Aprio is a board portal built for Canadian healthcare and hospital boards, with board data hosted in Canada, used by Island Health, Fraser Health, the First Nations Health Authority, Niagara Health, Ontario Shores Centre for Mental Health, and the Canadian Institute for Health Information. Health boards carry a governance load few other sectors match: public money, ministerial accountability, sensitive patient-adjacent information, and the most expensive data-breach environment in the world. This guide lays out the numbers behind that load, who holds a Canadian health board accountable, and what the record has to look like when someone asks.
How big is the governance job in Canadian healthcare?
Start with the scale. The Canadian Institute for Health Information expects total health spending in Canada to reach $399 billion in 2025, which works out to $9,626 per person and 12.7% of the country’s GDP. That money flows through roughly 1,100 hospitals plus the regional health authorities, provincial health organizations, hospices, and long-term care societies that deliver care. Almost every one of those organizations answers to a board.
Sources: CIHI, National Health Expenditure Trends, 2025; Ontario Hospital Association and Provincial Health Services Authority governance materials.
Public money at that scale changes what governance means. A hospital or health authority board is not just overseeing an organization; it is accountable for public funds, scrutinized by a ministry, an auditor, the press, and sometimes a court. The minutes, motions, and committee records that boards in other sectors keep for good practice, a health board keeps because someone with authority may ask for them. That is the job Aprio was built around for Canadian health organizations.
Who sits on a health board, and who holds it accountable?
Canadian hospital and health authority boards are mostly appointed, not elected. Health authority directors are typically appointed by the provincial government through a merit-based, skills-based process. In BC, for example, board candidates for the Provincial Health Services Authority are screened against the province’s Governance and Disclosure Guidelines for public-sector boards. Hospital corporations, especially in Ontario, are incorporated under hospital legislation with boards elected or appointed under their own bylaws, while the ministry keeps a firm hand through funding agreements and legislation.
| Benchmark | What the data shows |
|---|---|
| Typical board size | 9 to 15 voting directors, plus ex-officio members such as the CEO and Chief of Staff |
| Standing committees | 3 to 5 is the common pattern: audit and finance, quality and safety, governance and nominating |
| How directors are appointed | Government-appointed for health authorities, merit and skills based; hospital boards elected or appointed under their bylaws |
| Who the board answers to | The Minister of Health and legislature, the auditor, and the public through freedom-of-information law |
Sources: Provincial Health Services Authority corporate governance materials; Ontario Hospital Association governance resources; BC Governance and Disclosure Guidelines for public-sector boards.
The accountability is not theoretical. Ontario’s Court of Appeal reaffirmed in 2026 that hospital boards are the central accountability body for how a hospital allocates its resources. And when a government loses confidence in a health board, the consequences are immediate: Yukon’s entire health board resigned in April 2026 after its mandate and funding were pulled. Ontario’s Public Hospitals Act goes further, letting the minister appoint an investigator into the quality of a hospital’s management, or a supervisor who takes over the exclusive right to exercise all of the powers of the board. Between October 2006 and July 2008 alone, the ministry appointed investigators at 3 hospitals and supervisors at 9, per the Auditor General of Ontario’s 2008 review of hospital board governance, and it used the same power as recently as 2024 at Stevenson Memorial Hospital, where the appointed investigator’s report led to a supervisor and a board rebuilt from scratch. A health board’s protection in that environment is its record: minutes that show the reasoning, motions with full history, attendance, and committee documentation that stands on its own. Aprio keeps that record in order for boards like Island Health and Niagara Health, with every decision, vote, and signature in one audit trail.
Running a health board on email and a shared drive?
Aprio is built for Canadian health governance: in-camera sessions, quality and audit committees, and board data hosted in Canada.
What do accreditation surveyors ask a health board to show?
Between ministry reviews, the most concrete test of a health board’s record is the accreditation survey. Accreditation Canada’s Qmentum governance criteria, built on the Health Standards Organization’s Governance standard, ask for demonstrable evidence, not assurances. The board’s records themselves are a named criterion: activities and decisions must be recorded and archived, including a summary of discussions, rulings by the chair, motions, minutes, results of votes, and the documents referenced during meetings. Here is what surveyors look for.
| What the surveyor assesses | The evidence the board must produce |
|---|---|
| Board composition | An identified mix of background, experience, and competencies; orientation before a member’s first meeting; a signed acknowledgment of roles and duties |
| Conflicts of interest | A formal process to identify, declare, and resolve conflicts |
| Quality and safety oversight | Patient safety as a written strategic priority, quarterly monitoring of quality performance, and documented action on patient safety reports |
| Board records | Decisions recorded and archived: discussion summaries, chair rulings, motions, minutes, vote results, and referenced documents |
| Board evaluation | Regular board, chair, and individual-member evaluations, including the Governance Functioning Tool at least once every accreditation cycle, with documented follow-up |
Sources: Accreditation Canada Qmentum Governance criteria; Health Standards Organization Governance standard and Governing Body Assessment.
