Is therapy confidential? How your privacy is protected

One of the most common questions people ask before starting therapy is whether their sessions will stay private. It makes sense. Talking about what you're going through takes trust, and knowing that your information is protected can make it easier to take that first step.The short answer: yes, therapy is confidential. Licensed therapists in Canada are bound by professional codes of ethics and federal and provincial privacy laws that govern how personal health information is collected, used, and shared. When you use the GreenShield+ platform additional layers of technical security are built in to protect your data.Here is what that looks like in practice.

{{highlight-box}}

Understanding the limits of confidentiality

Everything you share in a therapy session is kept confidential by law. However, there are a few situations where a therapist must break confidentiality for ethical reasons. These include:

• If there is an immediate risk of harm to you or someone else
• If there is reasonable suspicion that a vulnerable person, such as a child or an older adult, is being abused or neglected
• If the law requires the therapist to share information

{{/highlight-box}}

How Canadian privacy laws protect therapy confidentiality

In Canada, two key pieces of legislation set the standard for how personal health information is handled:PIPEDA (Personal Information Protection and Electronic Documents Act) is the federal privacy law that applies to private-sector organizations, including health care providers. It requires organizations to obtain consent before collecting personal information and to protect that information with appropriate security measures.

Across Canada, provincial health privacy laws set additional rules for how your personal health information is handled by regulated providers. PHIPA is one example — similar provincial health privacy laws apply in New Brunswick, Newfoundland and Labrador, and elsewhere. Your session information may be shared within GreenShield's clinical and service delivery team as needed to support your care. In rare cases — such as a clinical complaint review — additional individuals may need to access this information, and we'll ask for your separate consent before that happens.

There are limited, legally defined exceptions where a therapist may need to disclose information without consent. These include situations involving imminent risk of serious harm to self or others, suspected abuse or neglect of a child or elder, or a court order requiring disclosure. Before your first session, you'll be asked to acknowledge the limits of confidentiality, and your therapist can answer any additional questions you may have during your first session. Consent isn't a one-time signature. You can ask questions, change your mind, or withdraw consent at any point in your care — your therapist will check in along the way.

How GreenShield Health protects your mental health  information

Sessions are never recorded. Video and voice sessions on GreenShield+ are not recorded or stored on any server. An encrypted connection is created directly between you and your therapist for each session.

Personal data is encrypted. Information such as your name, address, and therapist notes is stored on secure servers protected in accordance with GreenShield's privacy policy. This data is encrypted using industry-standard security measures [should we name the specific standards?] and stored on servers that are SOC 2 certified, meaning they are regularly audited to meet strict security standards.

Access is tightly controlled. Only a small number of authorized employees can access stored information, and their access is regularly audited. GreenShield does not share your therapy session information with your employer, plan sponsor, or institution. The full GreenShield privacy policy outlines exactly who may access your information and under what circumstances.You can review the full GreenShield privacy policy at greenshield.ca/en-ca/privacy-policy.