Guidance documents for organizations

The Manual for the Review and Approval of Prescribed Persons and Prescribed Entities outlines the process followed by the Information and Privacy Commissioner of Ontario in reviewing the practices and procedures implemented by prescribed persons and prescribed entities to protect the privacy and confidentiality of the personal health information they receive. The manual sets out the obligations imposed on prescribed persons and prescribed entities arising from the review process.

IPC comments to the board concerning its review of the Toronto Police Services’ artificial intelligence based, facial recognition mugshot database program.

As of January 1, 2024, the IPC has the discretion to issue administrative monetary penalties as part of its enforcement powers for violations of the Personal Health Information Protection Act (PHIPA). Download the guidance document to learn more.

In this letter to Brian Riddell, Chair of the Standing Committee on Social Policy, the IPC makes recommendations in relation to proposed amendments to the Connecting Care Act, 2019.

The IPC wants your feedback! We’ve launched a draft Digital Privacy Charter for Ontario Schools to help educators prepare young people to be safe and responsible digital citizens, and empower them to exercise their privacy and access rights.

The IPC wants your feedback! We’ve launched a draft Digital Privacy Charter for Ontario Schools to help educators prepare young people to be safe and responsible digital citizens, and empower them to exercise their privacy and access rights.

The public consultation period ends on Monday, April, 22, 2024.

Letter to Ministry of Health on support for and approach to proposed administrative penalties under PHIPA, highlighting their importance in enforcing healthcare privacy and access rights.

The IPC provided comments to the Ministry of the Solicitor General regarding the regulatory proposals under the Community Safety and Policing Act, 2019 (CSPA) following the ministry’s request for public input. In these comments, the IPC offers high-level comments on three proposals that relate to the IPC’s mandate.

This interpretation bulletin addresses the requirement for institutions to conduct a reasonable search for records upon receipt of an access request made under section 24(1) of the Freedom of Information and Protection of Privacy Act (FIPPA) and section 17(1) of the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA).

This interpretation bulletin outlines how personal information is defined, as set out in section 2(1) of the Freedom of Information and Protection of Privacy Act (FIPPA) and section 2(1) of the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), (together, the Acts).

This interpretation bulletin outlines the fees that an institution may charge a requester, as set out in section 57 of the Freedom of Information and Protection of Privacy Act (FIPPA) and section 45 of the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA). This document also explains what an institution must consider when calculating its fees, how those fees are communicated to the requester, and the factors to consider when deciding whether to grant a fee waiver where it is “fair and equitable” to do so.

This interpretation bulletin outlines factors for determining whether an access to information request is frivolous or vexatious, as set out in section 10(1)(b) of the Freedom of Information and Protection of Privacy Act (FIPPA) and section 4(1)(b) of the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA). This interpretation bulletin explains the grounds for a frivolous or vexatious claim, and offers key considerations for whether an access request meets the threshold to be considered frivolous or vexatious.

This interpretation bulletin outlines the factors to determine if a record is in the custody or under the control of an institution, as set out in section 10(1) of the Freedom of Information and Protection of Privacy Act and section 4(1) of the Municipal Freedom of Information and Protection of Privacy Act. This document further explains how to determine “custody or control” when an institution holds the record or when another individual or organization holds the record.

The public consultation on proposed revisions to the code of procedure for FIPPA and MFIPPA appeals is now closed.

Once the code has been finalized, it will be posted on our website.

If you would like to be notified when the revised code of procedure takes effect, email @email.

The public consultation on proposed revisions to the code of procedure for FIPPA and MFIPPA appeals is now closed.

Once the code has been finalized, it will be posted on our website.

If you would like to be notified when the revised code of procedure takes effect, email @email.