Est.
Audit RiskLong read

Practitioner Liability Exposure in PHSP Advice and Documentation

Advisors must verify PHSP qualification to avoid professional negligence claims.

· 8 min read
Cover illustration for “Practitioner Liability Exposure in PHSP Advice and Documentation”
Audit Risk · October 19, 2026 · 8 min read · 1,811 words

PHSP advice creates practitioner liability when provider claims stand in for a compliance review. A marketed tax benefit becomes an advisor’s recommendation without enough work to support it. Advisors can protect themselves and give better advice by doing their own analysis, explaining the risks in writing and keeping clear records.

Why PHSP advice creates practitioner liability in the first place

A provider sells a product, but an advisor recommends a tax treatment. Those are different tasks, and the distinction matters when a client relies on the recommendation. Reimbursements are deductible to the employer and tax-free to the employee only when the arrangement qualifies as a PHSP under the Income Tax Act. The plan must meet the structural conditions that support the claimed treatment.

Marketing for PHSPs can hide those conditions by making the tax result sound like part of the product. If an advisor repeats that promise without examining its basis, the client receives an assurance where there should have been an analysis. A later disallowance then raises a question about both the advice and the plan. The advice must be assessed against what a competent practitioner would have done to identify the defect or explain the uncertainty before the client acted.

The business faces the tax consequences, but its owner can also pursue a professional negligence claim against the advisor. That claim requires proof of duty of care, breach, causation and damages. It does not depend on CRA imposing a penalty, because a lost deduction and a taxable-benefit reassessment can themselves produce the loss. The compliance review is therefore the point at which an advisor can prevent the failure that later grounds a claim.

The structural compliance requirements that determine whether a plan qualifies

The first check is the written plan document, rather than the provider’s description of its service. The document must formally state who is covered, which expenses qualify and how claims are processed. A self-administered arrangement without formal documentation fails at the structural level from the outset. An advisor cannot make up for those missing documents by pointing to marketing that describes the tax result the plan is meant to deliver. The evidence must describe the plan as it works, as the advisor recommends it.

The next checks concern who controls claims and how decisions are made. CRA strongly prefers independent third-party administration and in practice all but requires it. Self-administered plans face heightened audit scrutiny because employer control over approvals undermines the plan’s insurance character. Arm’s-length adjudication also prevents the employer from directing individual expense choices. The advisor must check whether the administrator makes decisions on its own, even when a third party’s name is on the paperwork.

Expense eligibility needs its own examination. For a self-insured plan, the test is whether all or substantially all of the benefits paid, generally 90% or more, cover expenses eligible under the Medical Expense Tax Credit. Items that are not for health, including gym memberships and wellness spending, must have their own account. Otherwise, those payments put the whole plan’s qualification at risk.

The annual limit is another condition to verify against the plan itself. Hiveworks says a PHSP must have a fixed annual limit that is set before the plan year and stays the same through mid-year. A promise of flexibility does not answer whether the arrangement satisfies that requirement. Each of these checks addresses a separate point where a provider’s claim can diverge from the conditions for qualification.

The sole shareholder-employee configuration and why it concentrates liability

The sole shareholder-employee arrangement concentrates the risk because the person receiving the benefit also owns the corporation funding it. CRA’s concern is that no genuine insurance risk is being assumed when that person establishes a PHSP for themselves through the corporation. In that setting, the arrangement can resemble a personal expense account. CRA treats the resulting shareholder benefit as taxable under section 15(1) of the Income Tax Act. The distinction turns on why the person receives the benefit.

Compensation can make the position harder to defend. If the owner receives only dividends and no T4 salary, CRA has additional grounds to classify reimbursements as shareholder benefits. Hiveworks’ eligibility rules make clear that the person must have T4 income, even if they receive dividends. That provider condition makes compensation an immediate intake question, but it does not settle the broader shareholder-benefit issue. Receiving salary does not, by itself, answer whether the benefit arises from employment or ownership.

CRA documents from 2005, 2014, and 2017 appear to take different positions on this configuration. The permissive 2005 interpretation remains in circulation even though subsequent CRA positions have effectively superseded it. That history makes selective reliance especially dangerous. An advisor may find language that appears to support the proposed arrangement while leaving the client unaware of the competing position. The existence of favourable wording is not the same as a defensible recommendation.

To meet CRA’s defensible standard, there must be evidence that non-shareholder employees who do similar work and have similar responsibilities at another corporation of about the same size get similar benefits under a similar plan. Where the individual is the sole employee, the benefits are presumptively received through shareholding. This makes the configuration especially volatile for advisors who present qualification as settled. If the advisor takes the permissive view, the competing positions and the risk must be disclosed in writing. Undisclosed uncertainty can turn an honest disagreement over interpretation into a negligence claim.

What CRA reassessment and the Tax Court's negligence analysis mean for advisors

Disallowance can produce two concurrent tax consequences. The corporation loses its business expense deduction, while employees face a taxable benefit to the extent of reimbursements received. For a client who adopted the arrangement on professional advice, those consequences provide a concrete basis for examining the recommendation. The client must still connect the loss to a breach of the advisor’s duty.

