HIA Privacy Resources

The College of Physiotherapists of Alberta has developed new Standards of Practice on Documentation and Privacy in preparation for the designation of physiotherapists as custodians under the Health Information Act (HIA). Important: These standards are in draft form only and are not currently in force.

This guide is provided to assist physiotherapists to understand and fulfill their responsibilities under the Health Information Act. (Updated June 2026)

The purpose of this document is to outline the policy and procedure requirements of the HIA and to provide guidance to physiotherapists as they review, revise or establish HIA compliant privacy policies and procedures. Readers are advised to review the Privacy Guide prior to this document.

What is an Information Manager?

What is a Privacy Impact Assessment?

Privacy can feel complicated, but this episode makes it practical. Leanne and Jody break privacy basics into clear, manageable actions that can help physiotherapists strengthen client privacy in any practice setting. If you have ever wondered where to start, this conversation will help you focus on key privacy domains and four priority action areas.

Collection notices are required under the HIA and Alberta’s other privacy legislation: the Protection of Privacy Act and the Personal Information Protection Act.

The Health Information Act (HIA) sets requirements for custodians when obtaining consent to disclose health information.

The Health Information Act (HIA) includes requirements for privacy impact assessments.

The Health Information Act (HIA) requires custodians to establish and maintain a privacy management program (PMP)

The Health Information Act (HIA) has requirements regarding shared health information.

The Health Information Act (HIA) has requirements regarding abandoned records.

Shared health information frequently asked questions.