Commissioner's Blog

Dive into Commissioner Kosseim’s insightful blogs covering privacy, access, cyber safety, and beyond. Stay informed and explore the latest insights.

Protecting Against Ransomware

Ransomware is a type of malicious software, or “malware,” that encrypts files on your device or computer and then demands payment in exchange for the key needed to decrypt the files. It essentially locks you out of your data and holds the means of regaining access for ransom.

In recent months, large Canadian institutions such as universities and hospitals have reported having their computer networks or systems attacked by some form of ransomware. Clearly, this software has become an increasingly common and serious threat to the security of electronic records. To help public organizations and healthcare facilities protect themselves, we have published a new technology fact sheet outlining various strategies for protecting information and how to respond to an attack.

We recommend a number of administrative and technological approaches organizations may take to help meet their legislative requirements as outlined in Ontario’s freedom of information and privacy laws. These approaches include employee training, limiting user privileges, software protections and more.

This fact sheet is the first in a new series to provide institutions and organizations with information about how new and emerging technologies may affect the privacy and access rights of individuals. Each fact sheet will introduce the basic concepts and techniques of a particular technology and outline key issues to consider.

Media Contact

For a quick response, kindly e-mail or phone us with details of your request such as media outlet, topic, and deadline:

Email: @email
Telephone: 416-326-3965

Contact Us

Social Media

The IPC maintains channels on Twitter, YouTube and Linkedin in its efforts to communicate to Ontarians and others interested in privacy, access and related issues.

Our Social Media Policy

Help us improve our website. Was this page helpful?
When information is not found


  • You will not receive a direct reply. For further enquiries, please contact us at @email
  • Do not include any personal information, such as your name, social insurance number (SIN), home or business address, any case or files numbers or any personal health information.
  • For more information about this tool, please see our Privacy Policy.