HIPA identifies several rules that trustees must follow for the collection, use and disclosure of your personal health information. Among others some of these rules include:

• The primary purpose for collecting personal health information must be for the benefit of the individual.
• Trustees should only collect, use or disclose personal health information that they need to know to provide you with a service.
• Trustees must also have practices in place that will protect the safekeeping of personal health information.