What's New

Toronto District School Board cyberattack: Recommendations for improved security

A social engineering attack at a TDSB high school led to the unauthorized access of personal information belonging to current and former students, parents and staff across several schools. The threat actor gained unauthorized access to the affected schools’ systems by obtaining the login credentials...

Resource

- Published on Jan 6, 2025

Exploring health privacy through key 2024 cases

From ransomware attacks to unauthorized access of patient records, health privacy challenges are on the rise. In the latest episode of Info Matters, Commissioner Patricia Kosseim and her colleagues at the IPC discuss key 2024 PHIPA decisions, highlighting lessons learned and practical takeaways for...

Multimedia

- Published on Dec 30, 2025

La commissaire à l'information et à la protection de la vie privée, Patricia Kosseim, pose pour une photo sur un pont, avec des arbres en arrière-plan.

Commissioner blog: Upholding Ontarians’ privacy and access rights in 2024

Commissioner Kosseim reflects on initiatives and advocacy efforts over the past year through the lens of the IPC’s cross-cutting approaches. These approaches reflect the way the IPC has undertaken its work to ensure that Ontario’s access and privacy rights are upheld in the face of new technologies.

Blog

- Published on Dec 19, 2024

Cars driving on the highway during rush hour.

Hot off the press! Updated guidance on the use of automated licence plate recognition systems by police services

The IPC has released updated guidance on the use of automated licence plate recognition systems by police services. In updating this guidance, which was originally released in 2017, we consulted with members of police services, academics, and other experts to provide recommendations that are well...

Resource

- Published on Dec 16, 2024

A person using a computer that shows personal health information.

The IPC raises concerns about privacy and access to personal health information under Bill 231, the More Convenient Care Act

Schedule 6 of Bill 231, the More Convenient Care Act, 2024 introduces a complex initiative to enable Ontarians' use of a Digital Health Identity tool with the intent that Ontarians will use it to access their health records. It contains significant changes to Ontario’s health privacy law that put...

Resource

- Published on Dec 13, 2024

A purple banner with a photo of a shovel in a sandbox.

New research report: Exploring the Potential for a Privacy Regulatory Sandbox for Ontario

Innovators, public institutions, and regulators are continually challenged by rapidly emerging technologies, such as artificial intelligence, and understanding how privacy laws apply to ensure compliance. This report provides valuable insights on how privacy regulatory sandboxes can be used to...

Resource

- Published on Dec 11, 2024

Canada’s Information Commissioners and Ombuds issue joint resolution calling for enhanced transparency in government operations

This federal, provincial, territorial resolution calls for transparency to be built into the early design and implementation of new systems, administrative processes, and governance models.

News Release

- Published on Dec 10, 2024

A photo of the Information and Privacy Commissioner, Patricia Kosseim wearing headphones and smiling.

New Info Matters episode: Technology in the classroom

Artificial intelligence and online learning tools are transforming the classroom for both students and teachers. Commissioner Kosseim speaks with Anthony Carabache, a staff officer in the Professional Development Department at the Ontario English Catholic Teachers’ Association, about the impact of...

Multimedia

- Published on Dec 3, 2024

A blue banner reading "Privacy Day 2025: Privacy-Enhancing Technologies."

IPC Privacy Day event — The power of PETs: Privacy enhancing technologies

Join us on January 28 for the IPC’s Privacy Day event, The power of PETs: Privacy enhancing technologies.

Event

- Published on Dec 2, 2024

Commissioner’s blog: Ontario missed an opportunity to lead on AI

Commissioner Kosseim writes about the recently passed Strengthening Cyber Security and Building Trust in the Public Sector Act. The law leaves significant gaps when it comes to the use of artificial intelligence in the public sector. Without statutory guardrails and explicit independent oversight...

Blog

- Published on Dec 2, 2024

Canadian privacy regulators address information sharing in situations involving intimate partner violence

Privacy authorities across the country have issued a joint resolution to guide the responsible disclosure of personal information in situations involving intimate partner violence.

News Release

- Published on Nov 27, 2024

IPC publishes joint investigation report into LifeLabs privacy breach affecting millions of Canadians

The joint investigation report concerning the 2019 cyberattack on LifeLabs’ computer systems was completed in June 2020. The Ontario Court of Appeal recently dismissed LifeLabs’ bid to block public release of the report.

News Release

- Published on Nov 25, 2024

A group of young people using their phones.

Commissioner’s blog: Empowering young people in the digital world

Commissioner Kosseim highlights some of the ways the IPC is championing the privacy and access rights of young people and providing supports and education to help them navigate the online world safely and responsibly.

Blog

- Published on Nov 20, 2024

Candid photo of GPA Panelists sitting on stage together

The IPC attends 2024 Global Privacy Assembly

The IPC joined data protection authorities from around the world to help shape a coordinated, global approach to data protection and privacy.

News Release

- Published on Nov 19, 2024

The IPC stands up for access rights in Bill 212 submission

Schedule 2 of Bill 212, the Reducing Gridlock, Saving You Time Act would shield certain records related to priority highway projects from freedom of information requests. The IPC’s submission calls for the removal of sections 8(5) and 8(6) from Schedule 2 to support government transparency and...

Resource

- Published on Nov 18, 2024

Commissioner’s remarks to the Standing Committee on Justice Policy regarding Bill 194

Commissioner Kosseim spoke at the Standing Committee on Justice Policy’s public hearings on Bill 194, the Strengthening Cyber Security and Building Trust in the Public Sector Act, to discuss the IPC’s recommendations on enhancing cyber security, AI guardrails, and privacy protections for children...

Resource

- Published on Nov 14, 2024

FederalProvincialTerritorial 2024 Annual Meeting Social Media Kit banner

Canadian privacy regulators pass resolution urging organizations to avoid deceptive design patterns and prioritize privacy

Privacy regulators from across Canada have issued a joint resolution calling for action on the growing use of deceptive design patterns (DDPs) that undermine privacy rights.

News Release

- Published on Nov 13, 2024

New Info Matters episode: Indigenous led innovation

This episode explores the intersection of Indigenous culture, technology, data sovereignty, and privacy. Commissioner Kosseim speaks with Jeff Ward, CEO of Animikii, about how incorporating Indigenous values and principles into the development of new technologies can empower communities.

Multimedia

- Published on Oct 29, 2024

Text reading "Digital Privacy Charter for Ontario Schools."

IPC launches Digital Privacy Charter for Ontario Schools

Calling all school administrators! Join us in championing children’s privacy rights. Take the pledge today!

News Release

- Published on Oct 23, 2024

The federal, provincial, and territorial information and privacy commissioners and ombuds.

Commissioner’s blog: The IPC hosts access and privacy authorities from across Canada

Commissioner Kosseim reflects on the recent meeting of federal, provincial, and territorial information and privacy commissioners and ombuds in Toronto.

Blog

- Published on Oct 17, 2024