When you share something deeply personal with a therapist, you’re trusting that it stays between you and them. That trust isn’t just a professional courtesy. In Nova Scotia, it’s backed by law. Privacy rights for therapy clients in Nova Scotia are defined by specific legislation, and understanding those rights can help you walk into your first session with a clearer sense of what you’re entitled to, what your therapist is obligated to do, and what happens if something goes wrong. Three things matter more than most people expect: which laws actually apply to your situation, what your therapist can and cannot share without your permission, and what you can do if you believe your information was mishandled.
The laws that protect your personal health information in Nova Scotia
Two separate pieces of legislation govern how your therapy records are handled in Nova Scotia, and most clients don’t know either of them by name.
The first is the Personal Health Information Act, S.N.S. 2010, c. 41, commonly called PHIA. It came into force on June 1, 2013, and it is Nova Scotia’s primary health privacy law. PHIA governs how regulated health care professionals and organizations in Nova Scotia collect, use, disclose, retain, and destroy personal health information. That includes your therapy notes, session records, intake forms, and anything else your therapist documents about you.
The second is the federal Personal Information Protection and Electronic Documents Act, known as PIPEDA. PIPEDA also applies to commercial health activities, including private psychotherapy practices in Nova Scotia. So if you’re seeing a therapist in private practice, both laws may apply to how your information is handled.
In practical terms, this means your therapist isn’t just following a professional code of ethics when they protect your records. They are legally required to do so. The overlap between PHIA and PIPEDA can feel complicated, but for most clients, the day-to-day experience is straightforward: your information is protected, and there are formal processes in place if that protection fails.
Who is responsible for your privacy rights under Nova Scotia law
Under PHIA, the people who handle your personal health information fall into two defined categories: custodians and agents. Understanding the difference matters if you ever need to make a complaint or request your records.
Custodians and agents in private therapy practice
A regulated health professional in private practice, such as a registered psychologist or a registered social worker, is considered a custodian under PHIA. That means they are directly responsible for how your personal health information is collected, stored, and protected. Their staff or contractors who handle your information on their behalf, such as an administrative assistant who books your appointments or a billing service that processes your insurance claims, are considered agents. Agents have defined obligations under PHIA as well, even though they are not the primary custodian.
This distinction matters in a real-world scenario: if a clinic’s receptionist accidentally sends your intake form to the wrong email address, the custodian (your therapist or the clinic) is still accountable for that breach, even though the agent made the error. The responsibility doesn’t transfer just because someone else handled the file.
For clients, this means you always have a clear point of accountability. You don’t need to figure out which staff member made a mistake. The custodian is responsible for the actions of their agents, and that’s who you would contact first if you had a concern about how your information was handled.
What your therapist can share without asking you first
Confidentiality in therapy is real, but it is not absolute. There are specific, legally recognized situations where your therapist may disclose your personal health information without your consent, and knowing what those are ahead of time prevents a lot of confusion and fear.
The most commonly misunderstood situation is mandatory reporting. In Nova Scotia, regulated health professionals are required by law to report certain things regardless of what you’ve shared in confidence. These include reasonable suspicion that a child is being abused or neglected, and situations where a client presents a serious and credible risk of harm to themselves or to an identifiable other person. This is not a therapist’s personal choice. It is a legal obligation.
A second situation involves your own care. Your therapist may share relevant information with other members of your health care team, such as your family doctor or a psychiatrist, when it is necessary for your treatment. This is generally considered implied consent, meaning that by seeking care, you’ve implicitly agreed that your providers can coordinate with each other on your behalf.
What your therapist cannot do is share your information with your employer, your family members, or anyone else outside your care circle without your explicit written consent. A common misconception is that insurance companies have automatic access to your therapy notes. They don’t. They may receive a summary or a diagnosis code for billing purposes, but your session content is not theirs to access without your permission.
Your right to access and correct your therapy records in Nova Scotia
Many clients don’t realize they have the right to see their own therapy records. Under PHIA, you can request access to your personal health information, and your therapist or clinic is required to respond to that request.
Requesting a correction to your records
If you believe something in your file is inaccurate or incomplete, you have the right to request a correction in writing. Under PHIA, the custodian must respond to that request in writing within 30 days. This is a firm timeline, not a suggestion.
It’s worth being clear about what “correction” means here. You can request that factual errors be fixed, such as a wrong date, an incorrect medication listed, or a misattributed quote. What you cannot do is demand that a therapist change their clinical opinion or remove their professional observations from your record simply because you disagree with them. If the custodian declines your correction request, they must explain why in writing, and you have the right to have a statement of disagreement added to your file.
This process is more relevant than most people expect. Consider someone who was assessed during a crisis period and later feels that the notes from that time don’t reflect who they are now, or contain a factual error about their history. Knowing you can formally request a review of those records, and that there’s a legal timeline for a response, gives you real recourse rather than just frustration.
If you have questions about how records are handled at a specific clinic, their FAQ page is often a good starting point before making a formal request.
How your therapy records are stored and eventually destroyed
Your records don’t live in your therapist’s office forever. PHIA sets out obligations not just for how information is collected and used, but also for how long it is retained and how it must eventually be destroyed.
Retention periods in Nova Scotia vary depending on the type of professional and the nature of the records. Adult therapy records are typically retained for a minimum of ten years from the last date of service. Records for clients who were minors at the time of treatment are generally kept until the client would have turned 19, plus an additional period. These timelines exist to protect you, not just the clinic. If you need records for a legal proceeding, an insurance claim, or a future health assessment years down the line, those records need to still exist.
