If you’ve ever wondered who can read your therapy notes, whether your employer could get access to them, or what happens to your records if your therapist retires, you’re asking exactly the right questions. Nova Scotia privacy laws for therapy records are more specific than most people realize, and understanding them before you start therapy can make the whole process feel a lot less uncertain. The short answer: your personal health information is protected by provincial law, you have real rights over it, and your therapist has real obligations. The longer answer involves two overlapping laws, some important exceptions, and a few situations where the rules get complicated.
What Nova Scotia privacy law actually covers for therapy records
The law that governs your therapy records in Nova Scotia is called the Personal Health Information Act, commonly known as PHIA. It came into force on June 1, 2013, and it sets out exactly how regulated health professionals must handle your personal health information: how they collect it, use it, share it, store it, and eventually destroy it. This isn’t a general privacy law. It was written specifically for health care contexts, which means it addresses things like session notes, intake forms, assessment results, and any other information your therapist records about you.
Personal health information under PHIA includes your name, contact details, health history, diagnoses, treatment plans, and anything else that identifies you and relates to your physical or mental health. That covers a lot of what happens in a therapy room. Your therapist’s notes from a session about your anxiety, your trauma history, or your relationship patterns are all personal health information under this law.
Who is responsible for protecting your records
Under PHIA, regulated health professionals in private practice are called “custodians.” That means your therapist is legally responsible for your records. Any staff or contractors working on their behalf, such as an administrative assistant who schedules your appointments or a billing service that processes your invoices, are called “agents” and carry their own defined obligations under the law. This matters because it means the protection around your records doesn’t stop at your therapist’s door. Everyone who touches your information in a professional capacity is bound by the same rules.
The second law most people don’t know about: PIPEDA and private therapy practices
PHIA isn’t the only law in play. The federal Personal Information Protection and Electronic Documents Act, known as PIPEDA, also applies to private psychotherapy practices in Nova Scotia. This surprises a lot of people. Many assume that because PHIA exists at the provincial level, federal law doesn’t apply. That’s not quite right.
PIPEDA covers commercial activities, and a private therapy practice qualifies. What this means practically is that your therapist is operating under two overlapping frameworks, both of which require them to handle your information with care, collect only what they need, and be transparent about how it’s used. In most day-to-day situations, PHIA and PIPEDA point in the same direction. But if you ever have a complaint about how your information was handled, knowing that both laws exist gives you two potential avenues for recourse.
How PHIA and PIPEDA work together
Think of PHIA as the more detailed, health-specific framework and PIPEDA as the broader commercial privacy floor. PHIA tends to be more prescriptive about things like timelines for responding to requests and the specific obligations of custodians. PIPEDA adds a layer of accountability around consent and transparency. A well-run therapy practice will have policies that satisfy both. If you’re ever unsure whether a practice is meeting its obligations, you can ask directly about their privacy policy before your first session.
What your rights actually look like in practice
Knowing the law exists is one thing. Knowing what you can actually do with it is another. Under PHIA, you have the right to request access to your own personal health information. You also have the right to request a correction if something in your records is inaccurate or incomplete. When you make a correction request in writing, your therapist must respond in writing within 30 days.
That 30-day window matters. If you’re preparing for a legal proceeding, a disability application, or a custody matter and you need your records corrected before a deadline, you should make your request as early as possible. Thirty days is the maximum response time, not a guaranteed turnaround.
One thing many clients don’t realize: requesting access to your records doesn’t mean your therapist has to hand over their raw session notes exactly as written. In some cases, a summary or a structured report may be provided instead. If you have a specific reason for needing your records in a particular format, explain that when you make your request. A therapist who understands what you’re trying to accomplish can often provide something more useful than a generic printout.
When your therapist can share your information without asking you first
This is the part of privacy law that most clients want to understand before they start therapy, and it’s also the part that gets misrepresented most often. The common assumption is that therapy is completely confidential, full stop. The reality is more nuanced, and a good therapist will walk you through the exceptions in your first session.
There are situations where your therapist is legally required to share information without your consent. These include situations where there is a serious and imminent risk of harm to you or to someone else, where there is a reasonable suspicion of child abuse or neglect, and where a court order or legal process compels disclosure. These aren’t loopholes. They’re protections built into the law because some situations involve competing obligations that outweigh individual privacy.
What “serious and imminent risk” actually means
Therapists don’t report every expression of distress or every mention of dark thoughts. The threshold for mandatory disclosure is specific: the risk must be serious, it must be credible, and it must be imminent. A client who says they’ve been having passive thoughts about not wanting to be alive is in a very different situation from a client who has a specific plan and a timeline. Your therapist is trained to make these distinctions. Understanding that the bar is high can help you feel safer being honest in sessions.
