Yukon · Health Information Privacy and Management Act

Run Yukon health privacy the way HIPMA is written

For custodians under HIPMA — hospitals, health centres, practitioners, and the territorial health system — AccessPoint manages a person's access to and correction of their own health record, custodian duties, and breach notification, inside your own Microsoft 365 tenant.

Start Free Trial Request a Demo

Yukon — HIPMA at a glance

Access deadline
30 days, with an extension in the circumstances the Act allows
Correction
Correction, or a statement of disagreement where refused
Who is covered
Custodians under HIPMA — health facilities, practitioners, and territorial health bodies
Breach duty
Notification to the individual and the Commissioner where the Act requires it
Oversight
Yukon Information and Privacy Commissioner
Languages
English, French

Built for Yukon — HIPMA

One platform for the whole access-and-privacy mandate, pre-configured for this regime and running in your own Microsoft 365 tenant.

Access to one's own record

Run a patient's access request on the 30-day clock, with the Act's limited grounds for refusal applied and cited, and the record produced in the form HIPMA contemplates.

Correction requests

Manage correction end to end — the decision, the correction or the refusal with reasons, notice to anyone the information was disclosed to, and the individual's statement of disagreement.

Custodian duties

The collection, use, and disclosure rules that govern a custodian, with the purpose and authority recorded on each disclosure so the file answers the question later.

Breach notification

Log a privacy breach, assess it, and work a live checklist of who must be told — the individual and the Commissioner — with the reasoning and the timing recorded.

Assessments before you launch

Run privacy impact assessments for new health information systems and data-sharing arrangements, with risks tracked to closure in an embedded register.

In your own tenant

Health information stays inside your own Microsoft 365 and Azure tenant — no third-party cloud, no vendor access, and no data leaving Canada.

Small system, full statute

A territorial health system carries the same statutory duties as a provincial one — with a fraction of the staff.

HIPMA gives Yukoners the same core rights their neighbours have under Alberta's HIA or BC's health privacy rules: see your own record, correct it when it is wrong, and be told when your information has been mishandled. What differs is scale. A custodian in Whitehorse may have one person carrying privacy alongside another job entirely, and the statute does not discount its deadlines for that. Automation is what closes the gap — the clock computed on receipt rather than remembered, the notification checklist assembled rather than researched, and the audit trail written as work happens rather than reconstructed when the Commissioner asks.

The 30-day clock Computed over Yukon's holiday calendar, not tracked by hand.
Breach checklist Who must be told, and by when — assembled for you.
Review-ready A timestamped trail for a Yukon IPC investigation.

Configured out of the box

Installing the ca-yt-hipma jurisdiction pack seeds your tenant with everything this regime needs — a starting point you can adjust, not a lock-in.

Related guide: FOI Workflow Quick Check
  • HIPMA as the legal-authority spine, with access and correction as the workflow
  • The 30-day access clock with the Act's extension grounds and Yukon's statutory-holiday calendar
  • The Act's grounds for refusing access, colour-coded for redaction and citable line by line
  • Correction requests, refusals with reasons, and statement-of-disagreement handling
  • Custodian collection, use, and disclosure rules with purpose and authority recorded
  • Privacy breach intake, assessment, individual notice, and Commissioner notification
  • Yukon IPC complaint and review tracking with grounds and dispositions
  • Bilingual correspondence templates carrying the statutory wording

Yukon — HIPMA Questions

Who is a custodian under HIPMA?
The Act applies to the health facilities, practitioners, and territorial health bodies it designates as custodians of health information. If your organization holds health information about Yukoners in the course of providing care or administering the health system, HIPMA governs how you collect, use, disclose, and safeguard it — and gives individuals rights over it.

How long do we have to answer an access request?
30 days, with an extension in the circumstances the Act allows. AccessPoint computes the due date on receipt over Yukon's statutory-holiday calendar, tracks any extension with its ground and notice, and shows the clock on the file rather than leaving it to a spreadsheet.

Do you also run the territory's ATIPP Act?
Yes — as a separate pack. Yukon's ATIPP Act (2021) governs access to records held by public bodies, and HIPMA governs health information held by custodians. AccessPoint ships each with its own clock, exceptions, and vocabulary, and an organization subject to both can run them side by side on one platform under one Commissioner.

Where does health information reside?
Entirely within your own Microsoft 365 and Azure tenant. Records, requests, documents, and audit history never leave your control — no third-party cloud, no vendor access, and no cross-border data transfers.

Run HIPMA in Your Own Tenant

Try AccessPoint free for 30 days, configured for Yukon custodians. No credit card required.

Start Free Trial