#PHIPA
LightNews LightNews
vmcntosh.bsky.social
PIPEDA : Private sector privacy law. Is overturned when other “substantially similar” laws are in place.

PIPA(NS), PIPA (NFLD), PHIPA (ON), HIA (AB), HIA (PEI) et al. = substantially similar legislation.
December 9, 2025 at 2:06 AM
vmcntosh.bsky.social
Ontario only, and knowing what I know about some of the major players there, for their sake they’d better be putting that money towards security & PHIPA compliance.
September 30, 2025 at 4:04 PM
getnews-me.bsky.social
Agentic‑AI Healthcare is a prototype that lets patients converse in English, French or Arabic while encrypting data with AES‑GCM and enforcing access controls, meeting HIPAA, PIPEDA and PHIPA standards. https://getnews.me/agentic-ai-healthcare-multilingual-privacy-first-framework/ #ai #privacy
Agentic-AI Healthcare: Multilingual, Privacy‑First Framework
October 6, 2025 at 4:07 AM
thewittykitty.bsky.social
@spaikin.bsky.social Canadians ought to understand the privacy laws we have here, FIPPA, MFIPPA, PHIPA, PIPEDA, etc. & how it protects Canadians.
We need to make sure something like this doesn't happen here.
normeisen.bsky.social Norm Eisen @normeisen.bsky.social · Feb 18
If you’re not confirmed by the Senate then you have no business meddling in the lives of MILLIONS of Americans

We are suing DOGE for violating the constitution & illegally seizing power

I’ll discuss tonight @ 8PM ET on @insidewithpsaki.msnbc.com 👇
statedemocracydefenders.org/fund/new-law...
February 18, 2025 at 1:37 AM
ipcontario.bsky.social
AMPs stands for administrative monetary penalties and are one of the options in the IPC’s regulatory toolkit for ensuring compliance with PHIPA. Learn about our measured approach that addresses privacy violations while encouraging accountability. youtu.be/khbKwsfOSj4?...
IPC FYI - A Guide to AMPs
YouTube video by Information and Privacy Commissioner of Ontario
youtu.be
August 20, 2025 at 5:38 PM
rtbrasil.bsky.social
Ferroviária russa lança viagens turísticas de trem para a Coreia do Norte

Entre as atrações disponíveis para os turistas estão passeios a pé pela Ilha de Phipa, aulas de culinária tradicional, apresentações de dança e visitas a parques temáticos locais.

Detalhes: s.rtbrasil.com/bw9
July 11, 2025 at 11:45 AM
goose.ski
should just amend PHIPA to require that protected data be stored in canada
Canadians' health data at risk of being handed over to U.S. authorities, experts warn | CBC News
Canadians' electronic health records need more protections to prevent foreign entities from accessing patient data, according to commentary in the Canadian Medical Association Journal.
www.cbc.ca
July 31, 2025 at 5:20 PM
ipcontario.bsky.social
Wondering who can see your health information and what control you have over it? Ontario’s health privacy law, PHIPA, gives you rights over how your personal health information is collected, used, and shared.

Explore what PHIPA means for you: ow.ly/4Tv450VYMKh
May 26, 2025 at 5:31 PM
roryj.bsky.social
Ontario has the Occupational Health and Safety Act (OHSA) and the Personal Health Information Protection Act (PHIPA) which makes them sound like this compared to their more famous US cousins
February 4, 2025 at 2:44 AM
aliveinmuskoka.bsky.social
Ontario’s Privacy Commissioner should review these terms.

“The Personal Health Information Protection Act (PHIPA), governs the collection, use and disclosure of personal health information within the health sector”

@IPCinfoprivacy

apple.news/Ap8jlFIyUTgS...
A medical records firm just changed its user agreement. Here’s how Canadian patients might be impacted — CTV News
Patients who use the medical records software MyChart could lose their right to launch or join class actions because of changes made by its parent company.
apple.news
September 27, 2025 at 7:57 PM
ipcontario.bsky.social
Wondering who can see your health information and what control you have over it? Ontario’s health privacy law, PHIPA, gives you rights over how your personal health information is collected, used, and shared.

Learn how to protect your health privacy: https://ow.ly/XtIV50XFHj3
December 8, 2025 at 2:36 PM
ipcontario.bsky.social
Can health care providers share patient information with each other? Under PHIPA, they can. In many cases, consent can be implied when sharing information for direct care within the "circle of care." But there are limits.
May 28, 2025 at 5:34 PM
hey-nunya-business.bsky.social
2/2

and every other damn thing too. Plus, releasing a previously agreed-upon level of PHI with informed consent via a written waiver has been standard practice forever—and is literally how the referral process works. While PHIPA (Ontario) and HIPPA (US) do have their differences, they're not that
December 3, 2025 at 4:38 PM
ipcontario.bsky.social
Navigating health information privacy can be confusing, but we're here to help! The Personal Health Information Protection Act (PHIPA) safeguards your health data, regulating how it’s collected, used, and shared.

