The Health Insurance Portability and Accountability Act (HIPAA) is a US federal law regulating the privacy and security of personal health information (PHI) in the health industry, including organizations such as healthcare providers and health insurers. Subcontractors and business associates of health organizations must also comply with HIPAA.
In Canada, PIPEDA covers all private-sector organizations that handle any kind of personal data, including health information. The purpose and scope of PIPEDA are more similar to the EU’s General Data Protection Regulation (GDPR) than to HIPAA.
Read more about HIPAA