Health privacy breaches

In Ontario, health information custodians (custodians) have a duty under the Personal Health Information Protection Act (PHIPA) to protect personal health information (PHI) against privacy breaches. A privacy breach occurs when PHI is collected, used or disclosed without authorization. The following IPC resources help custodians to address their obligations when there is a breach.

A digital illustration of a glowing lock, surrounded by streams of computer code.

PHIPA Breaches Workbook and Completion Guide

A woman looking at a computer screen with many lines of code on it.

Responding to a Health Privacy Breach: Guidelines for the Health Sector

A magnifying glass hovering over a red warning icon.

Reporting a Privacy Breach to the IPC: Guidelines for the Health Sector

Two people looking at a computer screen warning of a security breach.

Unauthorized access

Somebody typing on a laptop keyboard, with a yellow exclamation point floating over their hands.

Detecting and Deterring Unauthorized Access to Personal Health Information

Help us improve our website. Was this page helpful?

Yes

How did this page help you?

The information is incorrect or needs to be updated.

The information was too hard to understand.

The information wasn’t relevant.

I didn’t find what I was looking for.

Other

Note:

You will not receive a direct reply. For further enquiries, please contact us at @email
Do not include any personal information, such as your name, social insurance number (SIN), home or business address, any case or files numbers or any personal health information.
For more information about this tool, please see our Privacy Policy.