This presentation provides a foundational overview of health privacy principles and legislation relevant to Ontario hospitals. It introduces the ten privacy principles that underpin Canadian privacy laws, with a focus on the Personal Health Information Protection Act (PHIPA), the Personal Information Protection and Electronic Documents Act (PIPEDA), and the Freedom of Information and Protection of Privacy Act (FIPPA). The session covers the rights and responsibilities associated with personal health information (PHI) and personal information (PI), the process for handling freedom of information requests, and the importance of cybersecurity awareness.