My organization is covered by Ontario’s health privacy law, PHIPA. Does Part X apply to us?

If a service provider is covered by Ontario’s health privacy law, the core requirements of Part X do not apply to their handling of personal health information — PHIPA applies instead.

However, Part X may apply if the service provider is handling personal information that isn’t health information. For example, a multi-service organization runs a children’s mental health clinic, as well as a children’s aid society. The organization is already operating as a custodian under PHIPA for the purpose of running their mental health clinic. Even so, Part X of the CYFSA will apply to the work of their children’s aid society.

Learn more about service providers covered by PHIPA