Across Canada, there is a growing recognition that data is not just information—it represents people, communities, histories, and rights. For First Nations communities, this understanding is reflected in the principles of OCAP® (Ownership, Control, Access, and Possession), developed by the First Nations Information Governance Centre (FNIGC).
At CarePlan AI, we recognize that respecting OCAP principles is not simply about compliance. It is about trust, partnership, and acknowledging the rights of Indigenous communities to govern their own information.
As a Canadian company working in health and community care, we are committed to aligning our technology, practices, and partnerships with these principles.
Understanding OCAP®
OCAP represents four foundational principles that guide how First Nations data should be handled:
- Ownership: First Nations communities collectively own their information.
- Control: Communities have the right to control how their data is collected, used, and shared.
- Access: Communities must be able to access their own data regardless of where it is stored.
- Possession: Physical custody of data should support community ownership and governance.
These principles reflect Indigenous data sovereignty—the right of Indigenous Peoples to govern the collection, ownership, and application of data about their communities.
Why OCAP Matters in Healthcare Technology
Digital health systems increasingly manage sensitive personal and community information. When Indigenous individuals or communities are involved, there is a responsibility to ensure that technology does not undermine self-determination.
Historically, many systems were built without Indigenous governance in mind. Today, organizations are working to correct this by prioritizing:
- Ethical data stewardship
- Community governance
- Transparency and accountability
- Respect for Indigenous rights
Technology vendors play an important role in enabling, not limiting, these goals.
Our Approach to Supporting OCAP Principles
While OCAP certification or authority rests with First Nations communities themselves, we strive to design our platform and operations in ways that support organizations seeking to align with OCAP principles.
Our approach includes:
1. Data Ownership and Governance Flexibility
We believe organizations, and the communities they serve, should retain ownership of their data.
Our platform is designed so that:
- Clients maintain control over their data structures and usage
- Data is not repurposed or shared without authorization
- Governance frameworks can be adapted to community requirements
2. Control Through Configurable Systems
Every community has different governance needs.
We prioritize configurability so organizations can:
- Define access controls and permissions
- Establish workflows aligned with community policies
- Manage consent and data sharing practices
- Support culturally appropriate processes
This flexibility allows communities and organizations to implement their own governance models within the technology.
3. Transparent Access to Data
Access is a core principle of OCAP.
We support this by ensuring:
- Organizations can export and retrieve their data at any time
- No vendor lock-in barriers prevent access
- Reporting and analytics remain under client control
- Data portability is maintained
Our goal is to ensure that technology never becomes a barrier between communities and their information.
4. Secure and Responsible Data Stewardship
Possession involves both custody and trust.
We implement modern security practices to protect data while supporting governance needs, including:
- Secure cloud infrastructure
- Encryption in transit and at rest
- Role-based access controls
- Audit logging and monitoring
When required, we work with organizations to explore hosting or data residency options aligned with community preferences.
Partnership, Not Assumptions
Respecting OCAP principles requires collaboration.
We do not assume what is appropriate for any Indigenous community. Instead, we aim to:
- Listen first
- Adapt technology to community direction
- Support governance decisions made by communities and organizations
- Engage respectfully with Indigenous partners when involved in projects
True alignment comes through relationships, not just policies.
Continuous Learning and Improvement
We recognize that supporting Indigenous data sovereignty is an ongoing journey.
We are committed to:
- Learning from Indigenous leaders and organizations
- Improving our practices as standards evolve
- Remaining transparent about our approach
- Supporting reconciliation through responsible technology development
Our Commitment
At CarePlan AI, we believe technology should empower communities, not control them.
Respecting OCAP principles is part of our broader commitment to ethical innovation, trust, and partnership in healthcare and community services across Canada.
We will continue striving to ensure that organizations and communities using our platform have the tools, control, and confidence they need to govern their own data.
Disclaimer: OCAP® is a registered trademark of the First Nations Information Governance Centre (FNIGC). CarePlan AI does not claim OCAP certification. We aim to support organizations in aligning with OCAP principles where appropriate.
If you would like to discuss Indigenous data governance considerations for your organization or project, we welcome the conversation.
