Disclaimer:
This website serves as a resource to assist healthcare providers in Ontario with questions or concerns regarding PHIPA compliance. The information provided herein is for general informational purposes only and is not intended to replace professional legal advice, medical guidance, or the official legislation. Users are encouraged to consult the Personal Health Information Protection Act, 2004, and seek appropriate professional counsel to address specific circumstances. Reliance on any information provided on this website is solely at the user's own risk.
About the Personal Health Information Act (PHIPA)
Protecting personal health information (PHI) is a fundamental responsibility for healthcare providers and organizations in Ontario, and compliance with the Personal Health Information Protection Act (PHIPA) is essential for maintaining both legal integrity and public trust. Enacted in 2004, PHIPA governs how health information custodians (HICs)—including hospitals, physicians, pharmacies, and other healthcare entities—collect, use, and disclose PHI. The legislation ensures a balance between safeguarding patient privacy and enabling the efficient delivery of healthcare services.
Latest Resources
Website PHIPA Compliance Guide
This guide was designed for healthcare practices and organizations that handle personal health information in Ontario. It was put together by Elevated Business Solutions in collaboration with Privacy Consultants to help explain what PHIPA requires, where most practices fall short, and how to fix common compliance gaps that are common and overlooked on websites.
Website PHIPA Compliance Self-Assessment
Welcome to the Ontario PHIPA Compliance Website Self-Assessment! In just 30 seconds, you can assess whether your website meets PHIPA compliance standards and what steps to take next if you do not. While not officially endorsed by regulatory bodies, this assessment serves as a helpful resource for healthcare practitioners seeking guidance on website security and compliance.
Where does PHI Begin? A Visual Representation and Concept Framework - PDF
Understanding how Protected Health Information (PHI) moves through your organization is the first step in securing it. Our visual flow map provides a clear, structured view of where PHI enters, how it travels, and where potential vulnerabilities may exist. Designed for healthcare practitioners, this framework helps identify weak links in your data flow, empowering you to strengthen security measures and maintain compliance with confidence. We are currently working on a visual flow to help identify security risks once PHI has been collected.
Email Marketing & PHIPA Compliance: Important Considerations
Welcome to the Ontario PHIPA Compliance Website Quiz! In just 30 seconds, you can assess whether your website meets PHIPA compliance standards and what steps to take next if you do not. While not officially endorsed by regulatory bodies, this quiz serves as a helpful resource for healthcare practitioners seeking guidance on website security and compliance.
