Tag: News

  • New Ontario Privacy Impact Assessment Guideline

    New Ontario Privacy Impact Assessment Guideline

    Today’s article summarizes the most important changes between the 2015 and 2025 versions of IPCO’s PIA guideline and explains how these changes may affect your institution’s privacy management practices.

  • Data Sharing Agreements

    Data Sharing Agreements

    A recently announced data-sharing MOU demonstrates IPCO’s compliance with its own guidance. By issuing this MOU, IPCO has put in place a Data Sharing Agreement (DSA) of its own to facilitate information sharing with another government entity.

  • New IPCO Guidelines for the Law Enforcement Exemption

    New IPCO Guidelines for the Law Enforcement Exemption

    The Information and Privacy Commissioner of Ontario (IPCO) has released a new interpretation bulletin providing key guidance and case citations for institutions applying the Law Enforcement exemption under Ontario’s access to information legislation.

  • When are Personal Phone Records Subject to FOI?

    When are Personal Phone Records Subject to FOI?

    For the past two years, a significant case has been unfolding in Ontario’s Freedom of Information (FOI) system, highlighting the delicate balance between expectations of privacy on our personal devices and the public’s demand for access to government records. In late 2022, Global News submitted an FOI request seeking access to Premier Doug Ford’s personal…

  • Bill 194 Receives Royal Assent

    Bill 194 Receives Royal Assent

    Ontario’s Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024 (“Bill 194”) passed third reading and received royal assent on November 25, 2024. It will come into effect on a date to be announced by the provincial government.

  • Privacy Breach Letter Template for Public Institutions

    Privacy Breach Letter Template for Public Institutions

    Today’s article presents a letter template that Ontario public sector organizations can use when notifying individuals affected by a privacy breach.