Privacy & Compliance

Healthcare-focused cybersecurity and privacy training with staff modules, phishing simulations and an AI security module.

Contact vendor for pricing and organizational enrollment; training does not replace technical safeguards or legal advice.

Policy on documentation, custodianship, retention, access, transfer, storage, security and destruction of medical records.

Written record-custody agreements are required in many shared-practice or shared-EMR arrangements.

Professional expectations for physicians to safeguard PHI and comply with privacy legislation in clinical practice.

Applies to Ontario physicians; read with PHIPA and related CPSO policies.

Step-by-step protocol for containing a health privacy breach, notifying affected individuals and determining whether IPC reporting is required.

Practices should adapt this into a written incident-response procedure before a breach occurs.

Authoritative PHIPA guidance for health information custodians on access, safeguards, consent, breaches and accountability.

Legal obligations vary by circumstance; seek legal advice for complex issues.

Guidance and reporting channel for PHIPA breaches that health information custodians must notify to the Commissioner.

Not every breach has identical reporting requirements, but affected individuals may still need notification.

Operational privacy, security and training resources for organizations connecting to provincial electronic health record services.

Use the toolkit applicable to the connected service and organizational role.

Ontario-focused privacy and security learning modules for clinicians and staff using digital health systems.

Portal account may be required; annual completion may be required for some provincial services.