AI Governance for Healthcare

Helping Alberta clinics navigate
AI scribe compliance.

If your clinic uses an AI scribe, Alberta's Health Information Act requires a Privacy Impact Assessment before implementation. We guide physicians through the process from start to OIPC submission — so you can focus on patients.

Book a Compliance Check Learn About the Requirement
The Requirement

What Alberta physicians need to know.

AI scribes are making a real difference in clinics across Alberta — reducing documentation time, easing burnout, and letting physicians focus on patients. But these tools record patient conversations and transmit health information to third-party vendors, which triggers specific obligations under the Health Information Act that most clinics haven't yet addressed.

Do I need a separate PIA for my AI scribe?
Yes. Your existing EMR PIA doesn't cover it. The AI scribe involves different data flows, a different vendor relationship, and different privacy risks — including audio recording and third-party processing. The OIPC requires a separate submission.
I got my scribe through the Infoway program. Am I covered?
No. Infoway has distributed over 10,000 free licenses nationally, but compliance remains entirely the physician's responsibility. The OIPC has confirmed it has not reviewed any vendor products in the program.
What goes into an AI scribe PIA?
The OIPC published specific guidance in September 2025. A compliant submission addresses data flows, vendor obligations under Section 66, patient consent, collection limitations, how you handle AI-generated errors, security safeguards, breach procedures, and ongoing review processes.
What if I've been using the scribe without one?
Most clinics are in the same position. The law requires submission before implementation, so getting current is important. It's significantly easier to submit proactively than to respond to a complaint or investigation without a PIA on file.
Can I complete the PIA myself?
The OIPC provides a general template. But an AI scribe PIA involves nuances — Cloud Act implications, vendor IMA requirements, data residency — that the template doesn't address. Most clinics find it more efficient to work with a specialist.
Sources: OIPC AI Scribe PIA Guidance · CPSA Statement · ACFP Guidelines · AMA Resources
What We Do

We handle it. You stay with your patients.

We work with experienced privacy specialists who know AI scribe vendors, HIA requirements, and the OIPC submission process. Here's what we take off your plate.

Privacy Impact Assessments

Full AI scribe PIAs drafted to the OIPC's September 2025 guidance — from intake to submission.

Vendor & Contract Reviews

We review your AI scribe vendor agreement and Information Manager Agreement against HIA Section 66.

Policies & Documentation

Consent forms, collection notices, privacy policies, and breach response plans — specific to your setup.

How It Works
1

We learn about your clinic

A brief conversation about your AI scribe setup — which tool you use, how it's integrated, and how your clinic operates. We ask the questions. You just answer them.

2

We draft everything

Our privacy specialist builds the full PIA and all supporting documents — data flow diagrams, vendor review, consent forms, privacy policies, breach plan — drafted to the OIPC's September 2025 guidance.

3

You review it

We send you the draft. You read through it, let us know if anything looks off, and we make any adjustments. Two revision rounds are included.

4

We submit to the OIPC

Once you're satisfied, we submit on your behalf and handle any follow-up. Your clinic is compliant. Back to patients.

What's Included

Everything your clinic needs to be compliant.

Your clinic already has an EMR PIA on file. The OIPC now requires a separate submission for your AI scribe. Here's what we handle for you.

AI Scribe PIA

One clinic. One AI scribe tool. Any number of physicians.

Our privacy specialist drafts everything to the OIPC's September 2025 AI Scribe Guidance. You review the draft, we handle the rest — from intake to OIPC submission.
Full PIA drafted to OIPC AI Scribe Guidance
Patient consent forms & collection notices
Vendor agreement & IMA review
Privacy policies specific to your AI scribe
Data flow diagrams
Breach response plan
Two revision rounds
OIPC submission & follow-up
$3,000
Fixed fee · 4–6 week turnaround
Book a Conversation
Using more than one AI tool?
Some clinics use multiple AI tools beyond their scribe. Each tool involves a separate vendor, separate data flows, and separate compliance considerations. We'll scope it during your free compliance check.
Get in touch →
After your PIA

Regulations change. Vendors update. We keep you current.

Once your PIA is submitted, your compliance obligations don't stop. The OIPC expects your PIA to reflect your current environment. For clinics that want someone watching this for them, we offer an ongoing governance partnership.
  • Quarterly compliance reviews
  • PIA amendments when vendors update
  • Regulatory change alerts
  • Annual gap analysis refresh
  • Priority support — 24hr response
  • Vendor contract review on renewal
  • Breach response guidance
$249/mo
or $2,500/year · available after a completed engagement

The AI scribe PIA requirement is confirmed by the following Alberta regulatory and professional bodies.

OIPC Alberta CPSA Alberta College of Family Physicians Alberta Medical Association HIA Section 64