S3-Episode 3: A casual conversation between two Canadian privacy commissioners

Info Matters Podcast Cover Graphic

Listen to Commissioners Kosseim and Dufresne speak candidly about some of the challenges and opportunities they face and potential areas for collaboration between their offices. Bilingual episode in English and French.


Philippe Dufresne, Privacy Commissioner of Canada, is a leading legal expert on human rights, administrative, and constitutional law. He previously served as the Law Clerk and Parliamentary Counsel of the House of Commons. The Office of the Privacy Commissioner of Canada (OPC) oversees compliance with the Privacy Act, which covers the personal information-handling practices of federal government departments and agencies, and the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s federal private-sector privacy law.

  • One-year anniversary, stepping into a new role as privacy commissioner of Canada [1:45]
  • Three years as Ontario’s information and privacy commissioner [4:26]
  • Adapting to the hybrid workplace model [6:34]
  • Rhythms of work throughout the year [9:02]
  • From human rights lawyer to privacy commissioner of Canada [10:46]
  • The fast-moving dialogue about privacy issues [12:24]
  • Making the switch from federal to provincial regulator [14:02]
  • Why it’s a pivotal time for privacy protection [18:52]
  • Artificial intelligence, Bill C-27, Digital Charter Implementation Act [19:34]
  • Harnessing the power of AI for good [22:37]
  • A modern and effective regulator for a digital Ontario [23:39]
  • Preparing to implement a new law in a continuing state of uncertainty [25:52]
  • Closing gaps in privacy protection for Ontario workers [29:45]
  • Federal-provincial collaboration: education, privacy protections for children and youth [33:21]
  • Federal-provincial collaboration: enforcement and investigations, raising public awareness of privacy issues [36:19]


Info Matters is a podcast about people, privacy, and access to information hosted by Patricia Kosseim, Information and Privacy Commissioner of Ontario. We dive into conversations with people from all walks of life and hear stories about the access and privacy issues that matter most to them.

If you enjoyed the podcast, leave us a rating or a review.

Have an access to information or privacy topic you want to learn more about? Interested in being a guest on the show? Send us a tweet @IPCinfoprivacy or email us at @email.


Patricia Kosseim:

Hello, I’m Patricia Kosseim, Ontario’s Information and Privacy Commissioner, and you’re listening to Info Matters, a podcast about people privacy and access to information. We dive into conversations with people from all walks of life and hear real stories about the access and privacy issues that matter most to them.

[foreign language 00:00:28]. Hello listeners, and welcome to another episode of Info Matters. My guest today is Canada’s Privacy Commissioner Phillippe Dufresne. Now, this episode’s going to be a little different than our usual format. Rather than an interview per se, Commissioner Dufresne and I will be having a very casual two-way conversation about our work, current topics and privacy and the kinds of challenges we face in our respective offices. So in the next half hour or so, we’ll be pulling back the curtain a bit on what gets discussed behind the scenes. So you could all pretend to be a fly on the wall and listen in as two of Canada’s Privacy Commissioners chat about what’s on their minds and what keeps them up at night. So get yourselves a nice cup of coffee or tea, get comfortable and settle in for what I’m sure will be an insightful and dynamic conversation. Phillippe, welcome to the show. Bonjour et bienvenu.

Phillippe Dufresne:

Merci. Great to be here, Pat.


So excited to have you here. And I remember when you were first appointed, I took you out to lunch at the Mill Street Pub in Ottawa and we had a great conversation that day. So I’m just imagining we’re going to have a similar convo today, only with a broader audience listening in at nearby tables, if you will.


Perfect. I’m closing my eyes and I’m picturing it.


My three-year anniversary is coming up very soon just as your one-year anniversary is coming up. So congratulations about that. What did you find were some of the biggest challenges stepping into your new role as Privacy Commissioner of Canada?


Looking back, first of all, it’s amazing how quickly it’s gone by, and the first thing I noticed coming in and I was so impressed and so grateful and so relieved, frankly, is what a great team I have here at the OPC. So that was great and it really helped navigate and get through what has been a very busy and eventful and challenging year. So in terms of challenges, I think in the first year there was a lot, it was important to me. One of my focus was really to meet as many stakeholders as I possibly could, colleagues, FPT fellow Commissioners in Canada internationally. So that took a lot of time and a lot of effort and a bit of energy too. I’m a bit of an introvert, so these are things that I have to do and I enjoy doing them, but they do take a lot of energy.

