The free PHIPA Compliance Kit
Three editable templates that close the most common gaps the IPC looks for: a privacy-policy template, a staff-training checklist, and a breach-response template. Built for Ontario clinics. No login, no cost.
- Plain-language instructions — no compliance background needed
- Canadian spelling and PHIPA-native terminology throughout
- Mapped to the six areas Decision 298 puts a custodian on the hook for
- Editable formats your clinic can adopt the same day
Three templates, ready to adopt
Each template is a starting point you can edit to match how your clinic actually operates — exactly the kind of dated, repeatable documentation the IPC expects.
Privacy-policy template
A dated, editable PHIPA privacy-policy starting point covering collection, use, disclosure, your designated Privacy Contact, and the annual-review process the IPC expects to be documented.
Staff-training checklist
A per-staff training checklist with the topics PHIPA expects every agent to cover, plus a simple log for individual completion records and annual renewals.
Breach-response template
A step-by-step breach-response template built around the IPC's Contain → Notify → Investigate → Prevent protocol, with the notification-threshold prompts staff need under pressure.
These templates are a starting point, not legal advice and not a guarantee of compliance. They are designed to help your clinic build a documented privacy-management program — a regulator or college inspector ultimately decides whether your program meets the standard.