In Ontario, the Personal Health Information Protection Act (PHIPA)[1] governs the collection, use and disclosure of personal health information within the health sector. The term “personal health information” is broadly defined in PHIPA and includes identifying information which is