So that was a big part of it, but what really stuck with me in terms of challenges is that at all levels of the OPC, and in my end year report I talked about this year as being a pivotal year for privacy and a pivotal year for the OPC. So in terms of my policy team, well, we’re in the middle of law reform. We have C-27, which was introduced on the day that I was confirmed as Privacy Commissioner. So obviously tons of work, including all of last summer, in getting us ready for that. And key parliamentary appearances on things like the RCMP’s use of on device investigative tools, testimony on C-11 on Broadcasting Act reform.

So all of these really in short order, and on the compliance front, we’ve had major important precedent setting investigations, whether we think of pandemic investigations, we just issued our special report on that a few weeks ago, the Home Depot case on electronic receipts and the sharing of information in that context. On the litigation front, we have ongoing litigation with the major social media platforms, raising big ticket issues both now at the Federal Court of Appeal. On the corporate side of things, we were as you were, as all of us were, transitioning from the heavier pandemic phase to the end pandemic phase and going through the hybrid workplace, we had a Public Service strike.

We also have to manage our situation at the OPC in terms of we might be getting more powers and responsibilities, we might need more resources. We have to adapt. What about you? You took on the role of Ontario’s Information and Privacy Commissioner three years ago, so what your reflections in that longer period of time and maybe, I guess maybe there’s been even more change from year one to now?


Well, certainly when I look back on that first year, I was appointed in July 2020 after 20 years of experience on the federal scene. So obviously one of my biggest challenges was just adjusting to the Ontario scene. A bit like you getting to know who the stakeholders were. I was appointed July 1st. I started on July 2nd, and the very first file we were dealing with, we were in the throes of the COVID Alert app and reviewing that with the view to the launch, imminent launch and making sure that all the privacy protections were built in.

So it was a very frenetic time actually. Also, we’re in the throes of the pandemic, the early stages where there was a lot of uncertainty about just where we were heading, when we were getting back to the office. It was still very tentative and we had no idea that it would go on for three years after that. So it was a great period of uncertainty. I found the most challenging part of it was not getting to see or meet my team in person for so long. Really, by the time I was able to meet the majority of them, a couple of years would’ve passed before we were able to get together as a group, as a team. And it took me much longer than I would’ve liked, I think to get to know them personally each one by one, get to know their names, their faces. So it was a real challenge, but that certainly didn’t slow down the work.

The first year I began, we saw Ontario come out with the most serious proposal for private sector privacy legislation in the province. So that kept us extremely active and busy in giving the best advice we could in terms of what Ontario’s opportunity would be to lead in this space. So Alto, the big year of challenge, big year of certainly excitement and opportunity, all in the context of a great deal of uncertainty. Now, when I reflect, I started of course, right at the beginning of the pandemic, but you started a little bit later, obviously when we are already back or at least in the midst of establishing hybrid work arrangements. So how was that for you when you started probably at the latter stages of the pandemic than I did?


I think in short, I’m sure I can safely say it was a lot easier than it was for you from what you’ve described that when I joined, it was towards the end of the pandemic. There were people that were on site, certainly not full-time. The majority of the OPC employees were teleworking, but people were able to come on site. I remember early days I really was keen to meet Chief of Staff and the management team and so on, and we were able to do that pretty quickly. Even a day or two before my official start date, I was able to have a lunch with all of my executive team to meet them in person, to have some bilats in person. Obviously we were distancing and so on. We still had all the measures, but it was great to be able to have that in-person exchange. It’s so easier and the chemistry sometimes flows differently and the energy flows differently.

At the same time, I think I benefited as well from the pandemic and the hybrid workplace and all the technological advance and know-how that we have with virtual meetings. And that was hugely beneficial to me in my ability to have one-on-ones with counterparts across the country and indeed across the world. So actually, I think that accelerated my ability. I was able to meet very quickly, a lot of counterparts in Australia, in Europe, across the country way before I was able to meet them in person. I think we had our first FPT, Federal Provincial Territorial Commissioners meeting, I think it was in the fall. So I had already been a couple of months, but I had met all of you, my colleagues virtually. So I had the best of both worlds and my approach has been and is that to try to get the best of both, make the best of the in-person presence, make the best of the virtual presence. And for me, what it does, it makes me appreciate both more.