Nova Scotia-specific considerations: geography, regulation, and access
Nova Scotia has a relatively small regulated health professional community compared to larger provinces, and that has some practical implications for therapy clients. Regulated psychotherapists in Nova Scotia operate under the oversight of their respective colleges, which means their obligations under PHIA are tied to their professional registration. If you’re seeing someone who is not a regulated health professional, the picture changes. PHIA applies to regulated professionals and organizations. Someone offering counselling services without a regulated designation may not be a custodian under PHIA, which means the same legal protections may not apply to your records.
This is worth asking about before you start working with anyone. “Are you a regulated health professional in Nova Scotia?” is a reasonable question, and a straightforward one. If the answer is yes, PHIA applies. If the answer is unclear or no, you’ll want to ask specifically about how your records are stored and protected.
For clients in rural Nova Scotia or other parts of Atlantic Canada who are accessing therapy remotely, the same rules apply as long as your therapist is registered in Nova Scotia. Distance doesn’t change the legal framework. You can find more information about how Wholetherapy handles these questions on the FAQ page.
Red flags: situations where your privacy rights may not be protected
Most therapists take their privacy obligations seriously. But there are situations where clients’ records are handled in ways that fall short of what the law requires, and knowing what to watch for can protect you.
One common issue is unclear consent. Before your therapist collects any personal health information, they should explain what they’re collecting, why, and how it will be used. If you’re handed a stack of forms with no explanation and told to sign, that’s worth slowing down. You have the right to ask questions before you sign anything.
Another issue is vague policies around third-party sharing. If your therapy is being funded through an employee assistance program, an insurance plan, or a third-party payer, your therapist may be required to share some information with that payer. The extent of that sharing should be explained to you upfront. “Your insurance company may receive a diagnosis code and session dates” is very different from “your employer’s EAP provider receives your session notes.” Ask specifically what gets shared and with whom.
If you’re ever concerned that your records have been shared without your consent in a way that wasn’t legally required, you have the right to make a complaint. PHIA provides a formal process for this. You can also contact us at Wholetherapy if you have questions about how records are handled before you begin.
How to take the next step if you have questions about your records
If you’re considering therapy and privacy is one of the things holding you back, that’s a completely reasonable place to be. A lot of people delay getting support because they’re not sure who might find out, or what happens to what they say. The answer, under Nova Scotia law, is that your information is protected, your therapist has legal obligations, and you have rights you can actually exercise.
Before your first session, you can ask your therapist directly: What is your privacy policy? Who has access to my records? What would you be required to disclose and under what circumstances? A therapist who can answer these questions clearly and without defensiveness is a good sign.
If you’re interested in working with a therapist who uses EMDR therapy for trauma, or if you want to understand more about how Wholetherapy approaches confidentiality and record-keeping, the best first step is a direct conversation. Wholetherapy serves clients in Dartmouth, Nova Scotia, and across Atlantic Canada, and the team is used to answering these questions before a first appointment is ever booked. Reach out through the contact us page to start that conversation.
Frequently asked questions
Can my employer access my therapy records in Nova Scotia?
In almost all circumstances, no. Your employer does not have the right to access your therapy records without your written consent. If your therapy is funded through a workplace employee assistance program, the EAP provider may receive limited administrative information such as the number of sessions used, but your session content and clinical notes are not shared with your employer. If you’re ever unsure what an EAP provider receives, ask your therapist and the EAP directly before your first session.
What Nova Scotia privacy laws apply to therapy records?
Two laws apply. The Personal Health Information Act (PHIA), which came into force in Nova Scotia on June 1, 2013, is the primary provincial law governing how regulated health professionals collect, use, and protect your personal health information. The federal Personal Information Protection and Electronic Documents Act (PIPEDA) also applies to private therapy practices as commercial activities. Together, these laws set out your rights and your therapist’s obligations.
Can I see my own therapy records in Nova Scotia?
Yes. Under PHIA, you have the right to request access to your personal health information. You can also request a correction in writing if you believe something in your records is inaccurate, and your therapist must respond in writing within 30 days. The format of what you receive may vary: in some cases a summary or structured report is provided rather than raw session notes. If you have a specific reason for needing your records in a particular format, explain that when you make your request.
When can a therapist share my information without my permission?
There are specific, legally defined situations where a therapist may or must share information without your consent. These include situations involving a serious and imminent risk of harm to you or another person, reasonable suspicion of child abuse or neglect, and valid court orders or legal processes. These exceptions are not broad. The threshold for mandatory disclosure is high, and your therapist is trained to assess these situations carefully. Your therapist should explain these exceptions to you during your first session.
What happens to my therapy records if my therapist retires or closes their practice?
Under PHIA, custodians have obligations around the retention and eventual destruction of personal health information, and those obligations don’t disappear when a practice closes. If your therapist retires or closes their practice, they are required to make arrangements for the secure transfer or storage of your records and to notify you about how your information will be handled. You should receive information about how to access your records going forward. If you’re ever in this situation and can’t get a clear answer, you have the right to make a formal inquiry or complaint under PHIA.