Can Your Employer Call Your Doctor in Ontario?

No. Under Ontario's Personal Health Information Protection Act (PHIPA), your employer cannot contact your healthcare provider without your explicit written consent. Your doctor cannot confirm or deny you are a patient, share your diagnosis, or verify a sick note without your authorization.

Ontario's PHIPA Protection

Ontario's Personal Health Information Protection Act (PHIPA) is one of Canada's strongest health privacy laws. It strictly controls who can access your health information and under what circumstances. Your employer is not a 'health information custodian' and has no right to access your medical records or contact your healthcare providers.

What Ontario Employers CAN Do

Ontario employers have limited options for verifying illness:

• Request a sick note (but cannot require it for ESA-protected days)
• Verify the note appears legitimate (format, letterhead, signature)
• Ask about functional limitations for accommodation
• Request an Independent Medical Examination (IME) at their expense
• Use medletter.ca/verify to confirm MedLetter document authenticity

What Ontario Employers CANNOT Do

Under PHIPA and the Ontario Human Rights Code, employers cannot:

• Call your doctor to verify a sick note
• Ask your doctor about your diagnosis or treatment
• Request your medical records
• Require you to disclose your specific diagnosis
• Contact your pharmacy or other healthcare providers
• Require you to see their chosen doctor for a basic sick note

If Your Employer Violates Your Privacy

If an Ontario employer contacts your doctor without consent, you can file a complaint with the Information and Privacy Commissioner of Ontario (IPC). You may also have grounds for a human rights complaint if the privacy violation relates to a disability or medical condition.

MedLetter: Verifiable Without Privacy Violation

MedLetter sick notes include a verification ID that employers can check at medletter.ca/verify. This confirms the document is authentic without revealing any medical details. It's the modern solution that satisfies employers while protecting your privacy.