Find and Fix the Gaps in Clinic Privacy with a Privacy Impact Assessment

Why You Need A Privacy Impact Assessment
A PIA is the process of examining how your clinic collects, uses, discloses, and disposes of protected patient information to establish administrative, physical, and technology safeguards that protect the data in your care against reasonably anticipated threats.
A PIA helps to:
- Identify potential healthcare privacy risks before they result in breaches
- Ensure that your clinic is on top of the latest healthcare privacy regulations and laws
- Establish the best practices for handling sensitive data across your healthcare organization
In some jurisdictions such as Alberta, Canada, PIAs are mandatory for many healthcare professions. Privacy legislation around the world is evolving to require PIAs for all businesses.
Often more than 300 pages long, a PIA is your team’s playbook for compliant operations designed to avoid privacy breaches in your practice and keep you, your staff, and your patients safe.
A proper PIA examines all aspects of your practice for impacts to privacy and establishes a plan for breach prevention.
Get an Expert Privacy Impact Assessment for Your Clinic
Healthcare Privacy Experts
More Than A Checkbox
Comprehensive Approach

Does Your Clinic Require a Privacy Impact Assessment?
Clinics in 11 disciplines in the province of Alberta are required by law to complete, submit and keep-up-to-date a Privacy Impact Assessment.The following professionals are required to submit a PIA to the Office of Information and Privacy Commissioner in Alberta.
- Regulated members of the Alberta Dental Association and College
- Regulated members of the College of Alberta Denturists
- Regulated members of the College of Registered Dental Hygienists of Alberta
- Regulated members of the College of Physicians and Surgeons of the Province of Alberta
- Regulated members of the Alberta College of Pharmacists
- Regulated members of the Alberta College of Optometrists
- Registered members of the Alberta Opticians Association
- Regulated members of the Alberta College and Association of Chiropractors
- Registered members of the Alberta Association of Midwives
- Registered members of the Alberta Podiatry Association
- Regulated members of the College and Association of Registered Nurses of Alberta
Why Regular PIA Reviews Matter
Getting a Privacy Impact Assessment done for your clinic is not a one-time thing. In order to stay aligned with evolving healthcare privacy compliance laws, clinics must complete regular PIA reviews. Apart from privacy laws, technologies used in healthcare are regularly subject to version upgrades and feature additions that require updates to existing PIAs.
Regular reviews make sure your PIA is descriptive of your current clinic configurations and help identify new vulnerabilities before they become privacy breaches. At Brightsquid, we offer annual PIA reviews and ongoing privacy compliance support to help clinics stay compliant, secure, and protected.
