Can My Employer Call My Doctor? Privacy Rights in Canada

Last reviewed and updated: August 2026 by a licensed Canadian physician

Your employer asked for your doctor's phone number to 'verify' your sick note. Can they do that? In almost all cases, no. Here's what Canadian privacy law says.

Can My Employer Call My Doctor?


No, not without your explicit written consent. Under Canadian privacy law, your medical information is protected, and your physician cannot share any information about you with your employer unless you've signed a specific consent form authorizing the disclosure. This applies whether you were assessed in person, by phone, or by secure video. Exceptions are extremely limited to court orders or immediate risks to safety, not routine workplace inquiries. A properly completed sick note from a licensed Canadian physician is the correct way to satisfy an employer request for evidence while keeping your diagnosis private.

The Law Is Clear

| Province | Relevant Law | What It Says |
|---|---|---|
| Ontario | PHIPA (Personal Health Information Protection Act) | Health information cannot be disclosed without patient consent |
| BC | PIPA (Personal Information Protection Act) | Personal information requires consent for collection/disclosure |
| Alberta | HIA (Health Information Act) | Health information is protected; disclosure requires consent |
| Federal | PIPEDA | Personal health information requires consent |
| All provinces | Provincial privacy legislation | Medical records are confidential |

Every province maintains a public physician registry that employers can check without calling your doctor, for example CPSO and CPSBC. Privacy commissioners investigate breaches and can issue fines.

What Your Employer Cannot Do

Without your written consent, your employer CANNOT:

  • Call your doctor to verify your sick note

  • Contact your doctor to ask about your diagnosis

  • Request your medical records

  • Ask your doctor how long you'll be off

  • Confirm whether you're actually a patient

  • Ask about your treatment plan or medications


Your doctor's obligation: Even if your employer calls, your physician is legally prohibited from confirming or denying anything, including whether you're their patient.

This duty of confidentiality also binds office staff. Receptionists, nurses, and physician assistants cannot provide details or confirm appointments to your employer. A proper sick note, not a phone call, is the documentation that protects your job.

What Your Employer CAN Do

Without your consent:

  • Verify that the physician exists (public registry check, CPSA, CPSO, etc.)

  • Confirm the physician's registration number (public information)

  • Ask YOU for additional information (which you may decline to provide)

  • Request an Independent Medical Examination (at their expense, for extended absences)


With your written consent:
  • Contact your physician for specific information you've authorized

  • Obtain a functional abilities assessment

  • Discuss return-to-work planning with your treatment team


Employers often set deadlines for documentation, commonly within 48 to 72 hours for short absences. Missing those timelines can trigger attendance points or denial of sick pay. Act quickly to protect your record. MedLetter delivers same day physician notes with only the details HR needs.

The Consent Form

If your employer asks you to sign a consent form allowing them to contact your doctor:

You should know:

  • You are NOT obligated to sign

  • Refusing to sign cannot be grounds for discipline (in most circumstances)

  • If you do sign, you can limit the scope (e.g., "confirm dates of absence only")

  • You can revoke consent at any time


Read carefully before signing. Some employer consent forms are overly broad, authorizing access to your entire medical history. You can cross out sections and initial the changes. Consider adding clear limits like dates of care, names of providers, and purpose of disclosure. Keep a copy of anything you sign and send it to HR by email so there is a timestamped record.

What If Your Employer Calls Anyway?

1. Your doctor should refuse to provide information, this is their legal obligation
2. Document the attempt, note the date, who called, and what was asked
3. File a privacy complaint, with your provincial privacy commissioner
4. Consult an employment lawyer, this may constitute a privacy violation with legal consequences
5. Report to HR, if the call was made by a manager, HR should be informed

Ask your clinic to add a chart note documenting the call. If needed, request a brief letter confirming that no information was disclosed without consent. Provincial commissioners accept online complaints and typically acknowledge within a few business days. Acting fast helps preserve evidence and strengthens your position if attendance discipline is threatened.

The "Verification" Myth

Some employers claim they need to "verify" sick notes. Here's what verification actually means:

Legitimate verification:

  • Checking the physician's name against the public medical registry

  • Confirming the registration number is valid

  • Ensuring the note contains required information


Illegitimate "verification":
  • Calling the doctor's office

  • Asking the doctor if you were really sick

  • Requesting additional medical details

  • Asking about your diagnosis or treatment


A compliant note should include the physician's full name, license number, clinic address or phone, date of assessment or care, a clear statement that you were unable to work, the expected duration or next review date, and a signature. It should not disclose your diagnosis or symptoms. MedLetter notes meet these standards for every province.

MedLetter vs a walk in clinic:

  • MedLetter, $49 total. Same day on average. No travel. No waiting room.

  • Walk in clinic, note fee often $20 to $50. Typical waits 2 to 4 hours in Toronto, Vancouver, Calgary, longer in flu season.

  • With MedLetter you upload securely, a Canadian licensed physician reviews, and you receive a signed PDF that HR can verify through the college registry.


Protect your job record and avoid costly delays. Order now before your next scheduled shift starts. New sick-note requests are temporarily paused while we review our service. We are not accepting new orders at this time. Same day delivery by a licensed physician, formatted with all required elements so HR can check what they need without breaching your privacy.

Frequently Asked Questions

Can my employer ask ME about my diagnosis?
They can ask, but you are not obligated to answer. You only need to confirm that you were unable to work. Your specific diagnosis is private.

What if I'm on long-term disability?
LTD insurers (not your employer) may require medical information. This is governed by your insurance policy and requires your consent. Your employer still cannot access this information directly.

Can my employer require me to see THEIR doctor?
For extended absences or accommodation disputes, they can request an Independent Medical Examination (IME) at their expense. This is different from contacting your personal physician.

What about workers' compensation claims?
WCB/WSIB claims have different rules, the workers' compensation board can access relevant medical information as part of the claims process. But this is the board, not your employer.

Are virtual sick notes accepted by employers?
Yes. Employers look for a licensed physician, proper identification, dates, and a signature. Virtual care is recognized across Canada, and your MedLetter note includes the physician license number that HR can verify.

How fast do I need to provide documentation?
Many policies require evidence within 48 to 72 hours or by your next scheduled shift. Ordering now protects your pay and prevents attendance points from being added to your file.

What information must be on a sick note?
Employer facing notes should state you were unable to work, include dates, and avoid diagnosis. MedLetter notes include physician name, license, contact, signature.

Sources

  • Personal Health Information Protection Act (PHIPA), Ontario

  • Health Information Act (HIA), Alberta

  • Personal Information Protection Act (PIPA), BC

  • Office of the Privacy Commissioner of Canada

  • Canadian Medical Protective Association, Confidentiality Guidelines

Resources for Employers