Since the Personal Health Information Protection Act (PHIPA) came into force in 2004, it has resulted in zero completed prosecutions — despite more incidents and high-profile breaches, such as numerous violations of Rob Ford’s hospital records and the anti-abortion activist who snooped into abortion files.