Submit Your 2019 Health Privacy Breach Report by February 28, 2020

January 30, 2020

Under the Personal Health Information Protection Act (PHIPA), health information custodians in Ontario are required to report statistics relating to health privacy breaches annually to the Information and Privacy Commissioner of Ontario's (IPC) office. How do occupational therapists know if they are a health information custodian? The IPC has a useful resource: Frequently Asked Questions - PHIPA.  

By law, health information custodians that have experienced at least one health privacy breach during the 2019 reporting year—from January to December—are required to report breaches through the IPC’s online submission website

A privacy breach occurs when Ontario's Personal Health Information Protection Act (PHIPA) has been contravened, for example, where personal health information is stolen, lost or if it is used or disclosed without authority.

The deadline for reporting is Friday, February 28, 2020.

If you have any questions, you can visit the IPC website: and review the following resources: