VaccineConnect's Immunization Program Management Module (May 2021)

Description of the VaccineConnect platform

Part of Public Health Agency of Canada's (PHAC) response to COVID-19 is making a technology solution available to support federal, provincial and territorial needs regarding the administration of COVID-19 vaccines. This solution is VaccineConnect. This platform will support vaccine management logistics and rollout requirements and services.

The VaccineConnect encompasses 3 modules:

1. intelligent supply chain, which supports:
• order processing
• situational monitoring
• supply chain visibility
• functionality for inventory tracking and logistics
2. immunization information system, which:
   • gathers information from all available public health entities (and other sources)
   • provides reporting and analytics on vaccine immunization coverage at the population level
3. immunization program management, which is end-to-end management of the process to administer and manage the immunization execution for specific points of administration

PHAC will not collect or have access to personal information retained in the Immunization Program Management Module. However, federal institutions may use the module to collect personal information to administer their COVID-19 immunization programs.

Why a privacy compliance evaluation was completed

In accordance with the Treasury Board of Canada Secretariat's Interim Directive on Privacy Impact Assessment, a privacy compliance evaluation was completed in place of a full privacy impact assessment. As a new program and urgent COVID-19-related initiative, the Immunization Program Management Module meets the criteria for a privacy compliance evaluation.

More information

The privacy compliance evaluation examined the personal information handling practices of the Immunization Program Management Module. The privacy compliance evaluation identified compliance issues related to safeguarding the platform.

The Privacy Management Division and PHAC have implemented measures to address the identified compliance issues.