Cross-border patient outreach, serving Canadian patients at US hospitals

What to take away

• Cross-border patient outreach works when it treats Canadian patients as self-pay or private-insurance inquiries, not Medicare beneficiaries.
• PHIPA governs Ontario health information; PIPEDA covers commercial activity elsewhere in Canada, so consent language has to fit both.
• Insurance verification starts with the provincial health card, then the private or travel policy, then a written estimate.
• Referral letters and imaging move faster with a named clinician, a fax number, and a signed records release.
• Washington, Michigan, and New York border hospitals each face different provincial neighbors and payer mixes.
• Privacy notices should say where data is stored and who in the US can see it.

What Canadian patients ask US hospitals and why

Canadian inquiries to hospitals in the US northern border states arrive for five reasons. They want a shorter wait, a specialist they cannot reach at home, a drug or device not yet funded provincially, a second opinion before surgery, or care near a second home.

The questions are practical. What does it cost? Do you bill my province? Can I get in next month? Will my Ontario doctor send the file? Who signs the release?

Those questions tell you the inquiry is not a typical domestic lead. A patient from British Columbia weighing a knee replacement in Bellingham is comparing a US cash price against a provincial wait, not against a Medicare deductible.

That single difference changes intake scripts, forms, staffing, and how you describe price on a landing page.

The three inquiry types

Self-pay Canadians paying out of pocket are the largest group at most border hospitals. They want a bundled quote, a date, and a refund policy.

Insured Canadians hold private plans, employer plans, or travel policies that may reimburse US care. They need help assembling a claim, not a bill.

Provincially sponsored patients are the smallest group. Some provinces pay for specific out-of-country services after prior approval, and those files move slowly and require documentation.

What they are not

They are not Medicare patients, and they are not uninsured in the American sense. Most hold a provincial health card that covers them at home and may reimburse part of a US bill at home rates.

Treating a Canadian inquiry as a Medicare case produces wrong quotes, wrong forms, and a patient who stops answering calls.

PHIPA and PIPEDA differences that shape outreach

PHIPA differences matter first because Ontario is the largest source market for many border hospitals. The Personal Health Information Protection Act applies to health information custodians in Ontario, sets rules for collection, use, and disclosure, and gives patients a right to access and correct their record.

PIPEDA differences matter for everyone else. The Personal Information Protection and Electronic Documents Act covers private-sector organizations in provinces without substantially similar health privacy law, and it applies to commercial activity across borders.

In practice, a hospital marketing team in Buffalo or Detroit is handling inquiries that may sit under either regime, plus HIPAA once the patient becomes a US patient.

Where the two regimes diverge

PHIPA is narrower and health-specific, with detailed rules on disclosure without consent and a provincial regulator that investigates complaints. PIPEDA is broader and principle-based, built on knowledge and consent, with a federal privacy commissioner.

The consent standard is the practical difference. PIPEDA generally requires meaningful consent with clear notice of purposes, while PHIPA allows some implied consent for care within a custodian's circle.

Marketing is outside that circle. A newsletter, a retargeting audience, or a review request is not care, and consent for it must be explicit.

That distinction is why a Canadian clinic audience responds differently to review requests than a US one, a problem covered in our piece on PIPEDA and patient reviews.

What this means for your forms

Ask for consent to contact separately from consent to treat. State the purpose in simple words: to answer your inquiry, to send a quote, to follow up once.

Name the US entity that will hold the information. Canadian patients reasonably assume a Canadian privacy officer exists, and they ask.

Email marketing to Canadian addresses also runs into Canada's anti-spam law, which requires express or implied consent and a working unsubscribe, as we detail in CASL healthcare email marketing compliance.

Insurance verification when Medicare does not apply

Insurance verification for Canadian patients is a three-layer process, and skipping a layer produces a quote the patient cannot use.

Start with the provincial card. Record the province, the health number, and the version code. Confirm whether the province requires prior approval for the planned service before the patient travels.

Then the private layer. Employer plans, retiree plans, and travel policies each have their own claim forms, deadlines, and exclusions for elective care.

