PHIPAA (NB)
Personal Health Information Privacy and Access Act (New Brunswick)
New Brunswick's combined health privacy and access law
New Brunswick's Personal Health Information Privacy and Access Act (PHIPAA) governs both the protection of, and individual access to, personal health information held by custodians. It is bilingual by design, sets consent and safeguard requirements, and is overseen by the Office of the Ombud. New Brunswick is deemed substantially similar to PIPEDA for health information.
Who must comply with PHIPAA (NB)?
Custodians in New Brunswick include physicians, nurses, pharmacists, hospitals, the regional health authorities, and other providers who collect personal health information to deliver care. Agents and information managers acting for a custodian are subject to the Act through agreement.
Not sure if PHIPAA (NB) applies? Run a free assessment →
Key obligations under PHIPAA (NB)
Consent to Collection & Use
Obtain consent to collect, use, and disclose personal health information, subject to the Act’s exceptions for care and legal duties.
Bilingual Rights
Respect individuals’ rights in both official languages — notices, requests, and responses must be available in English and French.
Data Minimization
Limit collection, use, and disclosure to what is necessary for the identified purpose.
Safeguards
Maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the information.
Breach Notification
Notify affected individuals and, where required, the Office of the Ombud when personal health information is lost, stolen, or accessed without authority.
Access & Correction
Provide individuals access to their own records and a process to request corrections.
Penalties & enforcement
PHIPAA is one of the few health privacy laws explicitly built around bilingual (EN/FR) service from the start.
Frameworks that often overlap with PHIPAA (NB)
Run a free PHIPAA (NB) gap assessment
Complete a short guided assessment, get a scored gap report, and see exactly what you need to do to comply with PHIPAA (NB) — in under 3 hours. Free forever.
Start free assessment