• Privacy Information Event coming to Calgary details to be announced soon •

Your Privacy Girl

We didn't just raise the bar. We are the bar.

Education that is lived, not just learned.

Lived · Not Learned
Kristi, founder of Your Privacy Girl
Piper, Your Privacy Guide
Meet Piper
Your Privacy Educator

Meet Piper.
Unlike anything you've seen.

Piper is your Privacy Educator at the heart of the Masterclass.

She delivers every module the way great educators do, with warmth, with conviction, and with something that goes beyond the content itself.

Piper is more than a vision; she is the soul behind this.

She does not sell; she states. And what she educates stays with you long after the course ends. And no, there won't be a test. That's just not our style.

▶ Watch the Masterclass Short
About Kristi

Privacy isn't a checkbox.
It's a standard of care.

Nearly 20 years in the privacy industry.

I'm Kristi, the founder of Your Privacy Girl. Your Privacy Girl exists because we knew we could do this better. So much better. Privacy education isn't an option. It's a requirement.

PHIPA Decision 260 was clear. Having policies in place is not enough. It is the responsibility of the health information custodian to ensure that all staff are actually compliant with the Act. Not just informed. Compliant. It is not acceptable to fail to provide privacy training.

Informed by PHIPA Decision 260, Information and Privacy Commissioner of Ontario

Simple. Easy. Yours, anywhere and anytime.

"Privacy is not black and white, there's grey."

Frank Work, Former Privacy Commissioner of Alberta
The Privacy Masterclass
The only cinematic, 6-module privacy masterclass purpose-built for Canadian health practices. Designed for real retention, not checkbox completion.
Health Privacy Specialist
Deep expertise in Canadian health privacy legislation as it applies to health practices across the country. Not generic privacy legislation but the exact framework your practice operates under.
Privacy Impact Assessments
End-to-end PIA development and amendments for health practices, including expansion scenarios, new technology, and third-party integrations.
Direct Consulting
One-on-one consulting for practices navigating complex compliance questions, breach response, or building a privacy framework from the ground up.
The Privacy Masterclass

6 modules. One standard.

01
The Foundation
Why Canadian health privacy exists, what it means for your practice, and the framework every health professional needs to understand before anything else.
02
The Consent Conversation
The four qualities of valid consent, express vs. implied, cloud storage, snooping, and the real-world scenarios that trip practices up most.
03
When They Leave
What happens to client information after the relationship ends. Anchored in Canada's first health privacy administrative monetary penalty.
04
The Team Trap
Staff access, a Friday Night Breach scenario, College standards, and a six-step action list for getting your whole team aligned.
05
When It Goes Wrong
Breach response, notification obligations, and the hard lessons from the 2021 Newfoundland cyberattack, a case study in what not to do.
06
The Privacy-First Practice
Building a culture where privacy is lived, not performed. The philosophical heart of everything and the standard your practice is now held to.
What We Offer

The full picture
of privacy compliance.

1.5 hours to complete at your own pace

Watch on any device including your phone, tablet, or computer

Counts toward your Continuing Competence Program requirements

✦ Privacy Masterclass Certification issued to practice upon completion
Privacy Impact Assessments
Full PIA development for new or expanding practices, plus amendments for practice changes including new technology, expanded services, additional locations, or third-party integrations. For more information, please reach out to consulting@yourprivacygirl.ca
Direct Consulting
One-on-one consulting for practices navigating complex compliance questions, breach response, or building a privacy framework from the ground up. For more information, please reach out to consulting@yourprivacygirl.ca
The Philosophy

We didn't just raise the bar.
We are the bar.

Your Privacy Girl

Pan-Canadian Coverage

Every province. Every territory.
One standard of care.

British ColumbiaE-Health (Personal Health Information Access and Protection of Privacy) Act (PHIAPP)
AlbertaHealth Information Act (HIA)
SaskatchewanHealth Information Protection Act (HIPA)
ManitobaPersonal Health Information Act (PHIA)
OntarioPersonal Health Information Protection Act (PHIPA)
QuebecBill 3 - An Act Respecting Health and Social Services Information and Amending Various Legislative Provisions
New BrunswickPersonal Health Information Privacy and Access Act (PHIPAA)
Nova ScotiaPersonal Health Information Act (PHIA)
Prince Edward IslandHealth Information Act (HIA)
Newfoundland and LabradorPersonal Health Information Act (PHIA)
YukonHealth Information Privacy and Management Act (HIPM)
Northwest TerritoriesHealth Information Protection Act (HIA)
NunavutPersonal Information Protection and Electronic Documents Act (PIPEDA)
Questions

The ones everyone
is already thinking.

So how does this actually work?
Great question! Here is exactly what happens.

You purchase the Privacy Masterclass Certification for your practice. Once you enroll, you are now the team lead. You will add each staff member on your team to gain access to the course. This includes your injectors, front desk, practice manager, as well as the receptionist. If they work in your practice and they touch patient information, they need this privacy education.

Each person works through 6 online modules at their own pace. The modules are video-based and built around real Canadian cases. Not textbooks, not dry lectures. Think cinematic. Think stories you actually remember.

Watch from your phone, your tablet, or your desktop. At home, on a break, between clients. Easy and convenient on your schedule, not ours.

When your entire practice completes the education, your practice will receive the Privacy Masterclass Certification.