Now, what I’m interested to know, speaking of change and approaches and workplaces really, and because you’ve had a longer time, you’ve had a better sample than me so far, are there certain periods of the year that you found that are busier or more challenging? Do you find that it’s the seasons that would influence it, or are there other things, factors that you find that maybe I should pay more attention to because it might give me tips on what’s coming and the intensity?


Well, that’s a great question. Frankly, I think, and I’ve always found federally and provincially we’re busy all year round, but I do think there is one difference. Unlike the federal office, we don’t tend to be as consumed by the legislative committee agenda as you are federally. Having said that, we are busy all year round, but I do think it’s really important to use the summertime to recharge the batteries as much as possible. And summer is a good time to do that, at least self-impose some measure of rest and relaxation and encourage the staff to take their well-deserved vacation.

It’s also a time just to have more social events, particularly to reconnect with one another outdoors. We plan our annual picnic in the summer, our Commissioners in The Park series. We’ve resurrected this year the traditional baseball game against the Ombud’s office. I understand that is exceptionally competitive, but a great deal of fun. So I do think that you could go full tilt all year round, but it’s important, at least as much as possible in the summer to try to rejuvenate and get that level of energy needed to sustain all of us throughout the remainder of the year. I’d be curious to know, Philippe, how your current position as Privacy Commissioner of Canada compares with your previous role as a human rights lawyer?


Yes, it’s interesting. There are a lot of similarities, in the sense that that’s a big part of what attracted me to the job here at the Office of the Commissioner, which is that in both cases, when I was there I was a human rights lawyer, working on discrimination cases, protecting the most vulnerable people, whether it was issues of racism, sexism or pay discrimination against women, the issue of accommodating people with disabilities, the issue of mental health, safety, harassment, hate propaganda cases. So these are very serious, very important issues. For me, what I loved there was defending the fundamental rights of Canadians. It was doing that in a context where we also had to take the public interest into account, making decisions that would allow the Canadian government and federal institutions to operate and accomplish their mission, while protecting human rights. This was an area where I was responsible for litigation, and then I was responsible for complaints.

So there were many similarities in terms of fundamental rights, public interest, human rights investigations. We had policy functions, we had international role, we had a promotion, there was even a tribunal. Now there’s a proposal on C-27 to have a tribunal in the privacy sense. There is one in the human rights sense. I think one of the differences that I’ve found, and I’ve commented upon it a few times, is that in the privacy world, the frequency of the issues is much greater in the sense that when I was in the human rights world, there would often be big ticket media or public discourse on some of the issues in the media, maybe once a month, maybe once a week. But in the privacy world, it’s many, many times every single day because privacy touches all of us, whatever our age, whatever our role, whatever our interests, whatever our activities.

And coupled with the fast moving technology, I found that that is the biggest difference, the sense that it really touches a much broader proportion of the population. Indeed, it touches the entire population and the way that we’re set up as you know, the collaboration with Federal and Provincial Territorial Commissioners is also more integrated. We have joint investigations, we have very, very strong working relationships, and that’s also true internationally. So I think those would be some of the biggest difference, but the key elements are similar, which made it for me somewhat of a natural transition.

Now, in your case, because you were here at the OPC for more than a decade, you’re certainly a legend here and your reputation is high. And so I’m really intrigued and interested in knowing what the differences are in terms of how the IPC would be different from the OPC because clearly I can’t think of a better person to ask that question, and I’m very curious?


There are a number of things that were very different and in a good way. As you know, provincially, Commissioners have also responsibility for access to information, whereas federally, both those responsibilities are separated into two different offices. So provincially, having both those mandates within the same office was I think a wonderful opportunity for me to recalibrate the values and interests between both privacy and transparency. Not that they’re diametrically opposed, but it does happen in instances, for instance, of access to information requests that raise issues of privacy or personal information, and having to do that delicate balance and sometimes triggering or engaging considerations of broader public interest. So I was very keen to take up both sides of that coin, if you will, in a provincial office. And I think that that has really opened my eyes, certainly on the importance of maintaining good balance.