Lewis v The King, 2024 TCC 127, shows how failing to check the information on a tax return can also change the reassessment period. The Tax Court considered misrepresentations attributable to neglect under subparagraph 152(4)(a)(i) of the Income Tax Act. That provision permits reassessment beyond the normal three-year period where misrepresentations arise from carelessness or neglect. The Court found that the taxpayer’s failure to review her return before signing constituted negligence sufficient to open that extended window.

The finding of negligence in Lewis concerned the taxpayer’s conduct. The case therefore offers an analogy for advisory responsibility. An advisor who fails to explain the substantive tax implications of a recommended structure leaves a comparable weakness in the advisory process. The longer reassessment window also means that the risk tied to a return can last beyond three years.

In a separate professional negligence claim, the client must show that the advisor owed a duty of care, did less than a competent practitioner would and caused the loss the client claims. A licensed professional who gives tax advice owes that duty, but the client must still prove breach, causation and damages. Most qualified advisors carry Errors and Omissions insurance, and claims are typically resolved through that channel. Insurance does not make the matter costless, because a claim can lead to premium increases and coverage reviews.

The 2026 third-party penalty regime and what it adds to advisor exposure

CRA’s Information Circular IC01-1R2, released in February 2026, adds an important dimension to the exposure analysis by clarifying direct third-party penalties under section 163.2 of the Income Tax Act, which are distinct from a client’s civil negligence claim. The circular provides revised guidance on the conditions under which incorrect recommendations attract penalties.

IC01-1R2 clarifies that planner penalties under subsection 163.2(2) may apply to published or promoted tax avoidance structures and instructional content aimed at a broad or undefined audience. No specific taxpayer needs to be identified where the relevant communications are based on false or misleading statements and the penalty conditions are met. Articles, social media posts and blog content therefore cannot be treated as outside the analysis merely because they are not tax filings.

The planner penalty applies to those who make, or assist in making, false or misleading statements in planning activities. Its amount is the greater of a fixed floor amount or the person’s total gross entitlements for the activity. The preparer penalty under subsection 163.2(4) targets those who make or acquiesce in a false statement to or by another person, knowingly or with reckless disregard. Its amount is the greater of a fixed floor amount or the lesser of the taxpayer’s gross negligence penalty and a specified cap plus the advisor’s gross compensation for the false statement. The two provisions create direct financial exposure, separate from any insurance-backed settlement with a client.

IC01-1R2 defines culpable conduct at a higher level than simple negligence. The provisions target intentional, reckless or grossly negligent behaviour. Passing on provider claims is therefore not automatically a penalty event, and PHSP commentary is not inherently suspect. The concern is reckless reliance on false or misleading marketing, or superseded guidance, without independent analysis. The distinction matters because civil negligence exposure and CRA penalty exposure do not share the same threshold.

The documentation and due-diligence practices that close the liability gap

Advisors should make the work behind their PHSP advice explicit. The engagement letter should say whether the work includes a PHSP compliance review so it is clear who is responsible for checking that the plan qualifies. Before recommending a plan, the advisor must check for themselves how the client is paid, whether the client is an employee of the corporation and whether it has arm’s-length employees. Those facts show which eligibility issues the advisor must cover.

The review must then move from the client’s circumstances to the actual plan document. The advisor should assess that document against the Income Tax Act PHSP requirements. Missing documentation, self-administration and the absence of a fixed pre-set annual limit are substantive defects. The advisor should also confirm that a qualified third-party administrator adjudicates claims impartially and that the employer does not control individual approvals. This establishes whether the administration supports the insurance character claimed for the plan.

If the advisor finds that a sole shareholder-employee plan can qualify, the file must explain why and set out the competing CRA positions. The client must acknowledge the risk in writing before the plan is established. That acknowledgment records the uncertainty the client was asked to accept before an audit.

The record also needs to survive long enough to support a later review. Advisors should tell clients to retain plan documents, claim records and reimbursement records for a minimum of seven years. They should build annual plan reviews into the engagement scope because changes in compensation, employment headcount or administration can affect qualification. These practices make documentation both a defence and a discipline. A clear record protects the advisor precisely because producing it requires the independent reasoning that makes the advice genuinely compliant.

Sources

  1. Private Health Services Plan (PHSP) Canada: CRA Rules and Eligibility
  2. Medical expenses, including payments from a private health services plan (PHSP) - Canada.ca
  3. Can a Sole Proprietor Get an HSA in Canada? Complete Guide
  4. With tax preparers, signer beware - CPA Canada
  5. CRA Updates Guidance on Third-Party Penalties
  6. Third-Party Penalties - Canada.ca
  7. By Peter Aprile, James Roberts, and Jennifer Mak, Counter Tax Litigators LLP
  8. NO.: IC 01-1 DATE: September 18, 2001
Filed underAudit Risk

More in Audit Risk