When you share something personal with a therapist, you’re trusting that it stays between you and them. That trust isn’t just professional courtesy. In Nova Scotia, it’s backed by law. Privacy rights for therapy clients in Nova Scotia are defined by specific legislation that tells your therapist exactly what they can collect, how they can use it, and when, if ever, they can share it. Most people walking into a first session have no idea these protections exist, let alone what they cover. Three things shape this more than people expect: which law applies to your situation, what exceptions exist, and what you can actually do if something goes wrong.
The law behind your privacy rights as a therapy client in Nova Scotia
Nova Scotia has its own health privacy law, and it’s more specific than most people realize. The Personal Health Information Act, S.N.S. 2010, c. 41, known as PHIA, came into force on June 1, 2013. It governs how regulated health care professionals and organizations in the province collect, use, disclose, retain, and destroy personal health information. That includes therapists in private practice.
PHIA defines two key roles. Your therapist is a “custodian,” meaning they’re responsible for your records and how they’re handled. Anyone working on their behalf, such as an administrative assistant or a contracted billing service, is an “agent” with their own defined obligations under the law. This matters because it means the protection doesn’t stop at your therapist’s door. It extends to everyone in the practice who might touch your file.
There’s also a federal layer. PIPEDA, the Personal Information Protection and Electronic Documents Act, applies to commercial health activities, which includes private psychotherapy practices in Nova Scotia. In practice, PHIA and PIPEDA overlap significantly, but PHIA is the more specific and directly applicable law for most therapy situations in this province.
The common misconception is that privacy in therapy is just an ethical guideline. It isn’t. It’s a legal obligation with real consequences for practitioners who don’t follow it.
What personal health information your therapist can collect
Your therapist can only collect information that is reasonably necessary for providing your care. That’s the standard PHIA sets. It’s not a blank cheque to gather whatever seems interesting or useful.
In a typical intake process, a therapist will ask about your presenting concerns, your mental health history, any medications you’re taking, your support network, and relevant background. If you’re receiving EMDR therapy, they may also gather detailed information about specific memories or trauma responses, because that’s clinically necessary for that treatment. The collection is tied to purpose.
What counts as personal health information under Nova Scotia privacy law
PHIA covers information about your physical or mental health, your health history, the services you’ve received, and your identity as a patient. This includes your name, contact details, and anything in your clinical notes. It also includes information about your family members if it’s relevant to your care, which can come up in couples therapy or when a therapist is gathering family history.
One edge case worth knowing: if you pay out of pocket and don’t involve insurance, your therapist still has the same obligations under PHIA. The law applies regardless of how the service is funded. Some clients assume that going private means fewer records are kept. That’s not accurate. The clinical record exists either way.
When your therapist can share your information without asking you first
This is the section most people want to read carefully. Confidentiality in therapy is real, but it is not absolute. There are specific situations where a therapist is permitted or required to disclose information without your consent.
The most commonly known exception is risk of harm. If a therapist believes you are at serious risk of harming yourself or someone else, they may be required to act, which can involve contacting emergency services or a third party. This isn’t a PHIA invention. It’s a duty that exists across professional regulatory bodies and common law.
Other exceptions include:
- Disclosure to another health care provider directly involved in your care, such as your family doctor
- Compliance with a court order or legal requirement
- Reporting obligations under other Nova Scotia legislation, such as child protection laws
- Quality assurance or oversight activities within regulated health professions
What this does NOT include: your employer, your insurance company (without your consent), your family members, or anyone else who is simply curious or concerned. A therapist cannot share your records with your spouse because your spouse asked. They cannot confirm you’re a client to your employer. These boundaries hold even when the person asking has good intentions.
Your right to access and correct your own records
You have the right to see your own clinical records. Under PHIA, you can make a written request to your therapist to access your personal health information, and they must respond. This surprises some clients who assume the notes belong entirely to the therapist. The information in those notes belongs to you in a meaningful sense, even if the physical record belongs to the practice.
You also have the right to request a correction. If something in your file is inaccurate or incomplete, you can submit a written request for a correction, and your therapist must respond in writing within 30 days. They don’t have to agree with your interpretation of events, but they do have to acknowledge your request and either make the correction or explain in writing why they won’t.
What happens if your therapist denies your access request
There are limited grounds for refusing access. A therapist might decline if providing the information could cause serious harm to you or someone else, or if the information relates to another person who hasn’t consented to disclosure. If your request is denied, you have the right to complain to the Nova Scotia Office of the Information and Privacy Commissioner. That office has authority to investigate and make findings under PHIA.
One practical note: requesting your records is not the same as getting a copy of your therapist’s personal working notes. Clinicians sometimes keep separate reflective notes that are not part of the formal clinical record. Whether those are accessible depends on how they’re classified and used. If you have questions about what’s in your file, asking your therapist directly is always a reasonable first step before filing a formal request.
How your information is stored and what happens when therapy ends
PHIA requires that personal health information be protected against unauthorized access, use, or disclosure. In practical terms, this means your therapist should be using secure systems for electronic records, keeping paper files in locked storage, and having clear policies about who in their practice can access your file.