The other thing that was different as I moved from the federal space to Ontario was of course in Ontario, we do have certain order making powers, particularly on the access to information side and some order making powers in the health and children and youth and family services sectors. And that was also interesting to see how important it is with those order making powers to accentuate even more issues around procedural fairness, independence, impartiality, and the real structural importance of maintaining a separation between our policy functions and communication and public education functions from our tribunal that make orders and decisions. So that was interesting to see in real life some of those internal operational functions or operational structures or processes that have to be put in place.

Another thing I thought was very interesting is in Ontario, unlike federally, there is a role in the Ontario government of a Chief Privacy Officer, like a enterprise-wide CPO, and it makes certainly my job and my role tremendously easier to have that person or that office as an interlocutor when we want to discuss issues of enterprise-wide government and to keep that two-way dialogue going. So I think that if that’s something of interest for the federal government, I think it’s a huge opportunity to create that center of expertise and that interlocutor for other interested parties and regulators such as ourselves.

And the other thing I thought was very interesting when I came to Ontario is discovering maybe by tradition or just by culture, that there are generally much earlier conversations and consultations with my office on proposed programs or initiatives, or even legislative or regulatory proposals in order to get our early views on what some of the privacy and transparency implications are in order to help inform the development of those programs, initiatives or proposals.

Now, has it happened all the time? No, but certainly more often than it did federally. And I thought that was a huge benefit for Ontarians to know that those conversations are happening earlier in the pipelines so that there’s actually opportunity to impact and influence the direction ultimately that is taken. Now, it doesn’t change the government objective. Many times they’re laudable objectives, but there’s certainly opportunity to go about it in a way that is more privacy protective and respectful.

The last thing I thought really enthused me about the provincial jurisdiction is just how much closer to the ground I feel we are provincially. Of course, we have less mileage to cover than you do, Phillippe, federally. We are still Canada’s largest province with over 14,000,000 people, but I do still feel closer to the ground just by virtue of the nature of our jurisdiction over matters such as health, education, municipalities. So those are some of the differences that I certainly felt.

So in that McGill profile piece that they did on alumni, in this case, they did a joint piece on you and me as both graduates of McGill, I read with great interest that you spoke about this being a pivotal time for privacy protection with technology advancing at breakneck speed in today’s digital world. And I guess I want to know candidly from you, what keeps you up at night about all of this?


Great question. And I think in terms of what keeps me up at night, it’s interesting. I would say I don’t think they keep me up at night. I sleep very well. I’m grateful for that, but they keep me perked up during the day. I think I would answer that question with that slight twist. And really, what keeps me perked up during the day is for the moment, the three operational priorities that I have as my focus. One is the accelerating pace of technology, in particular generative AI and all that it can do, both good and in terms of risks to privacy. So that is something that I’m very much focused on, wanting to make sure that we can keep up with that, that we can stay ahead of that in terms of regulators, principles, making sure that we can highlight where the guardrails should be in terms of those technologies.

And you’ve done a piece recently yourself on that with the Human Rights Commission, which was great and very important. We’ve initiated a complaint jointly with the other provinces, which have substantially similar legislation to the federal ones. So Quebec, Alberta, BC, with respect to open AI to identify the privacy aspects of this and make sure that’s being done appropriately. And if not, that we can identify what those are and what the corrections need to be. And my focus is making sure that we get it right from a privacy standpoint, but I’m certainly obviously very engaged on the bias and harms and discriminatory potential impacts that the bill before the House on Artificial Intelligence and Data Act would also address with the Minister of Industry being in charge of that and in collaboration with us and other regulators.

So those aspects touch upon all of us. We’ve recently formed a digital regulators’ forum with the CRTC and the Competition Bureau last week. And there again, all of us, whatever our role with competition, whether it’s broadcasting, telecommunication, we’re going to be focusing on this to see how we can work together, how we can coordinate efforts and share best practices. Children is another one. That’s something that I’m focused on more and more in terms of how they are using technology, digital world, how do we protect their privacy? How do we ensure that they know about it, that they care about it, and that the law is appropriately designed to protect them online and offline? And you are also obviously playing a strong leadership role in that and you’ve identified that as a priority as well.

