Canada’s Privacy Commissioners passed a joint resolution calling on governments, health sector institutions, and health providers to phase out the use of fax and unencrypted email for communicating personal health information “as soon as reasonably possible”. The Commissioners also urge stakeholders to amend laws and regulations to further provide for meaningful penalties, including administrative penalties where appropriate, for health institutions and providers that do not take reasonable measures necessary to protect personal health information as well as for individuals who unlawfully collect, use, or disclose personal health information.