PHIPA compliant email options for therapists
No Canadian statute names encryption, so what do you actually need? An honest comparison of the four email options open to a Canadian therapist in 2026.
Gabriel Borges
"ontario" posts
AI and client health data under PHIPA in Ontario
Ontario's IPC issued AI scribes guidance in January 2026. What PHIPA requires before an AI tool processes client health data, and how to get consent.
Gabriel Borges
Google Workspace BAA: what it covers and does not
A Google Workspace BAA is not PHIPA compliance. What the BAA actually covers for Canadian therapists, what it leaves to you, and where the real gaps are.
Gabriel Borges
Google Workspace PHIPA setup for Canadian therapists
Setting up Google Workspace for PHIPA as a Canadian therapist: the admin settings to change, the AI features to turn off, and where Workspace alone falls short.
Gabriel Borges
Google Workspace data residency for therapists
Where does Google Workspace store your client email, and does PHIPA require it to stay in Canada? The honest answer for therapists, and what to do about it.
Gabriel Borges
PHIPA vs PIPEDA in telehealth: which law applies
Which privacy law governs your telehealth email, provincial PHIPA or federal PIPEDA? A decision-tree guide for Canadian therapists across provinces.
Gabriel Borges
Is your client portal PHIPA compliant? 12 checks
A neutral, PHIPA-specific scored checklist for evaluating a client portal: encryption, consent, audit trail, residency, and breach handling, point by point.
Gabriel Borges
PHIPA breach notification: the first 24 hours
A therapist's PHIPA breach response guide: the real notification standard, what to do in the first 24 hours, and when you must report to the IPC of Ontario.
Gabriel Borges
Ontario therapist, Alberta client: which law applies
A CRPO therapist's client moves to Alberta. PHIPA still binds you, not HIA. Here's what changes about consent, email, and CAP registration, and what doesn't.
Gabriel Borges
PHIPA and CRPO therapist consent form template
What PHIPA s.18 and CRPO Standard 3.4 require in a therapist consent form. Walk through each field with the free template.
Gabriel Borges
Cross provincial telehealth privacy for therapists
Which privacy law applies when your client is in another province? A therapist guide to cross provincial telehealth compliance: PHIPA, HIA, BC PIPA.
Gabriel Borges
PHIPA vs HIA vs BC PIPA: a therapist's guide
Compare PHIPA, HIA, and BC PIPA: encryption, consent, residency, breach notification, and college rules for Canadian therapists by province.
Gabriel Borges
PHIPA administrative monetary penalties explained
IPC Decision 298 created PHIPA's first administrative monetary penalties. What the ruling means for Ontario therapists and your email practices.
Gabriel Borges
CRPO vs CAP vs CHCPBC: college email requirements
Side by side comparison of CRPO, CAP, and CHCPBC email and digital communication requirements. What each college expects and how privacy law layers on top.
Gabriel Borges
Is Paubox PHIPA compliant for Canadian therapists?
Paubox is built for HIPAA, not PHIPA. No Canadian data storage, no Canadian audit trail, no provincial compliance. What Canadian therapists should know.
Gabriel Borges
Email privacy laws in Ontario, Alberta, and BC
Ontario has PHIPA. Alberta and BC have PIPA, with HIA reserved for Alberta custodians. What each law requires for therapist email, and where they differ.
Gabriel Borges
CRPO electronic practice standards for email
CRPO Standard 3.4 sets email requirements for Ontario registered psychotherapists. What secure electronic communication means, and six steps to comply.
Gabriel Borges
Can therapists email clients? PHIPA consent rules
Yes, with consent. PHIPA's four consent elements under s.18(1), what the IPC expects before an unencrypted email, and copy paste consent form templates.
Gabriel Borges
PHIPA email requirements for therapists in 2026
PHIPA never names encryption. It sets a safeguards duty. What that means for your email, plus consent, audit trails, and how Alberta and BC differ.
Gabriel Borges
Is Gmail PHIPA compliant in Canada?
Gmail is not PHIPA compliant by default. Learn what Canadian therapists need to change and where the gaps remain. Updated for 2026.
Gabriel Borges
Client record access requests under PHIPA s.52-54
How Canadian therapists handle client record access requests under PHIPA sections 52 to 54. Includes response letter templates and statutory timelines.
Gabriel Borges
How to disable AI features in Google Workspace
The IPC's January 2026 guidance covers AI scribes, not Gmail autocomplete. Here's how to turn off Smart Compose, Gemini and the other Workspace AI features.
Gabriel Borges
PHIPA compliant client communication templates
Copy paste email disclaimers, consent forms for electronic communication, and intake language that meets PHIPA requirements. Built for Canadian therapists.
Gabriel Borges
Email retention policies for Ontario therapists
How long must Ontario therapists keep client emails? PHIPA and CRPO retention requirements, and how to configure Google Vault retention rules to match.
Gabriel Borges
PHIPA privacy impact assessment template
The IPC recommends privacy impact assessments for health information systems. A section by section template and walkthrough, with Google Workspace guidance.
Gabriel Borges
How to build a manual audit log in Google Workspace
Build a Google Sheets log of who opened which client record and when. CRPO Standard 5.6 doesn't prescribe one, but it's a practical way to meet the duty.
Gabriel Borges