Managing PHIPA obligations with Riskophia
Personal Health Information Protection Act (Ontario)
What it is
Ontario's health privacy law. It governs the collection, use and disclosure of personal health information by health information custodians and their agents, and gives the Information and Privacy Commissioner of Ontario oversight.
Who it applies to
Health information custodians in Ontario, including hospitals, long-term care homes, clinics, pharmacies, laboratories, community health organizations and the agents who act for them.
Representative obligations
- Designating a contact person for privacy
- Written public statement of information practices
- Agent agreements that restrict use and disclosure
- Safeguards and audit logs for electronic records
- Notification of theft, loss or unauthorized use or disclosure
- Reporting to the Commissioner in prescribed circumstances
- Annual statistical reporting of breaches
This list is illustrative and is not legal advice. Your obligations depend on your activities, jurisdictions and the current text of the law.
From PHIPA text to evidence on file.
Riskophia helps you manage the compliance activities associated with PHIPA. It does not by itself make you compliant or approved; that depends on your practices and on the relevant regulator.
Requirements register
PHIPA obligations broken into plain-language requirements with owners, cadence and status.
Policies and attestations
Policy templates aligned to PHIPA, version controlled and acknowledged by the right roles.
Training records
Mandatory training assigned by role through Learnophia, with completion recorded as evidence.
Evidence and gaps
Evidence linked to each requirement; gaps become owned actions with verified closure.
Crosswalk
Where PHIPA overlaps other regulations and standards, one control and one piece of evidence serve all of them.
Export
An inspection-ready package of status, evidence and history for PHIPA.
See your PHIPA obligations in Riskophia.
Book a 30-minute demo led by a compliance professional, or talk to an expert about your sector.