Learn more about your rights today. ow.ly/Pxby50Ww6LF
July 30, 2025 at 5:28 PM
christyceeck.bsky.social
Hopefully that information is protected by PHIPA, but I wouldn't feel great about it if it was my information.
November 13, 2025 at 4:38 PM
ipcontario.bsky.social
As the oversight body for PHIPA, we're here to support health information custodians every step of the way. Our poster and brochure simplify complex legal terminology, ensuring clarity on rights and responsibilities. Explore more: ow.ly/quu250VISSs
May 2, 2025 at 5:29 PM
bottlethecrazy.bsky.social
#HIPPA, #PHIPA & Social: Keeping a Pulse on the Rules of Patient EngagementThanks @Sunnybrook & @UColoradoHealth!

bit.ly/1HrqIEU
Social media for healthcare: How to keep patients engaged in the digital age
Treating your audience with care counts on social, too. Here's what you need to know about social media and healthcare organizations.
t.co
November 28, 2024 at 3:51 PM
shane555.bsky.social
The OIPC BC & ON have found concerns the public should have been made aware of right away IMO on LifeLabs breach.

It’s bad

New laws needed and 1 national privacy standard @markhollandlib.bsky.social

#BCHealth #SaskHealth #ONHealth #CDNHealth
Picture of report from BC & ONT privacy commissioners Page 15 Highlighted: “1. The webservers were susceptible to compromise due to known and publicized critical vulnerabilities. The attackers were able to initially breach and gain a foothold into LifeLabs' network by exploiting a set of vulnerabilities in the Telerik Ul for ASP.NET AJAX web application framework that LifeLabs used in its online appointment booking system (System D). The set of Telerik vulnerabilities-CVE-2017-9248, CVE-2017-11317 and CVE-2017-11357—were publicly disclosed in 2017. Each was given a base score of 9.8 (out of 10.0) on the Common Vulnerability Scoring System (CVSS) in the National Vulnerability Database maintained by the U.S. National Institute of Standards and Technology (NIST).4 A CVSS score of 9.8 indicates a critical vulnerability, with high impact and relative ease of exploitation. In May and June of 2019, respectively, the Australian Cyber Security Centre and Canadian Centre for Cyber Security issued public alerts about the vulnerabilities, notifying IT professionals of their active exploitation by threat actors. " In particular, the Australian advisory provided that, "The tools to exploit this vulnerability have been publicly published and require only basic skills or knowledge to use successfully."” Highlighted: “We would expect an organization such as LifeLabs to subscribe to these targeted alerts or at least be aware of current trends. Yet, in the present case, LifeLabs was not.” Picture of report from BC & ONT privacy commissioners Page 16 Highlighted “2. Patch management for the compromised webservers was inadequate. LifeLabs received two email security alerts from Telerik…” “LifeLabs responded to the first security alert and installed the recommended security patch on the webservers for System D on August 13, 2017. However, LifeLabs did not respond to the second security alert, as it was not aware of the alert's existence despite having received it.” Picture of report from BC & ONT privacy commissioners Page 24 Highlighted: “The ON IPC finds that LifeLabs did not have in place information practices that comply with the requirements of PHIPA, contrary to sections 10(1) and 10(2) of PHIPA. The BC OIPC finds that LifeLabs did not have formal policies or practices in place to comply with their obligations under PIPA, contrary to section 5(a) of PIPA. As such, LifeLabs is ordered to put in place comprehensive written information practices and policies that are in force and that set out safeguards that LifeLabs has implemented with respect to information technology security in order to comply with PHIPA and PIPA.” Picture of report from BC & ONT privacy commissioners Page 25 Highlighted “A similar deficiency was noted by a third party who reviewed LifeLabs' security practices. An April 2017 threat-risk assessment stated that, "LifeLabs does not perform due diligence prior to acquiring new companies and integrating their data, applications, systems etc. into its environment." It is no excuse for a custodian or organization to say that it adopted a particular practice simply because it acquired software that performed that function as a default. A custodian or organization must conduct the necessary due diligence to ensure that any third-party software or systems that it acquires enable it to comply with its statutory obligations.”
November 26, 2024 at 7:32 PM
Not only that, but handing all that personal information straight into the private sector sounds like a great idea. Closing the public locations gives us no choice to attempt to protect our information! I wonder that this doesn't violate PHIPA, since Health card #s are personal health information
January 11, 2024 at 8:14 PM
ipcontario.bsky.social
Navigating health information privacy can be confusing, but we're here to help! The Personal Health Information Protection Act (PHIPA) safeguards your health data, regulating how it’s collected, used, and shared.
Learn more about your rights today. ow.ly/ineB50W6hML
June 10, 2025 at 2:50 PM
shane555.bsky.social
Health records interoperability and document numbers according to ChatGPT (in pictures).

Document numbers are easily automated & a very easy standards to create.

