TELUSHealth510WGeorgiaStVancouver, BCCanadaV6B0M3telus.com/health October 31, 2024 Hon. JohnM. McNairSenateof CanadaOttawa, OntarioCanadaK1A0A4 Dear Senator McNair, Weappreciateyour thoughtful considerationof Bill C-26anditspotentialimplicationsfor Personal HealthInformation(PHI) protectioninCanada. AsTELUSHealth, wewelcometheopportunitytoaddressyour concernsandhighlight therobust privacymeasuresalreadyinplacewithinour organizationandacrossCanada. Canadahaslongbeenat theforefront of protectingpersonal information,includingPHI.

WhileC-26islikelynot theappropriatelegislativetool toregulatetheflowof PHI, weremainopentoworkingwithHealthCanadaandotherministriestobuildanyadditional safeguards, balancedwiththeneedtoensurehigh-qualityhealthdatamobility, accessibility, innovationandsecuritytoCanadians. Our current legislativeframework, includingthePersonal InformationProtectionandElectronicDocumentsAct (PIPEDA) andprovincial healthinformationprotectionacts, providesastrongfoundationfor safeguardingsensitivehealthdata.

At TELUSHealth, wehavemadeprivacyprotectionacornerstoneof ouroperations, andarecommittedtostandardsthat exceedtheregulatoryrequirementsinCanada. Weareglobal leadersintheadherenceto(andpromotionof) "PrivacybyDesign," whichmeansthat privacyconsiderationsareintegratedintoour productsandservicesfromtheoutset, not asanafterthought. Thisapproachensuresthat privacyprotectionsareembeddedinthearchitectureof our healthinformationsystemsandbusinesspractices.

Somekeyaspectsof our commitment toprivacyinclude:● Rigorousdataencryptionandsecurityprotocolstoprotect PHI fromunauthorizedaccess.● Regular, enhancedprivacyimpact assessmentstoidentifyandmitigatepotential risks, includingethical risk.● Strict accesscontrolsandauthenticationmeasuresfor our healthinformationsystems.● Ongoingemployeetrainingonprivacybest practicesandtheimportanceof PHI protection.● Transparent privacypoliciesthat clearlycommunicatehowwecollect,use, andprotect personal healthinformation.

WealsoworkcloselywithprivacycommissionersandhealthauthoritiesacrossCanadatoensureour practicesnot onlymeet but oftenexceedregulatoryrequirements. Our dedicationtoprivacyhasbeenrecognizedthroughvariouscertificationsandaudits, demonstratingour compliancewithnational andinternational privacystandards. Weunderstandtheimportanceof continuallyevolvingour privacypracticestoaddressnewchallengesandtechnologies, andwebelieveit'scrucial torecognizethestrongfoundationalreadyinplaceandtobuilduponitthoughtfully.

Assuch, wecontinuetoengagewithCanadiangovernmentsandagencies, standardsassociations, industryleadersandstakeholder groupstoensurethat TELUSHealthismeetingtheexpectationsof Canadians, andtosupport theevolutionof regulatoryframeworkstostrengthentheentiresector. TELUSHealthremainscommittedtobeingaleader inprivacyprotectionwithinthehealthcaresector. Wewouldbepleasedtoprovidefurther informationordiscussour privacypracticesinmoredetail at your convenience. Thankyoufor your attentiontothiscritical matter.

Welookforwardtocontinuingtoworktogether toensurethehighest standardsof privacyprotectionforCanadians' personal healthinformation. Sincerely, TomChervinskyDirector, Government Relations, TELUSHealth4166607263 | tom.chervisnky@telus.com 2