Your clinic uses an AI scribe.
Is it compliant?
Alberta's OIPC requires a Privacy Impact Assessment before any AI scribe is used in a medical clinic. Most clinics haven't submitted one. We handle the entire process — intake to OIPC submission.
The compliance gap is wider than you think.
Canada Health Infoway has distributed over 10,000 free AI scribe licenses to physicians nationally. Most have been activated without the required Privacy Impact Assessment.
Under HIA Section 64, every custodian must submit a PIA to the OIPC before implementing an AI scribe — separate from your existing EMR PIA. The OIPC, CPSA, ACFP, and AMA have all confirmed this.
Fixed scope. Fixed price. No surprises.
Everything your clinic needs to be compliant — prepared by experienced privacy specialists.
- Review existing PIA against Sept 2025 guidance
- AI scribe addendum drafted
- Updated vendor assessment
- OIPC submission
- One revision round included
- Full PIA drafted to OIPC AI Scribe Guidance
- Vendor agreement & IMA review
- Data flow diagrams
- Patient consent forms & collection notices
- Privacy policies & breach response plan
- Two revision rounds included
- OIPC submission & follow-up
- Everything in AI Scribe Compliance
- Multi-vendor data flow mapping
- Cross-tool compliance analysis
- Staff training materials
- Extended revision rounds
- Dedicated project coordinator
From first call to OIPC submission.
Compliance Check
Free assessment against OIPC requirements. No cost, no obligation.
Intake Session
Focused session to map your AI scribe setup, data flows, and vendor relationship.
Drafting & Review
Privacy specialist drafts your PIA and documents. You review, we finalize.
OIPC Submission
We submit on your behalf and handle follow-up. You focus on patients.
The PIA requirement for AI scribes is confirmed by every major regulatory body in Alberta.
Compliance isn't a one-time event.
AI regulations in Alberta are changing fast. The OIPC issued new guidance in September 2025, proposed AI-specific legislation in December 2025, and provincial privacy management programs are mandatory by June 2026.
Your AI scribe vendor pushes updates. New features get enabled. Data flows change. Each one can trigger a PIA amendment you don't know about until it's too late.
Coda's AI Governance service keeps your clinic current — so a vendor update doesn't become a compliance gap.
- Quarterly compliance reviews
- PIA amendments when vendors update
- Regulatory change alerts & impact briefs
- Annual gap analysis refresh
- Priority support — 24hr response
- Vendor contract review on renewal
- Breach response guidance