That certification shows your practice is meeting its obligations under your province's health privacy legislation. It also may count toward Continuing Competence Program (CCP) requirements for many regulated professionals.

And it does not stop there. Every year your team recertifies so your certification stays current and your practice stays protected.

You do not need to know anything about privacy legislation to get started. That is exactly what the masterclass is for.

And when your team is done? Your practice will not only be certified and compliant, you will likely be talking about Piper's wardrobe in the staff room. Your staff might even send you a thank you note 🖤 for not making them sit through a boring death by PowerPoint privacy course.💅

When you finish and think you may need more compliance support, I've got you.
📞 Reach out anytime at support@yourprivacygirl.ca
We already have a privacy policy. Do we still need this?
Yes. Having a policy is not the same as understanding it.

Think of sunscreen. It is arguably the most important part of any skincare routine. And yet... it sits in the drawer. Bought with the best intentions. Used here and there. Not consistently. Not correctly. ☀️

Privacy works exactly the same way.

The policy is the sunscreen.
The masterclass is actually putting it on. Every single day. Correctly.

PHIPA Decision 260 made it clear:

It is not acceptable to simply have policies in place.
Your team must be compliant.
Not just informed.
Compliant.
Is this specific to Alberta or does it apply across Canada?
It applies across Canada. Your Privacy Girl was built for health practices operating under Canadian health privacy legislation in every province and territory. From Alberta's HIA to Ontario's PHIPA to Quebec's Law 25, we know the landscape. All of it.
What happens after we complete the masterclass?
Once all staff members completes the masterclass, your clinic will receive it's Privacy Masterclass certification. Annual recertification keeps your team current and your practice protected.
Why do we need a masterclass? Can we not just read the legislation?
You are going to need privacy education regardless. The legislation doesn't care how you deliver it. But your team definately will. Death by PowerPoint is still an option. Ask your team which they would prefer and get back to us. We will wait. 😏
My staff are busy. How long does this take?
An hour and a half in total. 6 modules, designed to be taken at their own pace, on any device, anywhere. No schedules to coordinate. No classroom. No disruption to your clinic day. Although we will say this: we doubt it will take your staff long. Piper has a way of making you want the next module before the current one ends. And if we do say so ourselves... you will also want to see what she is wearing in each module. 😉

And no, there is no quiz at the end. Because a quiz proves nothing. It proves someone can remember an answer long enough to click it. It does not prove they understand privacy. It does not prove they will make the right call at the front desk on a Friday afternoon when nobody is watching. Understanding does. That is what we build.
Does the masterclass tell me what my policies should say?
Kind of. But not in the way you might be thinking.

The masterclass does not hand you a template. What it does is build the understanding that makes a good policy possible. Your team will learn what Canadian health privacy legislation actually requires, why those requirements exist, and what their obligations are day to day.

And yes, we go deep on consent. What valid consent looks like. What it does not look like. The difference between express and implied consent. What happens when consent is assumed rather than obtained. Because consent is not a signature on a form. It is an ongoing obligation, and most practices are getting at least part of it wrong without even knowing it.

A policy written without that understanding is just paper. The masterclass is what gives it teeth.
Our intake forms already include photography consent. Are we covered?
Not necessarily. Photography consent in a health setting is one of the most misunderstood areas of health privacy.

Consent must be informed, specific, and revocable at any time. If your form asks clients to irrevocably consent to their images being used for research, professional publications, advertising, or trade purposes... that consent is not valid. Full stop.

Health information, including photographs taken in a clinical setting, cannot be used beyond the purpose for which they were collected without separate, specific, informed, and revocable consent. Research alone has its own entire consent framework.

The source of your form does not determine its compliance. A form adapted from a liability protection association is not the same as a form that meets Canadian health privacy legislation. This is exactly what the masterclass covers. And yes, it comes up more than you would think. ☀️
What is the difference between education and consulting?
Education builds understanding. The masterclass teaches your team what is required, why it matters, and what their obligations are. Consulting is prescriptive. A Privacy Impact Assessment (PIA) documents how your specific practice manages privacy risk. Both are valuable. Both serve different purposes. And both may be mandatory in some provinces.
Is this the same as having a PIA done?
Not at all. A PIA is a consulting service. It is a formal, practice-specific document that assesses your privacy risks. The masterclass is education. Think of it this way: the masterclass teaches your team to understand privacy and apply it. The PIA documents how your practice manages it. The modules are story-driven, cinematic, and honestly a little dramatic. The kind of thing that is genuinely hard to forget. Which is entirely the point.
The Cost of Getting It Wrong

A breach costs a small health
practice up to $353,000 CAD.

NetXafe, a Canadian cybersecurity firm specializing in healthcare practices, reports that the total realistic cost of a data breach for a small health practice in 2026 ranges from $86,000 to $353,000 CAD. That figure covers downtime, IT recovery, legal fees, client notification, and client attrition. It does not include personal stress, professional embarrassment, or the time taken from client care during the response.

Source: NetXafe (netxafe.ca) "The True Cost of a Healthcare Data Breach in Canada in 2026," published April 18, 2026. Canadian cybersecurity firm specializing in healthcare practices.

$353K Maximum realistic breach cost for a small practice in 2026
$86K Minimum realistic breach cost before reputational damage
58% Increase in ransomware attacks on healthcare globally in 2025
Ready to Begin

Ready to raise the bar?

Enrollment is now open. Your practice deserves this. Your team deserves this. Take the first step today. .