 Its Privacy and Security Framework outlines how the organization approaches data governance, and maintains privacy and security protection.CIHI enacts numerous policies and practices to prohibit personal identification, one key policy being strict levels of data suppression.In the past, some news media outlets have raised concerns about the safety of personal health records in large medical/science databases like CIHI.