada and Sun Life's handling of personal information to administer the CDCP. It also tells you about your privacy rights.

Collection and use of personal information

Health Canada and Sun Life collect your personal information under the authority of the Government of Canada's Dental Care Measures Act, the Department of Health Act, and the Income Tax Act. Your personal information is protected by the provisions of the Privacy Act.

Health Canada and Sun Life collect your personal information at different points, and through different ways, for activities that relate directly to the CDCP. This can include:

Disclosure of personal information

Health Canada and Sun Life securely share personal information that is necessary for the administration of the CDCP. In specific and limited cases, Health Canada or Sun Life may lawfully disclose personal information to regulatory bodies or law enforcement agencies, such as in cases of suspected or confirmed fraud.

In addition, Sun Life may share limited personal information with CDCP subcontractors for purposes such as:

Health Canada may also share your personal information with:

For CDCP members, when enrolling in the CDCP, you also provide consent to your oral health providers to disclose all personal information, as authorized by the Department of Health Act and the Dental Care Measures Act, that may be considered useful by Sun Life in the context of program administration, conducting claims verifications, managing claims, and patient/client safety. This information may include, but is not limited to, details on the services provided, patient clinical data, payments, and X-rays.

Voluntary participation

Your participation in the CDCP is voluntary. However, if you do not provide the necessary personal information, you cannot participate in the CDCP (or specific CDCP activities).

Your rights and how to contact us

You have the right to access, and where applicable, to correct your personal information. Health Canada describes CDCP personal information under its control in the Canadian Dental Care Plan Personal Information Bank (HC PPU 440). Visit Info Source: Source of Federal Government and Employee Information Health Canada for more information.

For privacy-related questions:

If have you been unable to resolve a privacy issue with us, you may file a formal complaint with the Privacy Commissioner of Canada about how we have handled your personal information. Visit Report a concern for more information.

Visit the CDCP Terms and conditions of use and privacy notice statement, specifically under the sections Apply and Privacy Notice Statement, for privacy notice provided to applicants.

Visit the CDCP Claims Processing and Payment Terms, specifically under the sections Privacy and Information Sharing Statement, for privacy notice provided to oral health providers participating in the CDCP.

Additional privacy information

This section provides links to additional Government of Canada privacy information related to the CDCP.

Personal information banks

Government of Canada institutions describe personal information under their control, and that they use to administer the CDCP, in personal information bank (PIB) descriptions.

Privacy impact assessment summaries

Health Canada and its Government of Canada partners publish summaries of completed privacy impact assessments (PIAs). These PIAs help identify, assess and mitigate privacy risks related to CDCP activities.

Information-sharing arrangements and disclosure summaries

Government of Canada institutions publish information sharing-arrangements/agreements and disclosure summaries for personal information under their control.

Glossary

Disclosure (of personal information)

The release of personal information by any method (for example, transmission, provision of a copy, examination of a record) to any body or person.

Reference: Policy on Privacy Protection

Information-sharing arrangement

A written record of understanding that outlines the terms and conditions under which personal information is disclosed between parties. An information-sharing arrangement is usually employed to facilitate the disclosure of personal information between and within federal institutions. An information-sharing arrangement is not legally binding.

Reference: Directive on Privacy Practices

Personal Information Bank (PIB)

A description of personal information that is organized or intended to be retrieved by a person's name or by an identifying number, symbol or other particular assigned only to that person. The personal information described in the personal information bank has been used, is being used or is available for an administrative purpose and is under the control of a government institution.

Reference: Policy on Privacy Protection

Privacy Impact Assessment (PIA)

A process prescribed in policy for identifying, assessing and mitigating privacy risks. Government institutions are to develop and maintain privacy impact assessments for all new or modified programs and activities that involve the use of personal information for an administrative purpose.

Reference: Policy on Privacy Protection

Privacy notice

A verbal or written notice informing an individual of the purpose of collecting their personal information as well as the government institution's legal authority for the collection. The notice, which must reference the personal information bank described in Info Source, also informs the individual of how their personal information will be used and disclosed, their right to access and request the correction of the personal information, any consequences of refusing to provide the information requested, and their right to file a complaint to the Privacy Commissioner of Canada.

Reference: Directive on Privacy Practices

Page details

Date modified: