Prince Edward Island: the one Atlantic province where a clinic sits under both laws

Your business falls under federal law. And on Prince Edward Island the provincial health statute does not displace federal law: it stacks on top of it.

Which privacy law applies to a Prince Edward Island business that has its calls answered?

Federal law: the Personal Information Protection and Electronic Documents Act, PIPEDA. Prince Edward Island has no general private-sector privacy statute, and its access statute, the FOIPP Act, covers departments, bodies designated by regulation, the Executive Council Office, the offices of officers of the Assembly and local public bodies.

The Island does have a health statute, the Health Information Act, c. H-1.41. But it has received no federal exemption order, unlike those of Ontario, New Brunswick, Nova Scotia and Newfoundland and Labrador.

The consequence is the most notable fact among the four Atlantic provinces: an Island clinic is subject to the provincial health statute and to federal law at the same time. This is not legal advice.

Why this page is shorter, and sharper, than you might expect

You run a shop in Charlottetown or Summerside, you may employ three people, and you want a clear answer before you plug in a service that answers your calls.

The answer is sharp, because for ordinary commercial activity there is a single text to know, and it is federal. The Island access statute does not reach you: its definition of a public body, at section 1(k), lists public entities, and a business is not among them.

On that point the Island falls under federal law as it does everywhere in the country outside Quebec, Alberta and British Columbia — the three provinces carrying a general private-sector statute. We say so rather than manufacture an Island difference: for ordinary commercial activity, what changes for you is read inside the federal regime, and the last section of this page gives its most concrete part — the breach notice and the record to keep.

Where precision matters is for clinics and professional practices. That is the subject of the next section, and it is the point on which the Island differs from its three neighbours.

No exemption order: the two regimes stack

Four provincial health statutes have received a federal order excluding their custodians from Part 1 of the federal act: Ontario, New Brunswick, Nova Scotia and Newfoundland and Labrador. The Island statute is not among them, and Prince Edward Island is absent from the federal lists we read.

For an Island clinic, pharmacy or practice, that means two bodies of rules to hold at once over the same information, rather than one displacing the other. Writing that an Island clinic « falls under provincial law rather than federal law » would be wrong.

We owe you an honest caveat: our conclusion rests on an absence observed across every source consulted, including the Canada Gazette consolidated index, and not on a reading of the authoritative federal list — that page was unreachable during our research.

Who is a custodian on the Island, and what a breach requires

The Island statute defines a custodian at section 1(e): a person or organisation that collects, keeps, uses or discloses personal health information to provide or assist in providing care, to plan and manage the health system, or to deliver a government programme relating to care. We read the official consolidation, current to 30 March 2026.

Section 36(1)(c) requires written notice to the individual and to the commissioner, at the first reasonable opportunity, where information is stolen, lost, disposed of other than as permitted, or disclosed to or accessed by an unauthorised person.

Section 36(2) carries an exception: where the custodian reasonably believes there will be no adverse effect on the individual's care, or on their mental, physical, economic or social well-being. The statute also sets penalties; those are statutory maximums, and we publish no figure on this page rather than let a maximum read as a usual amount.

One office for both provincial statutes

The Island's Information and Privacy Commissioner is an officer of the Legislative Assembly, and administers both the access statute and the health statute — the second referring back to Part 3 of the first. The verified entry point is the office's page on the Assembly site.

For ordinary commercial activity that is not the office you write to: a customer complaint about a business's use of their information goes to the Office of the Privacy Commissioner of Canada.

We name no individual: the names of office-holders we came across were dated and were not rechecked. A stale name on a page about law is a visible and needless error.

Recording a call, and what leaves the province

The Criminal Code does not stop a business that is party to a call from recording it: the exception in section 184(2)(a), read with section 183.1, is satisfied by the consent of one party. Privacy law requires the caller to be told at the start of the call about the recording and its purpose, the recording not to be used for another purpose, a different route to be offered to someone who declines, access to be given on request, and retention to be limited.

At Zenvox the disclosure is spoken before the microphone opens and cannot be switched off.

Since 1 November 2018 the federal breach rule applies to you: report to the federal commissioner and notify affected individuals where there is a real risk of significant harm, and keep a record of every breach for 24 months. And the split holds here as elsewhere: federal law governs information moving out of the province or out of the country. What leaves in our case, and for how long, is written at the foot of this page; we do not rewrite it here.

What we read, and when

Checked on 2026-09-15

What the product puts on your side

When two regimes stack, the same mechanisms serve both.

Privacy policySecurity and data handlingOur subprocessorsTransfers and incidents