Guidance documents for organizations

IPC submission concerning Bill 194, the Strengthening Cyber Security and Building Trust in the Public Sector Act, focusing on enhancing cyber security, guardrails concerning AI system requirements, and privacy protections for children, youth, and the public sector. The submission provides recommendations concerning the levels of accountability, transparency, and oversight that are needed in a rapidly changing world.

This guidance provides practical advice for public sector organizations to help them identify privacy and transparency considerations when contracting with third party service providers. It includes best practices and recommendations to support proper accountability for records and personal information throughout the procurement process.

This interpretation bulletin outlines the factors for determining whether the economic and other related interests exemption applies to a record, as set out in section 18(1) of the Freedom of Information and Protection of Privacy Act (FIPPA) and section 11 of the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA). This document explains the specific criteria to be met to establish that a record is exempt because of the economic value of the information to the government

This interpretation bulletin explains the public interest override provision, as set out in section 23 of the Freedom of Information and Protection of Privacy Act (FIPPA) and section 16 of the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA). This document outlines the elements to consider when applying the public interest override to records. 

This interpretation bulletin discusses the third party information exemption, as set out in section  17(1) of the Freedom of Information and Protection of Privacy Act (FIPPA) and section 10(1) of the Municipal Freedom  of Information and Protection of Privacy Act (MFIPPA). It outlines the considerations relevant to determining whether the third-party information exemption applies. 

The IPC opposes the repeal of Section 262 of the Community Safety and Policing Act proposed as part of Bill 157, the Enhancing Access to Justice Act. The public consultation requirements in Section 262 are crucial to maintaining transparency and accountability around the regulation-making process for critical policing matters.

Commissioner's speaking remarks. In this letter to Brian Riddell, Chair of the Standing Committee on Social Policy, the IPC makes recommendations in relation to proposed amendments to the Employment Standards Act that relate to the use of AI in the workplace. The letter also calls for the development of a comprehensive private sector privacy law for Ontario.

This interpretation bulletin outlines the elements to consider when determining if a record falls under the advice or recommendations exemption, as set out in section 13(1) of the Freedom of Information and Protection of Privacy Act (FIPPA) and section 7(1) of the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA). This document defines key terms of the exemption and addresses the exceptions to the exemption.

This specific guidance offers practical recommendations for how Ontario police can mitigate potential privacy risks when using or contemplating using facial recognition technology to search mugshot databases. It includes key privacy, transparency, and accountability-related considerations to design, use, and govern such programs responsibly, in Ontario’s current regulatory context.

The Manual for the Review and Approval of Prescribed Persons and Prescribed Entities outlines the process followed by the Information and Privacy Commissioner of Ontario in reviewing the practices and procedures implemented by prescribed persons and prescribed entities to protect the privacy and confidentiality of the personal health information they receive. The manual sets out the obligations imposed on prescribed persons and prescribed entities arising from the review process.

IPC comments to the board concerning its review of the Toronto Police Services’ artificial intelligence based, facial recognition mugshot database program.