Annual Statistical Reporting FAQ

Annual statistical reporting for the 2023 reporting year is open.

All institutions under the Freedom of Information and Protection of Privacy Act (FIPPA), the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), Part X  of the Child, Youth and Family Services Act (CYFSA), and/or the Personal Health Information Protection Act (PHIPA) are required by law to submit annual statistics.

Forgot your password? Do not create a new account. Reset your password here or contact @email for login assistance.

New! I am a service provider under the Child, Youth and Family Services Act (CYFSA). Do I submit a report?

Effective January 1, 2020, Service providers under the Child, Youth and Family Services Act must keep track of certain statistics regarding Part X and report them annually to the IPC. To find out what statistics to track, read our Guidelines for Submitting Statistics to the IPC

Service Providers under the CYFSA will be required to submit statistics for the 2023 calendar year by Monday, April 1, 2024.

What if I didn’t receive any requests last year?

Then reporting is easy! Simply log in to your account and click on “No Requests.” It only takes a moment.

Even if you didn’t receive any access requests during the calendar year, you must submit a report.

I am both a health information custodian under PHIPA and an institution under FIPPA and MFIPPA. Do I fill out two forms?

Yes. If you are both a health information custodian under PHIPA and an institution under FIPPA or MFIPPA, such as a hospital or medical officer of health, you must submit a FIPPA/MFIPPA and a PHIPA report.

You must also complete a PHIPA breach statistics form (see below) on or before Friday, March 1, 2024.

How do I submit my statistics?

The Annual Statistics Submission Website contains workbooks and guides to submitting your statistics. You may find it easier to complete the workbook manually and then complete the online form.

You must submit your report online. We do not accept statistical reports by fax or email.

What do I report?

Access, correction and other statistics (FIPPA/MFIPPA/PHIPA)

All institutions under the Freedom of Information and Protection of Privacy Act (FIPPA) or the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA) are required by law to submit their statistics, even those that received no freedom of information requests during the reporting year. The requirements for statistical reporting with respect to FIPPA, MFIPPA and the Personal Health Information Protection Act (PHIPA) are set out under section 34 of FIPPA and section 26 of MFIPPA.

If you are both a health information custodian PHIPA and an institution under FIPPA or MFIPPA or an institution under FIPPA or MFIPPA that has a health information custodian acting as part of the institution, you must submit a FIPPA/MFIPPA and a PHIPA report. For instance, a hospital or medical officer of health must submit a FIPPA/MFIPPA and a PHIPA report.

Refer to the FIPPA workbook / the MFIPPA workbook / or the PHIPA workbook for details on what statistics to submit to the IPC.

Breach statistics (PHIPA)

Health information custodians must submit health information privacy breach statistics as set out under section 6.4 of O. Reg. 329/04 under PHIPA. Note that the 2021 reporting year will be the first reporting year for which health information custodians must set out the number of times personal health information was collected by the custodian by means of the electronic health record (EHR) without authority. Also note that the 2021 reporting year will be the first reporting year for which coroners to whom Ontario Health provides personal health information that is accessible by means of the EHR must comply with section 6.4, with any necessary modification, as if it were a health information custodian.

Health information custodians that are also institutions under FIPPA/MFIPPA must submit their statistics, even if they experienced no breaches during the 2023 reporting year.

Please note that you must report all breaches whether or not you were required or not to notify the IPC at the time they occurred.

Child and family service providers subject to Part X of CYFSA

Child and family services providers subject to Part X of the Child, Youth and Family Services Act (CYFSA) are required to provide the IPC with an annual report on requests for access and correction to records of personal information, privacy breaches and other statistics during the previous calendar year. The requirements for statistical reporting are set out under section 11 of O. Reg. 191/18 under the CYFSA. 

Submitting privacy breach statistics

Health information custodians and child and family service providers under Part X of CYFSA must submit privacy breach statistics. Health information custodians that are also institutions under FIPPA/MFIPPA must submit their statistics, even if they experienced no breaches during the 2022 reporting year. It is easy to complete the online questionnaire, and in cases where there are no breaches to report, it will be done quickly.

You must report all breaches, whether or not you were required to notify the IPC at the time they occurred. For more information, read our guide, Reporting a Privacy Breach to the IPC (health information custodians) and Guidelines for Submitting Statistics to the IPC (child and family service providers).

Reporting online is easy!

I am a first-time user. How do I log-in?

Visit our Registration for Statistical Reporting page to set up an account and get a login id and a password. You will need to include:

  • the name of your organization
  • the name and e-mail address of the head of the organization
  • the name, mailing address, e-mail address, and telephone number of the person responsible for completing the report (the primary contact)
  • your language preference (English or Français)

Once you have started the questionnaire, you can log off the system at any time, and it will remember where you left when you log on the next time. This means you do not have to complete and submit your questionnaire all in one session as long as you complete and submit it on or before the deadline.

I have reported online before. Will my log-in be the same this year?

We have made some changes to make your reporting easier. If you’ve submitted online before, your log-in is the same. Go directly to the Online Statistical Reporting System to submit your report.

Once you have started the questionnaire, you can log off the system at any time, and it will remember where you left when you log on the next time. This means you do not have to complete and submit your questionnaire all in one session as long as you complete and submit it on or before the deadline.

If you need to set up a new account, you can now do this from the Online Statistical Reporting System as well. (Please see the question above.)

I need help!

The IPC is here to help you! Visit our website for helpful resources, including:

If you have any questions, please email the IPC at @email or call (416) 326-3333 or 1-800-387-0073.

Help us improve our website. Was this page helpful?

Note:

  • You will not receive a direct reply. For further enquiries, please contact us at @email
  • Do not include any personal information, such as your name, social insurance number (SIN), home or business address, any case or files numbers or any personal health information.
  • For more information about this tool, please see our Privacy Policy.