We didn't just raise the bar. We are the bar.
Education that is lived, not just learned.
Meet Piper.
Unlike anything you've seen.
Piper is your Privacy Educator at the heart of the Masterclass.
She delivers every module the way great educators do, with warmth, with conviction, and with something that goes beyond the content itself.
Piper is more than a vision; she is the soul behind this.
She does not sell; she states. And what she educates stays with you long after the course ends. And no, there won't be a test. That's just not our style.
▶ Watch the Masterclass ShortPrivacy isn't a checkbox.
It's a standard of care.
Nearly 20 years in the privacy industry.
I'm Kristi, the founder of Your Privacy Girl. Your Privacy Girl exists because we knew we could do this better. So much better. Privacy education isn't an option. It's a requirement.
PHIPA Decision 260 was clear. Having policies in place is not enough. It is the responsibility of the health information custodian to ensure that all staff are actually compliant with the Act. Not just informed. Compliant. It is not acceptable to fail to provide privacy training.
Informed by PHIPA Decision 260, Information and Privacy Commissioner of OntarioSimple. Easy. Yours, anywhere and anytime.
"Privacy is not black and white, there's grey."
Frank Work, Former Privacy Commissioner of Alberta6 modules. One standard.
The full picture
of privacy compliance.
1.5 hours to complete at your own pace
Watch on any device including your phone, tablet, or computer
Counts toward your Continuing Competence Program requirements
We didn't just raise the bar.
We are the bar.
Your Privacy Girl
Every province. Every territory.
One standard of care.
The ones everyone
is already thinking.
You purchase the Privacy Masterclass Certification for your practice. Once you enroll, you are now the team lead. You will add each staff member on your team to gain access to the course. This includes your injectors, front desk, practice manager, as well as the receptionist. If they work in your practice and they touch patient information, they need this privacy education.
Each person works through 6 online modules at their own pace. The modules are video-based and built around real Canadian cases. Not textbooks, not dry lectures. Think cinematic. Think stories you actually remember.
Watch from your phone, your tablet, or your desktop. At home, on a break, between clients. Easy and convenient on your schedule, not ours.
When your entire practice completes the education, your practice will receive the Privacy Masterclass Certification.
That certification shows your practice is meeting its obligations under your province's health privacy legislation. It also may count toward Continuing Competence Program (CCP) requirements for many regulated professionals.
And it does not stop there. Every year your team recertifies so your certification stays current and your practice stays protected.
You do not need to know anything about privacy legislation to get started. That is exactly what the masterclass is for.
And when your team is done? Your practice will not only be certified and compliant, you will likely be talking about Piper's wardrobe in the staff room. Your staff might even send you a thank you note 🖤 for not making them sit through a boring death by PowerPoint privacy course.💅
When you finish and think you may need more compliance support, I've got you.
📞 Reach out anytime at support@yourprivacygirl.ca
Think of sunscreen. It is arguably the most important part of any skincare routine. And yet... it sits in the drawer. Bought with the best intentions. Used here and there. Not consistently. Not correctly. ☀️
Privacy works exactly the same way.
The policy is the sunscreen.
The masterclass is actually putting it on. Every single day. Correctly.
PHIPA Decision 260 made it clear:
It is not acceptable to simply have policies in place.
Your team must be compliant.
Not just informed.
Compliant.
And no, there is no quiz at the end. Because a quiz proves nothing. It proves someone can remember an answer long enough to click it. It does not prove they understand privacy. It does not prove they will make the right call at the front desk on a Friday afternoon when nobody is watching. Understanding does. That is what we build.
The masterclass does not hand you a template. What it does is build the understanding that makes a good policy possible. Your team will learn what Canadian health privacy legislation actually requires, why those requirements exist, and what their obligations are day to day.
And yes, we go deep on consent. What valid consent looks like. What it does not look like. The difference between express and implied consent. What happens when consent is assumed rather than obtained. Because consent is not a signature on a form. It is an ongoing obligation, and most practices are getting at least part of it wrong without even knowing it.
A policy written without that understanding is just paper. The masterclass is what gives it teeth.
Consent must be informed, specific, and revocable at any time. If your form asks clients to irrevocably consent to their images being used for research, professional publications, advertising, or trade purposes... that consent is not valid. Full stop.
Health information, including photographs taken in a clinical setting, cannot be used beyond the purpose for which they were collected without separate, specific, informed, and revocable consent. Research alone has its own entire consent framework.
The source of your form does not determine its compliance. A form adapted from a liability protection association is not the same as a form that meets Canadian health privacy legislation. This is exactly what the masterclass covers. And yes, it comes up more than you would think. ☀️
A breach costs a small health
practice up to $353,000 CAD.
NetXafe, a Canadian cybersecurity firm specializing in healthcare practices, reports that the total realistic cost of a data breach for a small health practice in 2026 ranges from $86,000 to $353,000 CAD. That figure covers downtime, IT recovery, legal fees, client notification, and client attrition. It does not include personal stress, professional embarrassment, or the time taken from client care during the response.
Source: NetXafe (netxafe.ca) "The True Cost of a Healthcare Data Breach in Canada in 2026," published April 18, 2026. Canadian cybersecurity firm specializing in healthcare practices.
Ready to raise the bar?
Enrollment is now open. Your practice deserves this. Your team deserves this. Take the first step today. .