And the third is really the issue of OPC readiness. And it’s interesting, when I say OPC readiness, I’m talking about how do we adapt to the potential law reform that we’re going to maybe have. Obviously that’s up to parliament, but if it happens, it will require some of the things you’ve done and you’ve described in terms of processes, maybe some aspects of the process will need to be a little bit more formalized. There are going to be different steps. There’s need to be more guidance. There’s going to be needing to be identifying potential receiving requests for advice on codes of practice certification programs.

So lots to do, but even in the absence of C-27, certainly looking to see how we can be an even more nimble and effective office. Are there opportunities for us to deal with the length of time for complaints better, to have that quicker? Any number of things, can we have a greater reach to our guidance? What about you? What are some of the biggest challenges that you see in Ontario and perhaps beyond?


Very similar in a lot of respects, certainly in the area of AI, as you said, has us all seized and I certainly worry about the potential harms in the greatest sense of the word, beyond the privacy harms, the harms to individuals, to communities, to particularly marginalized and vulnerable groups in terms of discriminatory impacts and not getting a reign over this or the appropriate guardrails. I really worry about the use of these technologies going overboard and really triggering a serious public backlash against them. And of course, the trust in organizations and governments who use them, which would be a great shame considering their enormous potential.

So I do worry about us not being able to get ahead of that with the appropriate guardrails in order to ensure that it evolves in a responsible and ethical way. In terms of our own operational challenges, I do think about capacity building and the kinds of skills we need to be able to deal with emerging challenges and how do we stay as a learning organization? How do we build ourselves as a learning organization? Being able to attract the talent we need to contend with many of the technological challenges we have, and being able to continue to train up our staff in order to adapt and adjust to the fast changing challenges.

Now, like many others, of course I can talk to you about eliminating the complaints and appeals backlog we have in our office, but I am much more seized with of course doing that, but finding a sustainable way of staying ahead of this permanently through process changes, proportionate approaches and risk taking, the kinds of approaches I believe we need as a modern and effective regulator. And as you know, that was the theme of my annual report that we just released a couple of days ago. And I think that that requires a whole other perspective, cultural outlook and way of doing things to really deal with these perennial challenges in a way that is appropriate for the modern day challenges we have.

And of course, the greatest worry I have, particularly in Ontario, is just how our legislation is falling way behind what’s needed to protect people and Ontarians and maintain their public trust as Canada’s largest province. It really behooves the government, I think, to look at modern laws and modern governance frameworks that can put Ontario and continue to put Ontario on the map as a leading digital government and one that I think can deliver on their ambitious programs and goals for Ontarians. There’s a lot of work to be done, and we’re still looking towards government leadership to advance on some of these legislative reforms.

Speaking of which, lots happening at the federal level, obviously with Bill C-27. You talked about practically preparing your office to implement a new law in a continuing state of uncertainty and without firm commitment on resources yet. So how are you doing? How are you dancing on the head of that pin in order to get ready without having all of the pieces of the puzzle in place yet?


It’s interesting. It’s an interesting challenge. And so I’m waiting to see what parliament will do and it’s parliament’s prerogative to do it how it wants and when it wants, but obviously the fact that this has been tabled and we’re waiting for it to progress in committee does create some uncertainty in the sense that we want to be prepared for potential new responsibilities, but at the same time, there’s a limit to what we can do until parliament decides that this is indeed what they want to give us in terms of responsibility. So it’s not something that paralyzes us, but it’s something that has to be managed. So how we do it is right now we’re focusing on the best advice that we can give parliament to that law reform bill. And we’ve presented submissions to the committee in writing, and I’m looking forward to appearing before the committee to give my advice and to respond to questions.

Really, in terms of readiness, we’re looking at all aspects of the OPC and saying, “How can we be ready if and when this happens?” So one of the things is resources. We need to have appropriate resources and looking at that. We’ve received additional resources from the last budget. We were very happy to see that in terms of helping us with backlog reduction and helping us deal with privacy breaches and being able to provide more guidance and advice on that. So that was a positive step.

We want to make sure that the process and the backlog is as well dealt with as possible by the time we get new responsibilities so that we could hit the ground running. I have good links and good discussions with the CIO federally at the Treasury Board to identify trends and issues, obviously while respecting the complaints process. And there’s things that can be discussed and things that cannot be discussed. Same with the Department of Industry, same with the Department of Justice. So I think this will be important to continue to have these good means of communications with the relevant departments.

