If a service provider is covered by Ontario’s health privacy law, the core requirements of Part X do not apply to their handling of personal health information — PHIPA applies instead.
However, Part X may apply if the service provider is handling personal information that isn’t health information. For example, a multi-service organization runs a children’s mental health clinic, as well as a children’s aid society. The organization is already operating as a custodian under PHIPA for the purpose of running their mental health clinic. Even so, Part X of the CYFSA will apply to the work of their children’s aid society.
Learn more about service providers covered by PHIPA
This post is also available in: French