A Guide to the Personal Health Information Protection Act


Key Questions: What is the Personal Health Information Protection Act? Who does the Personal Health Information Protection Act apply to?

The Personal Health Information Protection Act sets out rules for the collection, use and disclosure of personal health information. These rules will apply to all health information custodians operating within the province of Ontario and to individuals and organizations that receive personal health information from health information custodians. The rules recognize the unique character of personal health information – as one of the most sensitive types of personal information that is frequently shared for a variety of purposes, including care and treatment, health research, and managing our publicly funded health care system. The legislation balances individuals’ right to privacy with respect to their own personal health information with the legitimate needs of persons and organizations providing health care services to access and share this information. With limited exceptions, the legislation requires health information custodians to obtain consent before they collect, use or disclose personal health information. In addition, individuals have the right to access and request correction of their own personal health information.


  • Introduction
  • Purpose of this guide
  • An Overview
  • Does the Act apply to you?
  • What information does the Act protect?
  • Practices to protect personal health information
  • Collection, use and disclosure of personal health information
  • Access to personal health information records
  • Correction
  • How will the Act be enforced? 
  • Definitions

Type of Tool:

Publication Date: 

Personal Health Information Act