Personal Health Information and Privacy Act, 2004 (PHIPA) is provincial legislation that sets out rules for the collection, use and disclosure of personal health information. The legislation balances the rights of individuals to keep their own personal health information private, with the legitimate needs of people and organizations who provide health care services to access and share this information.