When you share something deeply personal with a therapist, you’re trusting that it stays between you and them. That trust isn’t just a professional courtesy in Nova Scotia. It’s backed by law. Privacy rights for therapy clients in Nova Scotia are defined by specific legislation, and understanding what those rights actually mean can change how you feel walking into a first session. You have the right to know what information is collected about you, how it’s used, who can see it, and what you can do if something goes wrong. Three things tend to surprise people most: how many laws actually apply, what “confidentiality” does and doesn’t cover, and what you can do if you think your privacy has been violated.
The laws that protect your personal health information in Nova Scotia
Two separate laws govern how your therapy records are handled in Nova Scotia, and most clients don’t know both exist. The first is the Personal Health Information Act, S.N.S. 2010, c. 41, known as PHIA. It came into force on June 1, 2013, and it is Nova Scotia’s primary health privacy law. PHIA governs how regulated health care professionals and organizations in the province collect, use, disclose, retain, and destroy your personal health information. If your therapist is a regulated professional, such as a registered social worker or a psychologist, PHIA applies to their practice.
The second law is federal. PIPEDA, the Personal Information Protection and Electronic Documents Act, also applies to private psychotherapy practices in Nova Scotia because they are considered commercial health activities. So your records may be subject to both a provincial and a federal privacy framework at the same time.
Why does this matter to you? Because it means there are two sets of rules your therapist must follow, and two sets of rights you can exercise. If you ever feel your privacy has been mishandled, you may have recourse under either law, or both. Most clients never need to go there, but knowing the framework exists is part of being an informed participant in your own care.
What “personal health information” actually means in therapy
People often assume their therapy records are just session notes. The legal definition is broader than that. Under PHIA, personal health information includes your name, your contact details, your health history, the reason you sought treatment, what was discussed in sessions, any assessments completed, and information about your mental or physical condition. It also includes billing records, which means even the fact that you attended therapy at a particular clinic is considered personal health information.
This matters because it affects what your therapist can and cannot share. A common misconception is that a therapist can freely tell your family doctor that you’re “doing well in therapy” without your consent. In most cases, that kind of disclosure still requires your authorization, because it involves your personal health information. The exception is when your therapist is part of a coordinated care team and you’ve already consented to information sharing as part of that arrangement.
Another edge case worth knowing: if you pay out of pocket and specifically ask that your insurer not be billed, your therapist should not submit a claim without your consent. Your right to control who receives your information extends to third-party payers. If you have questions about how billing and insurance intersect with your privacy, the FAQ page at Wholetherapy covers some of the most common scenarios.
Who handles your records: custodians and agents under Nova Scotia privacy law
Under PHIA, the regulated health professional running a private practice is called a custodian. Anyone working on their behalf, such as an administrative assistant, a billing contractor, or a supervised trainee, is called an agent. Both custodians and agents have defined legal obligations when it comes to your information.
What this means practically: the receptionist who books your appointment, the person who processes your insurance claim, and the clinician who sees you are all operating under the same privacy framework. They can only access your information to the extent their role requires it. An administrative assistant doesn’t need to read your session notes to book your next appointment, and PHIA reflects that principle.
Privacy rights for therapy clients in Nova Scotia when supervision is involved
Clinical supervision is a normal and important part of how therapists maintain quality of care. A therapist may discuss a case with a supervisor or consultant. In most cases, this is done without identifying information, using only the details necessary to get useful clinical guidance. If your therapist works within a supervision structure, it’s reasonable to ask how your information is handled in that context. A good therapist will answer that question directly and without defensiveness.
At a clinic like Wholetherapy, where clinical supervision is part of the practice model, this question comes up regularly. The short answer is that supervision is considered part of providing care, and the same privacy obligations apply to supervisors as to the treating clinician.
Your right to access and correct your own therapy records
You have the right to see your own records. This surprises some people, who assume that therapy notes are somehow off-limits to the client. They are not. Under PHIA, you can request access to your personal health information, and your therapist must respond to that request in writing within 30 days.
You also have the right to request a correction. If something in your file is inaccurate or incomplete, you can ask for it to be changed. The custodian must respond to that correction request in writing within 30 days as well. They don’t have to agree that a correction is warranted, but they must respond and explain their reasoning if they decline.
One honest tradeoff to understand: reading your own therapy notes can sometimes be disorienting. Clinical notes are written for clinical purposes, not for the client’s eyes, and the language used may feel clinical, detached, or even jarring. This doesn’t mean you shouldn’t access your records if you want to. It just means it can be worth having a conversation with your therapist about what you’re hoping to understand before you make a formal request. Many therapists are willing to walk through their notes with you, which tends to be more useful than reading them cold.
When your therapist can share your information without your consent
Confidentiality in therapy is not absolute. There are specific, narrow circumstances where a therapist is legally or ethically required to share information without your consent, and understanding these limits is part of knowing your actual rights, not a watered-down version of them.
The most commonly cited exception is risk of harm. If a therapist has reasonable grounds to believe that you or someone else is at serious risk of harm, they may be required to disclose that information to protect the person at risk. This is sometimes called the “duty to warn” or “duty to protect,” and it exists in both ethical codes and law.
