Protecting the privacy of personal information in employee benefit plans

The United States is not the only country dealing with privacy of health information. In the absence of clear legislative direction, this paper focuses on the common privacy principles that underlie Canadian privacy legislation and recommends a plan of action. The objective is to give plan administrators and trustees sufficient transition time to develop and implement the appropriate privacy strategies, thereby minimizing both the potential burden of compliance and the potential risks of noncompliance.