Clinic Privacy Pack
Insurance-Ready Basics with full-disk encryption on every device, a yearly privacy and phishing session, and a one-page breach checklist following PHIPA's steps.
Health clinics
PHIPA-ready IT for health clinics
Keep patient records private, available and out of the Commissioner's inbox.
Who we work with. Dental, physio, medical and allied-health clinics, hospices and community health centres that hold patient records.
Sound familiar?
When organizations like yours call us
- A laptop with patient records went missing.
- Your insurer asked about encryption and backups.
- You're not sure when a breach must be reported, and to whom.
- The March 1 breach statistics deadline is coming.
Rules that apply
What the rules ask of you
General information, not legal advice. Use the compliance guide's filter for your exact profile. Last verified: November 6, 2026.
Your PHIPA duties
- Tell patients about theft, loss or unauthorized use or disclosure at the first reasonable opportunity.
- Tell the Information and Privacy Commissioner of Ontario in set cases, including theft of records that weren't de-identified or encrypted.
- File annual breach statistics by March 1.
- Report to a regulatory college within 30 days in certain discipline cases.
- Fines reach $1 million for organizations and $200,000 for individuals.
Why encryption matters
- A stolen laptop with unencrypted patient records must be reported to the Commissioner. Encryption removes that trigger (patients may still need to be told).
Recommended
Where to start
Bundles are quoted for your organization. Each one is built from services you can also buy on their own.
Funding that may help
Ways to pay for it
You may qualify; we never promise funding. Last verified: November 6, 2026.
Use the eligibility checkerFAQ
Questions we hear
Our EMR vendor handles security.
They secure their system. The laptops, email and file shares around it are yours, and so is the reporting duty.
Start here
Find out where you stand, at a fixed price.
A short discovery call, then a fixed-price assessment with a ranked, costed roadmap: what to fix first, what it costs, and what funding may help.