CanucktAI
HomeFrameworksPHIPAA (NB)
HealthcareNew Brunswick, CanadaIn force September 1, 2010

PHIPAA (NB)

Personal Health Information Privacy and Access Act (New Brunswick)

New Brunswick's combined health privacy and access law

Overview

New Brunswick's Personal Health Information Privacy and Access Act (PHIPAA) governs both the protection of, and individual access to, personal health information held by custodians. It is bilingual by design, sets consent and safeguard requirements, and is overseen by the Office of the Ombud. New Brunswick is deemed substantially similar to PIPEDA for health information.

Authority
Office of the Ombud — Access to Information and Privacy Commissioner (NB)
Jurisdiction
New Brunswick, Canada
Effective date
September 1, 2010
Applicability

Who must comply with PHIPAA (NB)?

Custodians in New Brunswick include physicians, nurses, pharmacists, hospitals, the regional health authorities, and other providers who collect personal health information to deliver care. Agents and information managers acting for a custodian are subject to the Act through agreement.

Compliance scope
Your organization collects personal information
You operate in the applicable jurisdiction
Commercial activities are involved
You use or disclose personal data

Not sure if PHIPAA (NB) applies? Run a free assessment →

Requirements

Key obligations under PHIPAA (NB)

Consent to Collection & Use

Obtain consent to collect, use, and disclose personal health information, subject to the Act’s exceptions for care and legal duties.

Bilingual Rights

Respect individuals’ rights in both official languages — notices, requests, and responses must be available in English and French.

Data Minimization

Limit collection, use, and disclosure to what is necessary for the identified purpose.

Safeguards

Maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the information.

Breach Notification

Notify affected individuals and, where required, the Office of the Ombud when personal health information is lost, stolen, or accessed without authority.

Access & Correction

Provide individuals access to their own records and a process to request corrections.

Enforcement

Penalties & enforcement

Maximum penalty
Up to $10,200 (individual) / $51,000 (organization)
Enforced by: Office of the Ombud (NB)
Notable case

PHIPAA is one of the few health privacy laws explicitly built around bilingual (EN/FR) service from the start.

How Canuckt keeps you penalty-free:
PHIPAA gap assessment covering NB custodian obligations, including bilingual notice requirements
Bilingual (EN/FR) privacy notices and breach letters generated automatically
Breach workflow aligned to Office of the Ombud notification practice
Agent and information-manager agreement templates for NB custodians

Run a free PHIPAA (NB) gap assessment

Answer 47 questions, get a scored gap report, and see exactly what you need to do to comply with PHIPAA (NB) — in under 3 hours. Free forever.

Start free assessment
No credit card
Results in hours
Canadian data residency
PHIPAA New Brunswick Health Privacy Compliance | Canuckt | Canuckt AI