Other exceptions include court orders, mandatory reporting obligations (such as suspected child abuse), and certain public health situations. These exceptions are narrow. They are not a loophole that allows a therapist to share your information with your employer, your family, or your insurance company without your consent. If someone is pressuring your therapist to disclose information outside of these defined exceptions, your therapist has an obligation to push back.
Privacy rights for therapy clients in Nova Scotia and insurance company requests
Insurance companies sometimes request detailed clinical records as a condition of reimbursement. You have the right to know what is being sent and to consent to it before it goes. If you’re unsure what your insurer is asking for or what your therapist plans to share, ask before signing any release. A general authorization to release records is not the same as a targeted, specific consent, and you are entitled to understand the difference.
What to do if you think your privacy rights have been violated
If you believe your personal health information has been mishandled, you have options. The first step is usually to raise the concern directly with the therapist or clinic. Many privacy issues stem from misunderstandings or administrative errors, and a direct conversation can resolve them quickly. If that doesn’t work, or if the situation is serious, you can file a complaint with the Office of the Information and Privacy Commissioner of Nova Scotia, which oversees PHIA compliance.
If the therapist is a regulated professional, you can also file a complaint with their regulatory body. For example, a registered social worker would be regulated by the Nova Scotia College of Social Workers. Regulatory bodies take privacy complaints seriously because confidentiality is a core professional obligation, not just a legal one.
One thing to be realistic about: the complaints process takes time. It is not a fast resolution. If you are in an active therapeutic relationship and something has gone wrong, it may be worth speaking with a different therapist about how to manage the situation while a formal process unfolds. If you’re considering therapy at Wholetherapy and want to understand how privacy is handled before you start, you’re welcome to contact us with questions before booking.
Practical steps to protect your own privacy as a therapy client
Knowing your rights is one thing. Taking a few practical steps at the start of therapy makes those rights easier to exercise if you ever need to.
- Read the consent form carefully. Every regulated therapist should give you a written consent form before treatment begins. It should explain what information is collected, how it’s used, who it may be shared with, and your rights under PHIA. If the form is vague or you don’t understand something, ask before signing.
- Ask about electronic records. If your therapist uses electronic health records or a client portal, ask how that system is secured and where your data is stored. Cloud-based systems hosted outside Canada may have different privacy implications.
- Be specific about third-party disclosures. If you want your therapist to communicate with your family doctor, your employer’s EAP, or anyone else, ask for a specific consent form that names the recipient and the type of information being shared. A blanket release is broader than you may intend.
- Know your correction rights. If you ever read your records and find something inaccurate, you have 30 days from your request to get a written response. Keep a copy of any written requests you make.
If you’re exploring therapy options and want to understand what a first session actually looks like, including how consent and privacy are handled at the start, the FAQ page has more detail. Wholetherapy also offers EMDR therapy, and the same privacy framework applies to that work as to any other form of psychotherapy.
Frequently asked questions
What privacy rights do therapy clients have in Nova Scotia?
Therapy clients in Nova Scotia are protected by the Personal Health Information Act (PHIA), S.N.S. 2010, c. 41, which came into force June 1, 2013, and by the federal PIPEDA legislation. These laws give you the right to know what personal health information is collected about you, to access your own records, to request corrections, and to consent before your information is shared with third parties. Your therapist is legally required to respond to access and correction requests in writing within 30 days. If you believe your rights have been violated, you can file a complaint with the Office of the Information and Privacy Commissioner of Nova Scotia.
Can my therapist share my information with my family without my consent?
In most cases, no. Your therapist cannot share your personal health information with family members, your employer, or anyone else without your explicit consent, except in narrow circumstances defined by law, such as a serious risk of harm to you or another person, a court order, or a mandatory reporting obligation. The fact that a family member is paying for your therapy does not give them the right to access your records or receive updates about your sessions. If someone is pressuring your therapist to disclose information outside these exceptions, your therapist has an obligation to decline.
Can I read my own therapy records in Nova Scotia?
Yes. Under PHIA, you have the right to request access to your personal health information, and your therapist must respond in writing within 30 days. You also have the right to request a correction if something in your file is inaccurate or incomplete, and the therapist must respond to that request in writing within 30 days as well. Reading clinical notes can sometimes feel disorienting because they are written for clinical purposes, so many clients find it helpful to review them with their therapist rather than reading them in isolation.
Does PHIA apply to private therapy clinics in Nova Scotia?
Yes. PHIA applies to regulated health professionals in private practice, who are considered custodians under the Act. Their staff and contractors acting on their behalf are considered agents and carry the same privacy obligations. Private psychotherapy practices in Nova Scotia are also subject to the federal PIPEDA legislation because they are considered commercial health activities. This means your records at a private therapy clinic are governed by both provincial and federal privacy law at the same time.
What happens to my therapy records if I stop seeing my therapist?
Your records don’t disappear when you stop therapy. PHIA requires custodians to retain personal health information for a defined period after the last date of service, and your rights to access and correct that information continue during the retention period. If your therapist closes their practice or retires, they are required to make arrangements for the secure transfer or storage of your records and to notify you of how to access them. You can ask your therapist at any point what their record retention and destruction policy is, and they should be able to explain it clearly.