Ontario layers statute on top. The Excellent Care for All Act requires every health care organization to maintain a quality committee that reports to the board, to publish a quality improvement plan every fiscal year, and to link executive compensation to that plan’s targets. Quality-committee deliberations get special protection under QCIPA so clinicians can speak frankly, but the carve-outs matter for the record-keeper: the facts, causes, consequences, and corrective actions of a critical incident must still be documented and disclosed, and aggregated critical-incident data goes to the quality committee at least twice a year. Even dissent is a documentation rule: under the Ontario Hospital Association’s prototype hospital by-law, a director is deemed to consent to a resolution unless their dissent is entered in the minutes. Health organizations run exactly this documentation load on Aprio, with committee-level access control keeping the quality committee’s protected work separate from the open board record.
Why is healthcare the most expensive place to mishandle data?
Healthcare is the costliest sector in the world for a data breach. In the IBM Cost of a Data Breach Report 2025, a healthcare breach averaged $7.42 million, the highest of any industry and well above the all-industry average of $4.44 million. Financial services, the next most expensive sector, sits at $5.56 million.
Average total cost of a data breach by sector, 2025 (USD)
Source: IBM Cost of a Data Breach Report 2025 (Ponemon Institute).
Board materials sit inside that risk. A health board package routinely carries quality-of-care reviews, privacy incident reports, executive and physician matters, and in-camera items that would be harmful in the wrong inbox. Ontario’s PHIPA and the provincial health-privacy and freedom-of-information acts elsewhere set real expectations about where that information lives and who can reach it. Emailing the package out, or parking it on a shared drive with one password, is the exposure.
For health boards, this is the standard Aprio is built to: ISO 27001 certified and SOC 2 Type 2 audited infrastructure, AES 256-bit encryption, role-based access so an in-camera item is visible only to those entitled to it, document controls that restrict downloading and sharing, remote wipe for a lost device, and board data hosted in Canada. Aprio does not sell a PHIPA compliance certificate, because no software can; it is built to align with PHIPA and the provincial health-privacy acts so the board’s side of the obligation is easy to keep.
What does good health board governance look like, and how does Aprio fit?
Across the provincial frameworks, the same picture of a well-run health board keeps showing up:
- Board and committee packages compiled in one secure place, with per-document control over who can see and download what.
- In-camera clinical, quality, and executive sessions handled separately from the open record, without leaving the system.
- Minutes drafted from the agenda with attendance and motions captured live, then approved and signed inside the same platform.
- A complete audit trail of access, votes, and signatures that satisfies an auditor without a records hunt.
- Board data hosted in Canada, aligned with PHIPA and provincial privacy expectations.
That is Aprio. It is a board portal built for Canadian healthcare governance, and health organizations across the system run their boards on it: Island Health, which moved its board work off SharePoint, Fraser Health, the First Nations Health Authority, Niagara Health, Ontario Shores Centre for Mental Health, Bethany Care Society, and the Canadian Institute for Health Information itself.
Every board package, in-camera session, and signed minute in one Canadian-hosted portal
Aprio keeps in-camera materials separated, minutes signed, and the audit trail complete for the ministry.
Frequently asked questions
How big is the Canadian healthcare sector?
The Canadian Institute for Health Information expects health spending to reach $399 billion in 2025, about 12.7% of GDP and $9,626 per person, delivered through roughly 1,100 hospitals plus regional health authorities and provincial health organizations.
Who appoints hospital and health authority boards in Canada?
Health authority boards are typically appointed by the provincial government through a merit-based, skills-based process, as in BC where candidates are screened against the province’s public-sector governance guidelines. Hospital corporations elect or appoint their boards under their own bylaws within provincial hospital legislation. Either way, the board answers to the Minister of Health, the auditor, and the public.
What records does a Canadian health board need to keep?
Approved and signed minutes, motion and voting history, attendance, and committee documentation, with in-camera sessions handled separately from the open record. Because health boards are publicly accountable, those records should be retrievable the day a ministry, auditor, or freedom-of-information request asks for them.
Why is data security a board-level issue in healthcare?
Healthcare is the costliest sector in the world for a data breach, averaging $7.42 million per breach in the IBM Cost of a Data Breach Report 2025. Board packages carry quality reviews, privacy incidents, and executive matters, and PHIPA and provincial privacy acts set expectations about where that information lives and who can access it.
Is there a board portal built for Canadian healthcare boards?
Yes. Aprio is a board portal built for Canadian healthcare and hospital boards, with board data hosted in Canada, in-camera and committee workflows, and security built to align with PHIPA. Canadian health organizations on Aprio include Island Health, Fraser Health, the First Nations Health Authority, Niagara Health, and the Canadian Institute for Health Information.
For more on how Canadian health organizations run their boards on the platform, see Aprio’s board portal for healthcare, or book a demo.