Virtual Visits Privacy Guidance
Health Service Providers or Health Information Custodians (as referred to in PHIPA, the Personal Health Information Protection Act) must comply with all applicable laws and regulations, such as PHIPA, and any guidance issued by relevant regulators.
Virtual visits involve the collection, use, disclosure, retention, and/or transmission of personal health information (PHI) and personal information (PI). In addition, access, transfer and disposal, when required, of PHI/PI are fundamental to the solution capabilities
Maintaining privacy while delivering care using virtual visit solutions involves unique challenges that can lead to unintended risks, such as data breaches.
Solution Providers can mitigate many of these risks by implementing appropriate privacy and security policies, procedures, and practices including conducting of Privacy Impact Assessments (PIAs).
Last Updated: July 14, 2025