Health information legislation in Canada establishes a comprehensive framework governing how personal health information must be collected, used, disclosed, and protected across all care settings. For professionals working in controlled environments—whether provincial correctional facilities, federal penitentiaries, long-term care homes, youth detention centres, or acute care hospitals—understanding these obligations is not merely an administrative requirement but a fundamental aspect of professional practice that carries significant legal and ethical weight. The legislative landscape governing health information in Canada is multifaceted, with federal legislation providing overarching privacy principles while provincial and territorial statutes address health-specific information management within their respective jurisdictions. This dual regulatory structure means that professionals must navigate both layers of obligation, understanding where they intersect and where one may take precedence over the other depending on the nature of the information, the setting in which care is delivered, and the purpose for which information is being accessed or shared.
The foundation of health information protection in Canada rests on the principle that individuals retain fundamental rights over their personal health information regardless of their circumstances or the setting in which they receive care. This principle applies equally to an incarcerated person receiving treatment at a federal penitentiary in British Columbia, a youth in a residential treatment facility in Ontario, an elderly resident in a long-term care home in Alberta, or a patient receiving emergency care at a hospital in Saskatchewan. The Personal Information Protection and Electronic Documents Act, as of the date of authorship, establishes baseline privacy standards for personal information in the private sector and serves as default legislation in provinces that have not enacted substantially similar provincial statutes. However, most provinces have enacted specific health information legislation that provides more detailed guidance for the healthcare sector. Alberta's Health Information Act, British Columbia's Personal Information Protection Act working alongside the Freedom of Information and Protection of Privacy Act, Saskatchewan's Health Information Protection Act, and Ontario's Personal Health Information Protection Act each establish jurisdiction-specific requirements while sharing common principles rooted in fair information practices.