Looking at the investigation process, again, are there things that we need to be prepared for when the process is to be more formalized with order making powers or recommendation to grant fines? In terms of policy, policy is a tricky one because there’s a desire for us to provide guidance, and we’ve just recently provided guidance on employee monitoring to provide information in this time with the more hybrid workplace and so on. There’s areas of guidance that will only really be necessary with C-27. So we can’t really do them until C-27 is adopted, but we’re looking to see are there topics that whether C-27 happens or not, they’re going to continue to be relevant??

So as I said, there are things we can’t do because we don’t know yet what’s going to happen, but there’s a lot that we can already start to do so that we can really minimize the time that’s going to be needed if parliament decides that to adopt C-27 and then what form it decides. And if it doesn’t, then so that we can provide the best support and protection and promotion of privacy under existing legislation. And at the Ontario level, do you see any opportunities for modernisation, either at your office or at the legislative level? I know there was the white paper. Are there any developments, any issues that you are following more closely in relation to that, either at the regulatory legislative level or at the more operational level?


I think there’s certainly lots of legislative opportunities in Ontario, regardless of the fate of Bill C-27. I’ve stated publicly that it’s important for Ontario to move forward irrespective and in terms of covering the constitutional gaps that C-27 will leave behind. You talked about employee privacy, but as you know, and our listeners know, that’s only in the federally regulated workplace. So it leaves all of Ontario workers completely in the lurch in terms of statutory privacy protection. So that’s a huge gap that I’m very concerned about for the same reason you are in terms of the increase and uptick of workplace surveillance and remote monitoring, particularly in the emerging workplace of the present and the future.

Another area in the not-for-profit sector that remains completely ungoverned, again, outside the scope of federal jurisdiction, given their non-commercial nature, but huge data collectors and lots of risks in that sector in particular, regardless of the best intentions, there is still lots of concerns around that largely unprotected space for Ontarians. Of course, political parties like every jurisdiction, including your own, is very, very important to look at and to maintain the trust of citizens and voters. So I think it’s incumbent on Ontario to move forward, certainly at a minimum in these areas.

There’s also a great opportunity for Ontario to take a more integrated approach to the health sector. We regulate the public sector and the private sector and take less of a siloed approach to these areas. As an example, there’s an important wave or trend going on globally, as you know, around enforcement collaboration, not just between data protection authorities, but different regulators. And right now Ontario’s laws are not as enabling of that inter-jurisdictional collaboration and intersectoral collaboration that I think we need to really deal with these horizontal data issues.

And the last area, I’d say that I think every jurisdiction is probably similar in the sense of the need, particularly to take a very hard look at how we regulate artificial intelligence and how it intersects not only with data privacy, but also the broader range of human rights. And that’s why it was really important for us to issue that joint statement with the Ontario Human Rights Commissioner to really emphasize the full gamut of human rights impacted by these technologies with really human dignity as the common denominator underlying all of it. So those are certainly areas where I think legislatively, Ontario should go and must go if we’re going to keep up with the kind of challenges that we’ve been discussing.

I just want to change tracks for a moment to our one area that is a strategic priority for our office. And you mentioned it is also a priority for you, and that’s in the area of children and youth privacy and digital literacy. And so really I’d like to ask you, what do you think our offices can do together to move the needle in this space of common interest?


Well, I think the first thing, and we are doing it is that collaboration. I think this is a perfect example where the federal, territorial, provincial collaboration is so important because we all bring different things to the table. The significant expertise that you have in Ontario and with the closer proximity to the schools’ educators and all of those aspects are absolutely essential to protecting children. And where I’m looking at it is really from a number of angles in terms of do we have the right laws? Do we have the right framework to protect children? Are we protecting children the same way we’re protecting adults, or should they be protected differently or perhaps more for certain aspects given their greater vulnerability or perhaps that they would have less awareness in terms of the privacy risks and being nudged in certain directions?

So that’s why we’ve made… One of the recommendations we’ve made on C-27, and on this I agree with Minister Champagne, who has included greater protection for children and for the information of minors in C-27. I agree with that, and I’ve recommended going further in even strengthening the preamble of the Act to recognize that one of the purposes is to protect children’s privacy and the best interest of the child. So really to bring these interpretive tools to courts to say that this is part of what we do, that we need to bear this in mind. And this is something that here at the OPC in our guidance on consent, we’ve already talked about that in terms of children and certain appropriate practices or inappropriate practices.

