Newfoundland & Labrador · PHIA

Health-record access and privacy for Newfoundland and Labrador custodians

AccessPoint manages PHIA access and correction requests, breach notification, and privacy impact assessments — pre-configured for Newfoundland and Labrador and running inside your own Microsoft 365 tenant.

Start Free Trial Request a Demo

Newfoundland & Labrador — PHIA at a glance

Access deadline
60 days for a custodian to respond to a request for one's own record
Correction
Individuals may request correction of factually inaccurate records
Access fees
A reasonable fee is permitted under section 57; information is often provided free at the point of care
Breach notification
Notify the individual and the OIPC where a breach could reasonably be expected to cause harm
Oversight
Office of the Information and Privacy Commissioner (recommendations; appeals to the Supreme Court)
Languages
English

Built for Newfoundland & Labrador — PHIA

One platform for the whole access-and-privacy mandate, pre-configured for this regime and running in your own Microsoft 365 tenant.

PHIA access and correction

Intake to disclosure on Newfoundland and Labrador's 60-day clock — access to a patient's own record, correction requests, the PHIA rules, and defensible records, all on Microsoft 365.

Breach notification

Log a breach, assess whether it could reasonably be expected to cause harm, and get a live checklist of what must go to the affected individual and to the OIPC — using the Commissioner's reporting process.

Consent and disclosure

Track the consents and disclosure rules that govern when a custodian may share personal health information, with an auditable record of every decision.

Privacy impact assessments

Run a PIA before a new collection, use, or information system goes live — a guided questionnaire, an embedded risk register, and an exportable, defensible record.

Complaints to the OIPC

Track complaints to the Office of the Information and Privacy Commissioner with an investigation workspace and a guided path from representations to a recommendation, and on to the Supreme Court if needed.

In your own Newfoundland and Labrador tenant

Every request, assessment, and record stays inside your own Microsoft 365 and Azure tenant — no third-party cloud, no cross-border transfers, no per-user fees.

The 60-day clock

Newfoundland and Labrador gives custodians 60 days — and expects the record to be reasonable. AccessPoint keeps both.

PHIA gives an individual the right to their own personal health information and gives a custodian up to 60 days to respond, while limiting fees to what is reasonable and pushing information to be provided free at the point of care. When something goes wrong, custodians must notify the individual and the Office of the Information and Privacy Commissioner where a breach could reasonably be expected to cause harm. AccessPoint runs access and correction on the 60-day clock, applies your fee rules, and computes breach notifications — on one platform, in your own tenant.

60-day access The patient's-own-record clock, tracked for every request.
Reasonable fees Cost-based fee rules applied consistently, or waived at the point of care.
Breach reporting Notification to the individual and the OIPC, assessed and evidenced.

Configured out of the box

Installing the ca-nl-phia configuration pack seeds your tenant with everything this regime needs — a starting point you can adjust, not a lock-in.

Related guide: FOI Workflow Quick Check
  • PHIA as the legal-authority and citation spine, with ATIPPA, 2015 shipped as a separate configuration
  • Newfoundland and Labrador statutory-holiday calendar and 60-day due-date rules
  • Access, correction, and disclosure grounds mapped to PHIA
  • Section 57 reasonable-fee categories for patient record requests
  • Breach assessment workflow and OIPC reporting checklists
  • OIPC complaint grounds, recommendations, and dispositions
  • Privacy impact assessment templates for new collections and systems
  • Correspondence and notification templates with statutory wording

Newfoundland & Labrador — PHIA Questions

How long does a custodian in Newfoundland and Labrador have to respond?
PHIA gives an individual the right to their own personal health information, and a custodian must respond no later than 60 days after receiving the request. AccessPoint computes the due date on the provincial calendar and tracks every request against it.

What can a custodian charge for access?
PHIA permits a reasonable fee under section 57, and the Commissioner has encouraged information to be provided free at the point of care where it is not voluminous. AccessPoint applies your fee categories consistently and records what was charged and why.

How does it support breach notification?
AccessPoint logs a breach, helps you assess whether it could reasonably be expected to cause harm, and produces a live checklist of notification to the affected individual and to the Office of the Information and Privacy Commissioner using the Commissioner's reporting process.

Where does Newfoundland and Labrador health data reside?
Entirely within your own Microsoft 365 and Azure tenant. Requests, records, assessments, and audit history never leave your control — no third-party cloud and no cross-border data transfers.

Run PHIA Access, Breach, and Assessments in One Platform

Try AccessPoint free for 30 days, pre-configured for Newfoundland and Labrador. No credit card required.

Start Free Trial