Ontario
Ontario PHIPA
Applies to: Health information custodians in Ontario.
Ontario's privacy regulator says "PHIPA does not require that personal health information be retained and stored in Ontario or Canada." The custodian remains accountable for its agents and must be satisfied that appropriate safeguards are in place, for example through contracts.
What to check in a listing
- Do the vendor's contract and security documentation support the safeguards you are accountable for?
The law and the regulator
- IPC Ontario: PHIPA frequently asked questions · checked 2026-10-13
- Personal Health Information Protection Act, 2004 (e-Laws) · checked 2026-10-13
A summary, not legal advice. Laws change; report a correction.