Merakey Blog
AI compliance, data privacy, and technology strategy for Ontario developmental services agencies and Canadian healthcare organizations.
Cloud AI workloads carry a hidden carbon cost from US data centers running on grids that still burn coal and gas. Local inference on Canadian hydro power tells a different story.
5 min read
Over the past six months we ran 50 mock QAM compliance scans against real agency data. The patterns are striking and the gaps are predictable.
7 min read
An audit notice doesn't have to be a fire drill. Here's the four-week playbook we walk agencies through to go from disorganized to defensible in 30 days.
5 min read
A practical checklist for preparing for your next QAM compliance review under Regulation 299/10. Covers all six compliance areas, common findings, and a 90-day preparation timeline.
10 min read
Compliance vendors love to talk to the big agencies. The small ones, two-home operators with two managers, are passing QAM audits anyway. Here is how.
5 min read
Research across 11 AI systems found chatbots affirm user actions nearly 50% more often than humans. In home care, where staff often have no second opinion available, an agreeable AI isn't neutral — it's a patient safety risk.
7 min read
This week, TeamPCP compromised Trivy, Checkmarx KICS, and LiteLLM via PyPI. The tools developers use to secure and build AI software became the attack vector. Here's what happened and what it means.
9 min read
We modeled the annual cost of manual QAM tracking across staffing, audit overhead, and risk exposure. The number is bigger than most agency directors expect.
6 min read
Regulation 299/10 requires Ontario DS agencies to track training, eMAR, incidents, and more. Most still use spreadsheets. Here's what that costs them and how automation changes the equation.
8 min read
PIPEDA applies the moment a chatbot touches patient data. Cloud-hosted LLMs create cross-border data flows most agencies haven't accounted for. Here's what the law requires.
6 min read
ECRI named AI chatbot misuse as the top health technology hazard for 2026. Why chatbots topped the list, what the risks are in clinical settings, and what healthcare organizations should do.
5 min read
Healthcare organizations are moving AI workloads off the cloud. We compare self-hosted and cloud AI for regulated industries, covering data sovereignty, PIPEDA compliance, and the real cost of a breach.
7 min read
A plain-language guide to Ontario Regulation 299/10 under the Services and Supports to Promote the Social Inclusion of Persons with Developmental Disabilities Act. What auditors look for and where agencies fall short.
9 min read
Healthcare data breaches cost an average of $7.4 million, the highest of any industry. We break down why DS agencies are at risk and how data residency, PIPEDA, and the CPPA shape your obligations.
6 min read
Ontario's Personal Health Information Protection Act turned 22 this year. Looking back at how the law has been interpreted, enforced, and tested in court tells us a lot about where AI in healthcare is going.
8 min read
Self-hosted will go from niche to default, the breach reporting volume will double, and the first major regulatory action will land. A field-level forecast for the year ahead.
5 min read
Get new articles on AI compliance, healthcare technology, and PIPEDA directly in your inbox. No spam, unsubscribe anytime.
We respect your privacy. Read our privacy policy.