Can parents consent on behalf of their children, and make access requests for their information? Does it matter if they have custody of the child? … A parent with custody of a child under age 16 can be the child’s substitute decision-make under Part X. This means they can consent to a collection, …
Does Part X affect the duty to report suspected child abuse or neglect to a children’s aid society? … Nothing in Part X — or in Ontario’s other privacy laws — stands in the way of the duty to report suspected child abuse or neglect to a children’s aid society. Individuals and service providers can …
What can we do to prevent “snooping”? … When an employee purposefully views personal information for reasons unrelated to their job duties — such as out of curiosity about a client they know personally — this is sometimes referred to as snooping. Service providers are required to take reasonable …
Does Part X apply to records created many years ago? … Yes. Even if an individual’s personal information was recorded many years before Part X came into force in January 2020, they have a right to access their record and you must protect it against privacy breaches. However, Part X does not apply …
My organization is covered by Ontario’s health privacy law, PHIPA. Does Part X apply to us? … If a service provider is covered by Ontario’s health privacy law, the core requirements of Part X do not apply to their handling of personal health information — PHIPA applies instead. However, Part X may …
How long must we keep our records? … As a service provider, you are required to develop a policy setting out what kinds of personal information records you maintain and how long you will keep (retain) them. Part X does not dictate how long you must keep records, but it does require you to consider …
How can the Office of the Information and Privacy Commissioner help me? … Our office makes sure that children’s aid societies, Indigenous child and family well-being agencies, group homes, and other service providers follow the rules they’re supposed to, to protect and provide access to your …
What happens if I find out my personal information has been lost, stolen, viewed or shared without my permission? … Your service provider needs to let you know if information they have about you has been lost, shared, stolen or viewed when it shouldn’t be. They need to write down what happened, …
What can I do if I don't get the information or changes I asked for? … If a service provider doesn’t let you see your personal information in your file or won’t make corrections to it, they must tell you why in writing. They must also let you know if what you’re asking for will take longer than 30 …
Information is wrong or missing from my file, how do I get it fixed? … Ask for the correction by writing to the service provider. Some service providers may have a form you can use. Tell them what is wrong or missing and be sure to give them the information needed to fix the problem. Asking for a …
Will I get all the information I ask for? Can I ask for a copy? … Sometimes the service provider may not be able to give you all the information you ask for. This could be because they aren’t allowed to under the law. When a service provider does not give you all of the information you’ve asked …
Does Part X apply to adoption records? … These rules do not apply to adoption records. For more information about getting your adoption records, visit www.ontario.ca/page/search-adoption-records , or call 1-800-461-2156. … Does Part X apply to adoption …
Do I have to be 18 before I can ask to see my personal information in my file? … People of any age can ask to see or make corrections to the personal information in their file. … Do I have to be 18 before I can ask to see my personal information in my …
What kind of information can I ask for? … You can ask to see and get a copy of any or all of your personal information in your file. This could include information about your history, your health or notes from talks you’ve had with a social worker or other professional. Your service provider must …
Backgrounder on LifeLabs Privacy Breach December 17, 2019 … LifeLabs Privacy Breach December 17, 2019 Backgrounder When were you notified of the breach? On November 1, LifeLabs notified both the Office of the Information and Privacy Commissioner of Ontario and the Information and Privacy …
Statement from the Office of the Information and Privacy Commissioner of Ontario and the Office of the Information and Privacy Commissioner for British Columbia on LifeLabs Privacy Breach … Statement from the Office of the Information and Privacy Commissioner of Ontario and the Office of the …
How is Part X enforced? … The Office of the Information and Privacy Commissioner provides oversight of Ontario’s access and privacy laws, including Part X of the CYFSA . Any person can file a written complaint with the IPC if they believe another person has or is about to contravene Part X. The IPC …
Part X of CYFSA: What should I do if there is a privacy breach? … A privacy breach happens when personal information is stolen or lost — or is collected, used or disclosed without authority. If a privacy breach occurs, immediately notify the relevant staff in your organization, identify the scope …
What do I need to tell the public about my organization’s information practices? … All service providers must have a publicly-available written statement about their information practices. This could be included on your website or on posters or brochures in your workplace. Your public statement …
I received a correction request — how should I respond? … Individuals can request correction of records they’ve received from service providers. Service providers must respond to correction requests within 30 calendar days and cannot charge fees. In limited cases, you may extend the deadline for a …