PHIPA compliant email options for therapists
No Canadian statute names encryption, so what do you actually need? An honest comparison of the four email options open to a Canadian therapist in 2026.
No Canadian statute names encryption, so what do you actually need? An honest comparison of the four email options open to a Canadian therapist in 2026.
Ontario's IPC issued AI scribes guidance in January 2026. What PHIPA requires before an AI tool processes client health data, and how to get consent.
A Google Workspace BAA is not PHIPA compliance. What the BAA actually covers for Canadian therapists, what it leaves to you, and where the real gaps are.
Setting up Google Workspace for PHIPA as a Canadian therapist: the admin settings to change, the AI features to turn off, and where Workspace alone falls short.
Where does Google Workspace store your client email, and does PHIPA require it to stay in Canada? The honest answer for therapists, and what to do about it.
Which privacy law governs your telehealth email, provincial PHIPA or federal PIPEDA? A decision-tree guide for Canadian therapists across provinces.
A neutral, PHIPA-specific scored checklist for evaluating a client portal: encryption, consent, audit trail, residency, and breach handling, point by point.
A therapist's PHIPA breach response guide: the real notification standard, what to do in the first 24 hours, and when you must report to the IPC of Ontario.
A CRPO therapist's client moves to Alberta. PHIPA still binds you, not HIA. Here's what changes about consent, email, and CAP registration, and what doesn't.
What PHIPA s.18 and CRPO Standard 3.4 require in a therapist consent form. Walk through each field with the free template.
Which privacy law applies when your client is in another province? A therapist guide to cross provincial telehealth compliance: PHIPA, HIA, BC PIPA.
Compare PHIPA, HIA, and BC PIPA: encryption, consent, residency, breach notification, and college rules for Canadian therapists by province.
IPC Decision 298 created PHIPA's first administrative monetary penalties. What the ruling means for Ontario therapists and your email practices.
Paubox is built for HIPAA, not PHIPA. No Canadian data storage, no Canadian audit trail, no provincial compliance. What Canadian therapists should know.
Ontario has PHIPA. Alberta and BC have PIPA, with HIA reserved for Alberta custodians. What each law requires for therapist email, and where they differ.
CRPO Standard 3.4 sets email requirements for Ontario registered psychotherapists. What secure electronic communication means, and six steps to comply.
Yes, with consent. PHIPA's four consent elements under s.18(1), what the IPC expects before an unencrypted email, and copy paste consent form templates.
PHIPA never names encryption. It sets a safeguards duty. What that means for your email, plus consent, audit trails, and how Alberta and BC differ.
Gmail is not PHIPA compliant by default. Learn what Canadian therapists need to change and where the gaps remain. Updated for 2026.
How Canadian therapists handle client record access requests under PHIPA sections 52 to 54. Includes response letter templates and statutory timelines.
The IPC's January 2026 guidance covers AI scribes, not Gmail autocomplete. Here's how to turn off Smart Compose, Gemini and the other Workspace AI features.
Copy paste email disclaimers, consent forms for electronic communication, and intake language that meets PHIPA requirements. Built for Canadian therapists.
How long must Ontario therapists keep client emails? PHIPA and CRPO retention requirements, and how to configure Google Vault retention rules to match.
The IPC recommends privacy impact assessments for health information systems. A section by section template and walkthrough, with Google Workspace guidance.
How-to guides, compliance updates, and product news for Google Workspace.
Community
Connect with Canadian therapists navigating Google Workspace compliance.
Join on Facebook