If you're running a healthcare business in Ontario, then you must be aware of and comply with the Personal Health Information Protection Act, 2014 (PHIPA). Noncompliance can entail serious penalties, fines, and/or jail time.
Any individual found guilty of violating PHIPA could be fined up to $200,000 and/or imprisoned for a year.