Medical Records Custody Agreement Template for Canada

A Medical Records Custody Agreement is a legally binding document that governs the transfer and ongoing management of patient medical records when custody changes hands in Canada's healthcare system. This agreement ensures that sensitive personal health information remains protected and accessible according to federal and provincial privacy laws while maintaining the highest standards of patient care continuity.

When do you need this document?

You need a Medical Records Custody Agreement when a physician retires and transfers patient files to another healthcare provider, when a medical practice closes and records must be transferred to a storage facility, or when relocating your practice to a different jurisdiction. This document is also essential when engaging third-party medical records management companies, during hospital mergers or acquisitions, and when establishing partnerships between healthcare institutions. The agreement becomes particularly important when transitioning from paper-based to electronic health records systems, ensuring proper chain of custody and legal compliance throughout the process.

Key legal considerations

The agreement must clearly define the scope of records being transferred, including both active and inactive patient files, diagnostic images, laboratory results, and any electronic health information. Security protocols are crucial, requiring specific measures for physical storage, digital encryption, access controls, and staff training requirements. You must establish clear procedures for patient access requests, including response timeframes and fee structures. The document should address liability allocation between transferring and receiving parties, particularly regarding data breaches or unauthorized access. Retention schedules must comply with professional college requirements, typically ranging from 10 years for adult records to longer periods for pediatric files. The agreement should also specify audit rights, allowing both parties to verify compliance with agreed-upon standards.

Legal requirements in Canada

Under PIPEDA, the federal privacy law governing private sector organizations, you must obtain appropriate consent for record transfers and implement reasonable security safeguards. Provincial health information acts, such as Ontario's PHIPA or British Columbia's Freedom of Information and Protection of Privacy Act, impose additional obligations specific to health information. These laws require written agreements for any disclosure of personal health information, mandate specific security measures, and establish strict access controls. The receiving custodian must be authorized under provincial medical acts and meet licensing requirements where applicable. Professional regulatory bodies, including provincial Colleges of Physicians and Surgeons, often have specific guidelines for record custody transfers that must be incorporated into your agreement. You must also comply with the Canada Health Act's principles regarding accessibility and continuity of care, ensuring patients can access their records when needed for ongoing treatment.