When therapy ends, your records don’t disappear. Therapists are required to retain records for a minimum period set by their regulatory body. For most regulated health professionals in Nova Scotia, this is at least ten years from the last date of service, or longer if the client was a minor at the time of treatment. After the retention period, records must be destroyed in a way that protects your privacy, not simply thrown in a recycling bin.
A common concern: what happens to your records if your therapist retires, closes their practice, or passes away? PHIA requires that custodians have a plan for this. If you’re working with a practice like Wholetherapy, there are administrative structures in place to handle record transfers and notifications. If you’re ever uncertain, you can ask your therapist directly what their plan is. That’s a completely reasonable question to raise.
Privacy considerations specific to online and remote therapy in Nova Scotia
Telehealth and video therapy have become standard options, and they raise their own privacy questions. The same PHIA obligations apply whether your session happens in person or over a video platform. Your therapist is still the custodian of your information, and the same rules about collection, use, and disclosure apply.
The practical difference is that technology introduces additional risk. A video platform that isn’t properly secured, a session taken in a shared space, or a recording made without consent can all create privacy problems that an in-person session wouldn’t. Therapists using telehealth are expected to use platforms that meet reasonable security standards and to inform clients about how those platforms handle data.
If you’re doing remote sessions, a few things are worth considering on your end as well. Taking a session in a private space, using a personal device rather than a work device, and being aware of who might overhear are all practical steps. Your therapist’s obligations don’t extend to controlling your environment, but they should be having a conversation with you about these considerations as part of informed consent.
For questions about how Wholetherapy handles telehealth privacy specifically, the FAQ page covers common questions about how sessions are conducted and what platforms are used.
What to do if you think your privacy rights have been violated
If you believe your personal health information has been collected, used, or disclosed in a way that violates PHIA, you have options. The first step is usually raising it directly with your therapist or the practice. Mistakes happen, and many concerns can be resolved at that level without escalation.
If that doesn’t resolve it, you can file a complaint with the Nova Scotia Office of the Information and Privacy Commissioner. That office has the authority to investigate complaints, request records, and make findings. They can also recommend remedies, though their powers are primarily investigative and recommendatory rather than punitive in the way a court would be.
If your therapist is a regulated professional, such as a registered social worker or a psychologist, you can also file a complaint with their regulatory body. Regulatory bodies have their own codes of conduct that include confidentiality obligations, and a privacy violation may also be a professional conduct issue.
One honest note: the process takes time and can feel daunting. If you’re unsure whether what happened actually constitutes a violation, speaking with a patient advocate or a lawyer who handles privacy matters can help you assess the situation before you decide how to proceed. You don’t have to figure it out alone.
If you have questions about how Wholetherapy handles your personal health information, or if you’d like to understand your rights before starting therapy, you’re welcome to contact us directly. Knowing what to expect before your first session is a reasonable thing to want.
Frequently asked questions
What privacy rights do therapy clients have in Nova Scotia?
Therapy clients in Nova Scotia are protected primarily by the Personal Health Information Act (PHIA), which came into force on June 1, 2013. Under PHIA, your therapist can only collect information necessary for your care, must keep it secure, and cannot share it without your consent except in specific circumstances defined by law. You also have the right to access your own records and to request corrections in writing. The federal PIPEDA law adds an additional layer of protection for clients of private psychotherapy practices.
Can my therapist share my information with my family or employer?
No. Your therapist cannot share your personal health information with your family members, your employer, or anyone else outside your circle of care without your consent. This applies even if the person asking is genuinely concerned about you. The main exceptions are situations involving serious risk of harm, court orders, or mandatory reporting obligations under other legislation. If someone contacts your therapist asking about you, your therapist is not permitted to confirm or deny that you’re a client without your permission.
How long does a therapist in Nova Scotia keep my records?
Regulated health professionals in Nova Scotia are required to retain client records for a minimum period set by their regulatory body, which is typically at least ten years from the last date of service. If you were a minor when you received services, the retention period is generally longer. After the required period, records must be destroyed in a way that protects your privacy. Your therapist should be able to tell you their specific retention policy if you ask.
Can I see my own therapy records in Nova Scotia?
Yes. Under PHIA, you have the right to request access to your personal health information in writing. Your therapist must respond to that request, and if they refuse, they must explain the reason in writing. You can also request that inaccurate or incomplete information be corrected, and your therapist must respond within 30 days. If your request is denied and you believe the denial is unjustified, you can file a complaint with the Nova Scotia Office of the Information and Privacy Commissioner.
Are online therapy sessions in Nova Scotia covered by the same privacy laws?
Yes. The same PHIA obligations that apply to in-person therapy apply to video and telephone sessions. Your therapist is still the custodian of your information and must use secure platforms and follow the same rules about collection, use, and disclosure. The technology introduces some additional risks, such as unsecured platforms or sessions taken in non-private spaces, which is why therapists offering telehealth should discuss privacy considerations with you as part of the informed consent process. If you have specific questions about how your sessions are conducted, the FAQ page is a good starting point.