Then the US layer. If the patient has a US policy through an employer or a snowbird plan, verify benefits and network status like any domestic case.

Insurance verification steps

1. Collect the provincial health card image and confirm the province's out-of-country policy for the specific service.
2. Ask for the private or travel policy card and call the payer to confirm coverage, exclusions, and claim deadlines.
3. Check whether the patient holds any US plan, then verify eligibility and network status through the payer portal.
4. Request prior authorization where the payer requires it, and log the reference number.
5. Send a written estimate that separates facility, physician, anesthesia, imaging, and implant costs.
6. Confirm the deposit amount and the refund rule in writing before scheduling.

The estimate is the product

Canadian patients often decide based on the estimate, not the surgeon. A single lump sum invites distrust because provincial coverage is itemized and familiar.

Give a range with the assumptions stated. Say what is not included: complications, extra nights, pathology, and follow-up imaging.

Staff who handle these calls need payer contacts for Ontario, British Columbia, Alberta, Manitoba, and Quebec at minimum.

The payer contacts differ across the US northern border states. Ontario cases flow through Detroit and Buffalo, while British Columbia cases flow through Bellingham, and every province runs its own out-of-country desk.

Referral letters and records transfer across the border

Referral letters do two jobs. They establish medical necessity for the US clinician, and they give the patient's provincial physician a record of what happened abroad.

Ask for a letter on the referring physician's letterhead with the diagnosis, the question being asked, relevant history, and the treatments already tried. A one-line note delays scheduling.

Records transfer is the harder half. Imaging usually travels on disc or through a provincial portal the US hospital cannot access directly.

A records checklist

• Signed authorization naming the US hospital and the specific records requested
• Referring physician name, clinic, fax, and direct phone line
• Provincial health number and version code
• Imaging reports plus the discs or a secure download link
• Pathology slides or blocks if the case is oncologic
• Medication list with generic names and doses
• Immunization and allergy history
• Interpreter need and preferred language

Moving the file

US hospitals increasingly exchange records through national networks rather than fax alone. The Trusted Exchange Framework and Common Agreement sets a common floor for that exchange, described in the TEFCA framework for health information exchange.

Standards work underneath it. The data exchange standards supporting patient outreach systems explain how systems share data without custom interfaces.

Patients also hold rights to their own records in the US, summarized in patient access to health records rules. Canadian patients often assume the same right exists at home and ask for copies directly.

Send the consult note back to the referring physician. That courtesy is what generates the next round of patient outreach metrics healthcare and the next patient.

Outreach in Washington, Michigan, and New York border hospitals

Washington border hospitals draw from British Columbia and, to a lesser degree, Alberta. The Lower Mainland market is close enough that patients compare Bellingham and Seattle prices against Vancouver private clinics.

Washington also has its own health data law, the My Health My Data Act, which reaches further than HIPAA in some consumer health contexts. Marketing teams there should treat it as a live constraint.

Michigan and New York border hospitals draw from Ontario, and the Ontario market behaves differently. Windsor patients look at Detroit, and Niagara and Buffalo share a metro economy.

Washington specifics

Blaine, Bellingham, and Seattle facilities see a mix of self-pay surgical inquiries and urgent care from travelers. Urgent care is a volume business with thin margins and high price sensitivity.

Canadian patients there expect a posted price. Clinics that publish a flat self-pay rate for common visits convert better than those that quote on request.

Michigan and New York specifics

Detroit hospitals handle a large Ontario self-pay surgical and diagnostic volume, plus a steady flow of imaging. Buffalo and Niagara Falls hospitals see the same pattern with fewer international flights and more drive-in traffic.

New York publishes patient rights material that sets expectations for anyone treated in the state, useful context when a Canadian patient asks what protections apply, in the Patients' Rights in New York State guide.

Staffing the border desk

One coordinator who knows the provincial rules beats a general call center. Give that person direct lines to the financial counselor and the international billing office.

Track inquiry source by province, not just by country. Ontario, British Columbia, and Alberta behave like separate markets with separate wait times and separate payer rules.

