Back to home
PHIPA
Ontario's law governing the privacy of personal health information.
Overview
The Personal Health Information Protection Act (PHIPA) governs how health information custodians and their agents collect, use, and disclose personal health information in Ontario. It's the provincial equivalent of what HIPAA does in the US, with its own consent, notification, and safeguard requirements.
Why it matters
Health tech and services companies operating in Ontario, or serving Ontario-based healthcare custodians, need to demonstrate PHIPA-aligned practices as part of vendor onboarding, often alongside broader Canadian privacy obligations like PIPEDA.
How Sense Six Cyber helps
- Determine PHIPA applicability and agent/custodian status
- Build privacy and security safeguards aligned to PHIPA requirements
- Draft information practices documentation and agreements
- Establish breach notification procedures specific to PHIPA
- Prepare for due diligence from Ontario healthcare customers
Ideal for
Health tech companies operating in or selling into Ontario's healthcare sector.