The Centre for Health Information has as part of its mandate a responsibility to ensure the Health Information Network (HIN) protects the confidentiality and security of personal information that is collected, used, disclosed, stored, and disposed of by the Centre. Personal information held in the HIN is collected by health boards, health professionals, and other provincial organizations; however, it may be disclosed to other health professionals, health boards, and provincial organizations for patient and resident care, client services, administrative purposes, and research.

The Centre for Health Information's Board of Management has approved a set of rules to govern the personal health information held on the HIN. The Privacy, Confidentiality and Access Principles and Guidelines for the Health Information Network were prepared with input from many stakeholders in Newfoundland and Labrador's health sector and is a document that will help organizations collecting personal health information. These Principles and Guidelines also form the basis for all Privacy Impact Assessments of the information systems that are part of the HIN.