The hospitals in the US northern border states share one problem: no shared playbook. Each state adds its own privacy overlay on top of HIPAA, so a campaign built in Seattle does not transfer cleanly to Detroit or Buffalo.

Marketing language that does not assume Medicare coverage

Most US hospital marketing copy is written for a Medicare or commercial insurance audience. The words give it away: accepted insurance, in-network, Medicare assignment, no surprise bills.

None of that lands with a patient holding an Ontario health card. It signals that the hospital has not thought about them.

Rewrite the top of the page for the Canadian reader. Say that you serve Canadian patients, that you offer self-pay pricing, and that you will help with provincial reimbursement paperwork.

A worked example

Before: "We accept Medicare, Medicaid, and most major insurance plans. Call to verify your coverage."

After: "We treat Canadian patients from Ontario and British Columbia. You will receive a written estimate before you book, and our coordinator will help you file with your province and your private plan."

The second version answers the three questions that drive the inquiry: do you take Canadians, what will it cost, and who helps with the paperwork.

Words to retire on Canadian pages

Drop deductible, copay, and in-network from Canadian-facing pages unless the patient holds a US plan. Keep them on domestic pages.

Replace insurance verification with benefits and reimbursement help. Replace provider with physician or specialist, which reads more naturally to Canadian patients.

Publish the price range. Canadian patients are used to public funding and find hidden pricing suspicious rather than normal.

General patient acquisition advice built for US payers will mislead you here, because the conversion event is a paid consult, not a covered visit.

Consent and privacy notices for Canadian inquiries

Your privacy notice does three jobs for a Canadian inquiry: it identifies the US entity holding the data, explains the purposes, and gives a contact who can answer a complaint.

Write it without legal jargon and post it before the form, not in a footer link. Canadian patients read privacy notices more often than US patients, partly because provincial regulators publish guidance on cross-border disclosure.

What the notice must say

Name the legal entity and its address. State that information is stored in the United States and that US law applies to it.

List the purposes: responding to the inquiry, scheduling, billing, and follow-up. Separate marketing consent from care consent.

Give an email and a phone number for privacy questions, and say how long you keep inquiry records that never become patient records.

Security obligations on the US side

Once a Canadian becomes a US patient, their information is electronic protected health information, and the HIPAA Security Rule applies to the systems that hold it. The Security Rule guidance material covers the administrative, physical, and technical safeguards expected of those platforms.

That includes the marketing stack. A CRM, a scheduling tool, or a chat widget that touches patient data needs a business associate agreement and access controls.

Map the hipaa compliant call tracking before you scale Canadian campaigns, because a breach in a marketing tool is still a breach.

Handling withdrawal

Honor withdrawal of consent promptly and confirm it in writing. Canadian patients who ask to be removed often escalate to a regulator if the request is ignored.

Keep a suppression list that survives list imports. One unsubscribed patient who receives another campaign can generate a complaint that costs more than the campaign earned.

Common questions

Do Canadian patients need a referral letter to be seen at a US hospital? Not always, but most specialists ask for one. A letter from the provincial physician speeds scheduling and supports medical necessity documentation for reimbursement.

Can a US hospital bill a provincial health plan directly? Rarely. Most provinces reimburse the patient at home rates after the fact, and a few require prior approval. Hospitals usually collect from the patient and provide claim documentation.

Does PIPEDA apply to a US hospital marketing to Canadians? PIPEDA reaches commercial activity with a real and substantial link to Canada. A US hospital running campaigns into Canadian provinces should assume it applies and take advice.

How is PHIPA different from HIPAA for outreach? PHIPA is Ontario health-specific law with its own regulator and consent rules. HIPAA governs US covered entities. Marketing consent sits outside the care circle under both.

What should a Canadian-facing landing page include? A clear statement that you serve Canadian patients, a self-pay price range, the provinces you work with, and a named coordinator who handles reimbursement paperwork.

Where should privacy questions from Canadian patients go? To a named privacy contact with a direct email and phone number, not a general inbox. Response time matters because patients may also complain to a provincial or federal regulator.