(Asked twice, first time it also mentioned “Enabling More Effective Oversight and Auditing”

#HealthInteroperability #cdnhealth
Asked chat GPT: “Canada health Infoway has cost Canadians almost $3 billion dollars to create health data and health records interoperability. A watch dog was called for in 2011, but the position was no created. Document numbers for health records and deliverable document standards do not exist. Can document numbers and document standards speed up interoperability systems design?” Answer: Yes, the creation of standardized document numbers and document standards can indeed help speed up the design and implementation of interoperability systems in healthcare, including those in Canada. How document numbers and document standards help: 1. Consistency and Organization: Standardized document numbers and formats provide a consistent method of identifying and categorizing health records. This consistency is essential for ensuring that all systems, from hospitals to primary care providers, can accurately and efficiently exchange and interpret data. 2. Reduced Ambiguity: One of the challenges in health data interoperability is the variability in how documents are identified, named, and formatted across different systems and institutions. Standardizing document numbers and types removes much of this ambiguity, making it easier for systems to recognize and integrate data. 3. Faster Data Exchange: When all stakeholders (clinicians, healthcare providers, and systems) follow a common standard, the time spent converting or reconciling different formats can be significantly reduced. This allows for more rapid access to health data across the continuum of care, which is particularly important in emergency or time-sensitive situations. 4. Scalability: As the healthcare system grows and incorporates new technologies, standardized documents are easier to scale across additional systems, networks, and jurisdictions. If each document has a unique, standardized identifier and a predefined format, it's easier to integrate new players into the existing ecosystems. 5. Compliance and Security: Standardization not only helps in making systems more efficient but also ensures that data management meets regulatory standards for privacy and security. Having clear rules for document creation, handling, and transmission can reduce the risk of data breaches or compliance violations. 6. Interoperability Framework: A clear framework for document numbers and standards can serve as the backbone for a broader interoperability ecosystem. Whether it's using established standards like HL7, CDA, or FHIR, these frameworks can facilitate the exchange of health data in a structured and reliable manner. Examples of Document Standards: • HL7 (Health Level 7): A widely used standard for the exchange, integration, sharing, and retrieval of electronic health information. HL7 standards, like CDA (Clinical Document Architecture), already provide structured templates for creating documents such as discharge summaries or laboratory results, ensuring interoperability. • FHIR (Fast Healthcare Interoperability Resources): A newer standard that leverages modern web technologies (e.g., RESTful APIs, XML/JSON formats) and focuses on simplifying interoperability. By adopting FHIR and standardizing document types, the complexity of dealing with proprietary systems is reduced. • ICD (International Classification of Diseases): Standardized codes for diseases and conditions can also contribute to the speed and accuracy of interoperability by ensuring that diagnoses are represented consistently. Challenges to Overcome: 1. Implementation Complexity: While document standards and numbers are important, their successful implementation requires widespread buy-in from healthcare providers, IT vendors, and policymakers. Coordinating and enforcing these standards across diverse organizations can be challenging. 2. Legacy Systems: Many health systems in Canada (and elsewhere) use legacy systems that were not designed with interoperability in mind. Transitioning to new standards may require significant upgrades or replacements, which can be costly and time-consuming. 3. Privacy and Security: While document standardization can improve interoperability, it also raises concerns about patient privacy and data security. Ensuring that these systems comply with privacy regulations like Canada's Personal Health Information Protection Act (PHIPA) or the Health Insurance Portability and Accountability Act (HIPAA) in the U.S. is crucial. Conclusion: Yes, standardized document numbers and document standards can accelerate the development of effective interoperability systems. They provide a foundation for clearer communication, data sharing, and ultimately better patient care. However, the successful implementation of these standards requires thoughtful planning, collaboration across stakeholders, and addressing technical and regulatory challenges. For Canada, adopting international standards like HL7 and FHIR, combined with a clear strategy for document number standardization, could help realize the full potential of health data interoperability. First time asked ChatGPT this excerpt is included for information: 5. Enabling More Effective Oversight and Auditing • Document numbers create a transparent and auditable trail of data exchange. In case of disputes or errors, healthcare organizations can trace back the exact document and version that was exchanged, improving accountability. • A standardized approach makes it easier for regulators and oversight bodies to monitor compliance with data-sharing protocols and ensure that health records meet required privacy and security standards.
December 3, 2024 at 7:37 PM
amplifycare.bsky.social
AI scribes reduce charting burden, but privacy, consent, and clinician oversight remain essential.

📋 Do a PIA/TRA
🔐 Follow PHIPA
✅ Get clear consent

AI can support care without compromising trust. We believe in integration that’s both smart and safe.
July 29, 2025 at 4:05 PM
originalaurelia.bsky.social
I keep wondering why Microsoft CoPilot AI doesn’t violate Canada’s federal Privacy laws - PIPEDA or Ontario’s PHIPA laws. They are supposed to be mandatory opt-out #CanadaSky #OntarioSky #Onpoli #cdnpoli
kathryntewson.bsky.social Kathryn Tewson @kathryntewson.bsky.social · Jan 25
I can see if we can put something together — part of the problem right now is that the people who know how it should work are very startled by how it seems to be actually working, so we don’t have a firm grasp even of what exactly is going on from a rollout perspective.
January 27, 2025 at 12:34 AM
mendel-archive.bsky.social
I’m sure eventbrite is PHIPA-compliant, right?

right??? https://twitter.com/QueensParkToday/status/1312856270320349185
December 31, 2024 at 2:41 AM