#PHIPA

P/HIPAA

Privacy Impact Assessments Under PHIPA: When They Are Required and How to Do Them Right

Privacy Impact Assessments (PIAs) are a cornerstone of proactive privacy governance under PHIPA, yet many health systems remain unclear on triggering events and execution standards. This guide clarifies mandatory triggers and provides a practical implementation framework aligned with NIST and HITRUST best practices.

P/HIPAA

Consent Management Under PHIPA: Express vs. Implied Consent in Canadian Clinical Settings

Canadian healthcare organizations face distinct regulatory challenges in managing patient consent under PHIPA. This guide clarifies express and implied consent models and their cybersecurity and compliance implications for health system leaders.