PHI

Personal Health Information

In plain language

Health details linked to a specific person, such as a diagnosis, treatment or health card number.

The metaphor

Like the contents of a patient's chart: it belongs to the patient, and the clinic is trusted to look after it.

Going deeper

How it works

It covers anything about a person's health, care or payment for care.
It is among the most sensitive kinds of personal information.
Stricter rules may apply, so check with your regulator.
Access should be limited to those who need it and logged.

What can go wrong (example scenario)

A small physio clinic emailed treatment summaries to patients from a personal account. One went to the wrong address, and the clinic had to work out what it owed that patient.

How WILDCARD handles it

Policies and records that cover personal information are vCIO outputs. Managed Compliance is the quote-only card for ongoing compliance work and shows as coming soon.

In practice

A clinic restricts chart access by role.
A practice uses a secure portal in place of email for results.
An office checks which provincial rules apply to it.

A question owners ask

Which law applies to my clinic?

It depends on your province and your role. Ask a lawyer or your regulatory college, and have your IT provider support the safeguards.

Where WILDCARD handles this

Managed
Compliance

Coming soon

✨

vCIO

Fractional CIO on retainer
Moonlight, Sunlight, Starlight tiers
Credits for single outputs

Start with vCIO

Related terms

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →