Yes, hospitals have been covered under the Personal Health Information Protection Act (PHIPA) since 2004. However, PHIPA only governs the collection, use and disclosure of personal health information and not other types of information. With the introduction of FIPPA, requestors have a much broader right of access to records held by hospitals. For example, requests may be made to access records under a hospital’s custody or control relating to administrative and operational functions, financial considerations and some personal information, such as salaries of employees earning more than $100,000.