Ontario’s health privacy legislation, the Personal Health Information Protection Act (PHIPA), establishes a set of rules regarding your personal health information (PHI). PHIPA gives you the right to:

• be informed of the reasons for the collection, use and disclosure of your personal health information;
• be notified of the theft or loss or of the unauthorized use or disclosure of your personal health information;
• refuse or give consent to the collection, use or disclosure of your personal health information, except in certain circumstances;
• withdraw your consent by providing notice;
• expressly instruct that your personal health information not be used or disclosed for health care purposes without your consent;
• access a copy of your personal health information, except in limited circumstances;
• request corrections be made to your health records;
• complain to our office if you are refused access to your personal health information;
• complain to our office if you are refused a correction request;
• complain to our office about a privacy breach or potential breach; and
• begin a proceeding in court for damages for actual harm suffered after an order has been issued or a person has been convicted of an offence under PHIPA.