It's Canada, so HIPAA wouldn't apply. A Canadian equivalent, presumably, would have to apply.