Governance, risk & compliance

Yukon Health Information Privacy and Management Act (HIPMA) SY 2013, c 16 (statute text not read)

UNVERIFIED AGAINST THE STATUTE.

Read 24 Oct 2026. The Yukon statute site and archive copies could not be retrieved, so the Health Information Privacy and Management Act, SY 2013, c 16, was not read; this framework rests on Government of Yukon Health and Social Services documents.

Those documents (Security Breach Policy IM-007, effective 31 August 2016, and a sample breach protocol) cite HIPMA ss. 29 to 31 for breach handling: staff report real or suspected breaches immediately (s.

29), a custodian notifies the individual and the Information and Privacy Commissioner where there is a likelihood of significant harm (s. 30), and gives the Commissioner a written report on the risk of harm, the number of people affected and the steps taken (s.

31). The subsection numbers in those documents differ slightly between them, so only the section range is used here.

Everything else in the mappings (custodian duties, safeguards, agents and information managers, access and correction, Commissioner powers, offences and fines) is stated as a general expectation of a Canadian health information statute, with no section reference, and must be checked against the Act before it is relied on. Private-sector note: the OPC page of laws deemed substantially similar to PIPEDA lists no Yukon law, and the OPC says PIPEDA applies in the territories because they are treated as federally regulated, so private providers in Yukon should expect PIPEDA for their commercial activity.

Penalty amounts and the commencement date were not read. General information, not legal advice.

Assessment tiers & levels Lavawall supports

Lavawall assesses Yukon Health Information Privacy and Management Act (HIPMA) at every level below, so you can start where you are and step up as your program matures.

How Lavawall® helps you get to Yukon Health Information Privacy and Management Act (HIPMA) compliance

Most of Yukon Health Information Privacy and Management Act (HIPMA) comes down to technical controls you have to run and prove: keeping systems patched, hardening configuration, detecting breaches early, backing up what matters, controlling access, and keeping evidence that all of it actually happened. Lavawall® runs those controls across Windows, macOS, Linux, and Microsoft 365 / Google Workspace from one console, maps them to Yukon Health Information Privacy and Management Act (HIPMA), and tracks your posture continuously instead of once a year at audit time.

• Assess your current state against Yukon Health Information Privacy and Management Act (HIPMA) in the Lavawall GRC module, with the questionnaire and control set built in.
• Remediate the gaps with the same platform — automated patching, configuration fixes, backups, and access review — not a separate project.
• Evidence everything with timestamped, exportable records auditors, insurers, and clients accept.

Related

Lavawall® supports Yukon Health Information Privacy and Management Act (HIPMA) as part of a built-in catalogue of compliance frameworks. Framework requirements are summarized for planning purposes; always confirm the current official text before certifying.