When records are destroyed, they must be destroyed securely. Paper records can’t simply be thrown in a recycling bin. Electronic records must be deleted in a way that makes them unrecoverable. This is an area where smaller private practices sometimes fall short, not out of malice, but because secure destruction requires specific processes that not every clinic has formalized.
If you’re considering a clinic and want to understand their record-keeping practices, it’s entirely reasonable to ask during your intake process. A well-run practice should be able to explain their retention and destruction policies clearly.
Privacy rights in therapy: what Nova Scotia law does not cover
PHIA is a strong law, but it has limits. Being clear about those limits helps you understand when you might need to look elsewhere for protection or recourse.
PHIA applies to regulated health professionals and their organizations. If you are seeing someone who is not a regulated health professional, such as a life coach, a peer support worker, or a counsellor who does not hold a regulated designation, PHIA may not apply to them in the same way. That doesn’t mean they have no privacy obligations, PIPEDA may still apply if they operate commercially, but the specific protections and complaint mechanisms under PHIA would not be available to you.
This is a meaningful distinction in Nova Scotia, where the regulation of psychotherapists is still evolving. Not everyone who calls themselves a therapist or counsellor is a regulated professional. If you’re unsure whether your provider is regulated, you can check with the relevant professional college or regulatory body in Nova Scotia.
Another gap: PHIA does not govern what happens to your information once it leaves the health care system. If you share something in a group therapy setting, for example, other group members are not bound by PHIA. Group confidentiality is a professional and ethical expectation, but it is not a legal one in the same way. This is an edge case most posts skip, but it’s one that matters for clients considering group-based treatment.
If you’re exploring therapy options and want to understand how a specific clinic handles these questions, contact us directly to ask before booking.
What to do if you think your privacy rights were violated in Nova Scotia
If you believe your personal health information was mishandled, you have formal options. You don’t have to simply accept it or hope the clinic fixes the problem on their own.
Your first step is usually to raise the concern directly with the custodian, meaning your therapist or the clinic. Many privacy issues are the result of administrative errors rather than deliberate breaches, and a direct conversation can resolve them quickly. Document your concern in writing, even if you start with a phone call, so there’s a record of when you raised it and what response you received.
If the direct approach doesn’t resolve the issue, you can file a complaint with the Office of the Information and Privacy Commissioner of Nova Scotia. The Commissioner has the authority to investigate complaints under PHIA and to make findings about whether a custodian has complied with the law. This process is independent of the clinic, which means you don’t need the clinic’s cooperation to pursue it.
For concerns that fall under PIPEDA rather than PHIA, the Office of the Privacy Commissioner of Canada handles complaints at the federal level.
One honest note: these processes take time. A formal investigation is not a quick fix. If you need immediate action, such as stopping an ongoing disclosure, you may need to seek legal advice in addition to filing a complaint. Knowing this ahead of time helps you set realistic expectations about what the complaint process can and cannot do for you.
Wholetherapy’s approach to privacy is grounded in both the legal requirements of PHIA and the ethical standards of regulated practice. If you’re curious about how records are handled or what to expect before your first session, the FAQ page covers many of the most common questions.
Frequently asked questions
What privacy laws protect therapy clients in Nova Scotia?
Two laws apply to most therapy clients in Nova Scotia. The Personal Health Information Act (PHIA), S.N.S. 2010, c. 41, is Nova Scotia’s provincial health privacy law and governs how regulated health professionals collect, use, disclose, retain, and destroy your personal health information. The federal Personal Information Protection and Electronic Documents Act (PIPEDA) also applies to private psychotherapy practices operating commercially in Nova Scotia. Together, these laws give you meaningful rights over your records and clear accountability for the people who handle them.
Can my therapist share what I say in sessions with anyone?
Your therapist cannot share your session content with employers, family members, or third parties without your explicit written consent. There are specific exceptions: mandatory reporting obligations (such as suspected child abuse or a credible risk of serious harm), and coordination with other members of your health care team when necessary for your treatment. Insurance companies do not have automatic access to your therapy notes. They may receive basic billing information, but your session content is protected.
Do I have the right to see my own therapy records in Nova Scotia?
Yes. Under PHIA, you have the right to request access to your personal health information. If you believe something in your file is factually incorrect, you can submit a written correction request, and the custodian must respond in writing within 30 days. You cannot require a therapist to remove their clinical opinions or professional observations, but factual errors can be corrected, and you have the right to have a statement of disagreement added to your file if your correction request is declined.
How long does a therapist in Nova Scotia keep my records?
Retention periods vary by profession and the nature of the records, but adult therapy records in Nova Scotia are typically retained for a minimum of ten years from the last date of service. Records for clients who were minors at the time of treatment are generally kept until the client would have turned 19, plus an additional period. When records are eventually destroyed, they must be destroyed securely, whether paper or electronic, so that the information cannot be recovered.
What can I do if I think my privacy rights were violated by my therapist in Nova Scotia?
Start by raising the concern directly with your therapist or clinic in writing, since many issues stem from administrative errors and can be resolved quickly. If that doesn’t resolve the problem, you can file a formal complaint with the Office of the Information and Privacy Commissioner of Nova Scotia, which has the authority to investigate under PHIA. For concerns that fall under federal jurisdiction, the Office of the Privacy Commissioner of Canada handles PIPEDA complaints. Be aware that formal investigations take time, so if you need immediate action to stop an ongoing disclosure, seeking legal advice alongside a complaint may be necessary.