Guidance for organizations
Learn about your information access, privacy, and health privacy responsibilities under Ontario law.
Access to information
Your access responsibilities
Public institutions collect personal information to perform their functions effectively. As an organization covered by Ontario’s access and privacy laws, it is your responsibility to provide individuals with access to their personal information when requested and to allow corrections if errors are identified. These laws apply to provincial and municipal government organizations, children’s aid societies, and other child and family service providers.
How the IPC can help
The IPC provides guidance to organizations on how to fulfill their obligations under Ontario’s access and privacy laws. If your organization needs assistance responding to freedom of information requests or understanding how to handle appeals filed by individuals, the IPC offers resources, tools, and advice to ensure compliance.
Privacy
Your privacy responsibilities
Privacy is a fundamental right that public institutions in Ontario must safeguard. As an organization, you are required to adhere to strict rules set out in Ontario’s privacy laws when collecting, using, or disclosing personal information. These rules ensure that the personal information you manage is handled responsibly and transparently.
How the IPC can help
The IPC supports organizations by offering guidance, tools, and best practices for complying with Ontario’s privacy laws. If you are uncertain about your obligations or need assistance with privacy management, the IPC can help by reviewing your policies, addressing complaints, and providing recommendations to strengthen privacy practices.
Health privacy
Your health privacy responsibilities
As a health information custodian, you are legally required to protect personal health information under the Personal Health Information Protection Act (PHIPA). This includes following strict rules for collecting, using, and disclosing personal health information to ensure it is safeguarded and handled appropriately.
How the IPC can help
The IPC assists health information custodians by providing tools, training, and advice to help you comply with PHIPA. If your organization encounters challenges in managing personal health information or responding to complaints, the IPC can guide you through investigations, policy improvements, and compliance measures.