Resources

Insights for Ontario healthcare clinics

Plain-English guides on PHIPA, Microsoft 365, and keeping patient data secure — written for clinic owners and office managers, not IT departments.

PHIPA Compliance

PHIPA Breach Notification: What Ontario Clinics Must Do in the First 72 Hours

A plain-English playbook for the first three days after you suspect personal health information has been exposed — what to contain, who to call, and what the IPC of Ontario actually expects on file.

Feb 18, 20267 min read

Read article

Microsoft 365

Is Microsoft 365 PHIPA-Compliant?

The default Microsoft 365 tenant isn't PHIPA-aligned out of the box. Here are the specific settings that get you there — and the ones most clinics miss.

Feb 4, 20266 min read

Managed IT

5 Signs Your Clinic's IT Provider Doesn't Understand Healthcare

If your IT company has ever said 'just email it to me,' this article is for you. Five red flags that separate generic MSPs from healthcare-fluent partners.

Jan 22, 20265 min read

Cybersecurity

MFA for Clinics: Why a Password Alone Won't Protect Patient Data

Multi-factor authentication is the single highest-impact security control a clinic can deploy. Here's how to roll it out without disrupting clinical workflows.

Jan 9, 20265 min read

PHIPA Compliance

Where Does Your Patient Data Actually Live? A Plain Guide to Canadian Data Residency

Data residency is one of the most misunderstood compliance topics in clinic IT. Here's what 'staying in Canada' actually means — and what it doesn't.

Dec 15, 20256 min read

Cybersecurity

Ransomware and the Small Clinic: How a Single Click Can Shut You Down

A composite story drawn from real incident-response work — and the six controls that would have stopped it before the encryption started.

Dec 2, 20258 min read

Microsoft 365

Moving From Google Workspace to Microsoft 365: A Clinic's Checklist

A practical, downtime-free migration plan for clinics moving from Google Workspace to a PHIPA-aligned Microsoft 365 tenant.

Nov 18, 20257 min read

PHIPA Compliance

What the IPC of Ontario Actually Expects From Your Practice

Behind the legal language of PHIPA is a short list of things the IPC genuinely wants to see in every clinic. Here's the practical version.

Nov 4, 20256 min read

Clinic Guides

Onboarding a New Staff Member Securely: A 10-Minute Checklist

Most clinic privacy incidents trace back to onboarding or offboarding. This 10-minute checklist closes the gap.

Oct 21, 20254 min read

Learning Hub

PHIPA Compliance Hub

Deep-dive reference guides on Ontario's Personal Health Information Protection Act — what it requires, who it applies to, and how to stay compliant.

Browse the full hub

PHIPA Guide

Are AI Scribes & SOAP Note Tools PHIPA Compliant? (2026 Guide)

Are AI scribes and AI SOAP-note tools PHIPA compliant? A 2026 guide for Ontario clinicians: data residency, agent agreements, consent, and a practical compliance checklist.

Read guide

PHIPA Guide

PHIPA Compliance Guide: How to Become PHIPA Compliant in Ontario

A step-by-step PHIPA compliance guide for Ontario health custodians: privacy contact person, data mapping, consent, safeguards, vendor agreements, training, and breach response.

Read guide

PHIPA Guide

Is It PHIPA Compliant? Zoom, Teams, Google Meet & More (2026)

Is Zoom, Microsoft Teams, Google Meet, Webex, Skype, Stripe or Mailchimp PHIPA compliant? A 2026 tool-by-tool guide for Ontario healthcare — compliance depends on configuration.

Read guide

PHIPA Guide

PHIPA Violations & Penalties: What Happens After a Breach

What happens when a custodian violates PHIPA? Learn what counts as a breach, the IPC's role, breach-notification duties, offences, and PHIPA penalties and fines.

Read guide

PHIPA Guide

PHIPA vs PIPEDA vs HIPAA vs FIPPA: Key Differences Explained

PHIPA vs PIPEDA vs HIPAA vs FIPPA compared. Understand which privacy law applies to Ontario health data, whether PHIPA replaces PIPEDA, and how it differs from HIPAA.

Read guide

PHIPA Guide

What Is PHIPA? Ontario's Personal Health Information Protection Act Explained

PHIPA is Ontario's Personal Health Information Protection Act, 2004. Learn what PHIPA stands for, what it governs, its purpose, who administers it, and when it took effect.

Read guide

PHIPA Guide

What Information Does PHIPA Protect? PHI, Consent & Exemptions

What does PHIPA protect? Learn what personal health information (PHI) is, how consent and the two express-consent exemptions work, your access rights, and what PHIPA does not cover.

Read guide

PHIPA Guide

Who Does PHIPA Apply To? Custodians, Agents & Circle of Care

Who does PHIPA apply to? Learn what a health information custodian and a PHIPA agent are, the role of the contact person, the circle of care, and who PHIPA does not cover.

Read guide

Get one practical clinic-security tip a month.

No spam, ever. Unsubscribe in one click.

We never share your email. Read our privacy commitment on the contact page.