I think education is so critical, whether it’s through school curriculum. Are there enough courses on privacy? Should there be more? Whether it’s in high school, elementary school, universities, law schools, this is something that’s becoming more and more important in our lives and it touches all of us. If you talk about AI, I think it’s important that children have strong knowledge about this, that they can ask the right questions, that they’d be sensitized to how powerful these tools are and what are the implications?

On the other hand, I don’t want to delegate all of that responsibility on children because they are children and the systems I think would need to protect them appropriately so that they can be children and that they can be protected online and offline. So I say laws, guidance, policies, education, communications, communications that are targeted and appropriate for kids. In your area, what particular areas would you see where we could collaborate in the coming years given our respective areas of responsibility?


Well, one area that I think is obvious given our complimentary and respective jurisdictions is just around the whole public sector, private sector interface. So many times we get to notice or reports of data breaches that involve the pipeline of data flows from public institutions to the third party service provider or vendor. And being able to address just half that equation in terms of our jurisdiction over the public sector institution oftentimes is not sufficient to really get to the heart or the root of the matter because we also have to look at the other half of the equation, which is the private sector vendor or processor that was involved.

And so certainly, an area I think of important federal Ontario collaboration is in enforcement cooperation in these kinds of cases that involve both public sector and private sector dimensions. Now, I said that within the constraints of the current law, some of our laws allow more information sharing and collaboration and enforcement cooperation than others. And certainly that’s an area where, as I mentioned, I think legislatively that’s a really important area to address in order to be able to leverage one another’s jurisdictions and one another’s resources and insights in order to really get to the heart of the matter or the underlying issue in data breach and other cases.

So that’s an area where I think not only within the constraints, as I said, of current law, but hopefully within the more enabling legislative changes, I think we can continue to have great impact ultimately. And I would add to this public education broadly. You spoke of children, but I think in all the aspects of public education, we all, whether it’s federal, Ontario or frankly any FPT jurisdiction, we all have public education within our mandates and are all really seeking to relay the similar kinds of guidance information to Canadians writ large. And I think by leveraging our resources and pooling together our expertise and our access to different audiences, federally, provincially, territorially, even municipally, I think we can really make broad and more impactful changes in terms of raising public awareness. So what a great theme to end our conversation on, collaboration. It’s already the end of our time together. It went so fast. I think we could have kept the conversation going all afternoon.

Once again, thank you, Philippe, for this very interesting interview. It was a great pleasure to have had the chance to exchange our ideas and experiences and to have discussed a number of subjects of common interest.

I hope our chat has provided value to our audience as well, and that you were able to listen into a real candid conversation between federal and Ontario Privacy Commissioners, and to give you a real insider sense of the kinds of things we talk about. For listeners who want to learn more about some of the topics mentioned in this episode, please go to the show notes for links to various resources. Well, that’s it folks. Thanks for tuning in to this special episode of Info Matters. And until next time.

I’m Patricia Kosseim, Ontario’s Information and Privacy Commissioner, and this has been Info Matters. If you enjoyed the podcast, leave us a rating or review. If there’s an access or privacy topic you’d like us to explore on a future episode, we’d love to hear from you. Send us a tweet at @IPCinfoprivacy or email us at @email. Thanks for listening and please join us again for more conversations about people, privacy and access to information. If it matters to you, it matters to me.

The information, opinions, and recommendations presented in this podcast are for general information only. It should not be relied upon as a substitute for legal advice. Unless specifically stated otherwise, the IPC does not endorse, approve, recommend, or certify any information, product, process, service, or organization presented or mentioned in this podcast, and information from this podcast should not be used or reproduced in any way to imply such approval or endorsement. None of the information, opinions and recommendations presented in this podcast bind the IPC’s Tribunal that may be called upon to independently investigate and decide upon an individual complaint or appeal based on the specific facts and unique circumstances of a given case.
Help us improve our website. Was this page helpful?
When information is not found


  • You will not receive a direct reply. For further enquiries, please contact us at @email
  • Do not include any personal information, such as your name, social insurance number (SIN), home or business address, any case or files numbers or any personal health information.
  • For more information about this tool, please see our Privacy Policy.