· The CFSA states we must report, but Section 72 (7) also protects against liability if civil action is brought against the reporter, as long as there was no malice in reporting. Patient records are confidential & private, but once a suspicion of abuse occurs, our duty to report overrides the provisions of other Statutes such as PHIPA (Personal Health Information ….