No. Under Alberta's Health Information Act (HIA) and Personal Information Protection Act (PIPA), your employer cannot contact your doctor without your explicit written consent. Your medical information is confidential, and your doctor cannot confirm or deny that you are a patient without your authorization.
Alberta has two laws that protect your medical privacy from employer intrusion. The Health Information Act (HIA) governs how health information is collected, used, and disclosed. The Personal Information Protection Act (PIPA) governs how private-sector employers handle personal information. Together, they create a strong barrier between your employer and your healthcare providers.
While your employer cannot call your doctor, they can:
Your employer is prohibited from:
If your employer threatens to contact your doctor, they are likely bluffing or uninformed about the law. Your doctor's office will not release any information without your signed consent form. If your employer actually contacts your doctor without consent, this may constitute a privacy violation under PIPA.
Every MedLetter sick note includes a unique verification ID. Employers can verify authenticity at medletter.ca/verify without contacting any physician. This satisfies employer verification needs while protecting your privacy completely.