Ontario’s IPC gains power to impose penalties on health sector

Trust in digital health is one of Ontario’s Information and Privacy Commissioner’s four strategic priorities. Stewart and Merrill Dresner report from Toronto.

Patricia Kosseim, Information and Privacy Commissioner (IPC) of Ontario, Canada is the privacy regulator for the province, which has the highest population, the largest economy, and is the centre of Canada’s tech industry and AI research.

1 January 2024 was the landmark date when Kosseim’s long running campaign for the authority to impose Administrative Monetary Penalties (AMPs) on individuals or organisations came into force under the Personal Health Information Protection Act (PHIPA).(1) The IPC may now issue AMPs of up to $50,000 for individuals and $500,000 for organisations, which can be increased if an organisation benefits economically from contravention of the law. In the most severe cases, the Commissioner will refer cases to Ontario’s Attorney-General for prosecution.

Continue Reading

International Report subscribers, please login to access the full article


If you wish to subscribe, please see our subscription information.