The NLAO and it’s members are bound by the Personal Health Information Act (PHIA); a health-sector specific privacy law that establishes rules that custodians of personal health information must follow when collecting, using and disclosing individuals’ confidential personal health information. PHIA also sets out the rights of residents of the province regarding obtaining access to and exercising control of their personal health information.