Patient Consent

TelePort is committed to ensuring that every patient provides meaningful, informed consent before using our platform for telehealth consultations. We recognize that consent is a fundamental right under Canadian privacy law. Our consent framework is designed to comply with BC's Personal Information Protection Act (PIPA), Ontario's Personal Health Information Protection Act (PHIPA), Alberta's PIPA, and the federal Personal Information Protection and Electronic Documents Act (PIPEDA). We also consider the consent requirements of all provincial health information statutes including Manitoba and Nova Scotia's PHIA, Saskatchewan's HIPA, New Brunswick's PHIPAA, Newfoundland and Labrador's PHIA, Quebec's Law 25, and Yukon's HIPMA.

Canadian privacy law recognizes several forms of consent. On the TelePort platform, we obtain consent as follows:

Express Consent — Before their first telehealth consultation, each patient is presented with a clear consent form that explains how their personal health information will be collected, used, and disclosed. The patient must actively indicate their agreement (e.g., by checking a box and clicking 'I Consent'). This is the primary form of consent for telehealth services.

Implied Consent — Within the circle of care, consent for the collection, use, and disclosure of personal health information necessary for providing treatment may be implied. For example, when a patient voluntarily provides health information to their provider during a consultation, consent to use that information for treatment is implied.

Consent for Electronic Communication — Patients specifically consent to receive communications (appointment reminders, follow-up messages) via email or SMS. This can be withdrawn at any time.

Withdrawal of Consent — Patients may withdraw their consent at any time by contacting their provider or our Privacy Officer. Withdrawal does not affect the lawfulness of information processed before withdrawal. Patients understand that withdrawing consent may limit their ability to receive telehealth services through the platform.

When a patient provides consent to use TelePort, they are consenting to the following:

Collection: Their name, contact information, and any health information shared during the consultation.

Use: Their information will be used solely for the purpose of providing healthcare services, scheduling appointments, and managing their care.

Storage: Their information will be stored securely on Canadian servers (Toronto, ON) for the period required by applicable law.

Video/Audio: Their video and audio will be transmitted using end-to-end encryption. TelePort cannot decrypt, record, or store the content of consultations.

Disclosure: Their information may be shared with their healthcare provider and, where required by law, with public health authorities or regulatory bodies.

Consent requirements vary by province. Our platform is designed to meet the highest standard across all jurisdictions:

British Columbia (PIPA): Express consent is required for collection, use, and disclosure of personal information. PIPA allows implied consent where information is voluntarily provided for a reasonable purpose. Patients must be informed of the purposes before consent is given.

Ontario (PHIPA): Consent may be express or implied. Within the circle of care, implied consent is generally relied upon for treatment purposes. Express consent is required for disclosures outside the circle of care. Health information custodians must document all consent decisions.

Alberta (PIPA): Express consent is required unless information is voluntarily provided. Albertans have strong rights regarding collection and use of their personal information.

Quebec (Law 25): Requires express consent for the collection and use of personal information. Consent must be clear, free, and informed. Quebec imposes some of the strictest consent requirements in Canada.

All Other Provinces: We follow the principles set out in PIPEDA, which requires meaningful consent — organizations must clearly explain the purposes for collection, use, and disclosure in language that is understandable.

TelePort maintains a permanent record of each patient's consent. Our consent documentation includes:

- The patient's full name and contact information

- The date and time consent was given

- The specific purposes for which consent was provided

- The version of the consent form presented to the patient

- Whether consent was express or implied

- Any restrictions placed on consent by the patient

- Records of any consent withdrawals or modifications

Consent records are stored securely in our Canadian database and are accessible to the patient's healthcare provider. Patients may request a copy of their consent documentation at any time.

Under Canadian law, individuals must have the capacity to consent to the collection, use, and disclosure of their personal health information. Capacity is determined on a case-by-case basis:

Minors: In BC, the Infants Act allows minors to consent to healthcare if the healthcare provider determines the minor is capable. In Ontario, PHIPA allows a person who is capable of making a decision regarding their own health to consent. Other provinces have varying age-of-consent rules. Healthcare providers using TelePort are responsible for assessing a patient's capacity to consent.

Substitute Decision-Makers (SDMs): Where a patient lacks capacity, consent may be obtained from an authorized substitute decision-maker as defined by provincial legislation. The SDM's consent must be documented the same as the patient's would be.

Emergency Situations: Where immediate healthcare is required and consent cannot be obtained, PHIPA and other provincial statutes allow for the collection, use, and disclosure of personal health information without consent to the extent necessary to provide emergency care.

If you have questions about our consent practices or wish to exercise your rights regarding consent, please contact:

Privacy Officer: privacy@totus.ca

Security: security@totus.ca

General Inquiries: support@totus.ca

We aim to respond to all consent-related inquiries within 2 business days.