This handbook offers practical guidance to help smaller organizations meet their privacy obligations under Ontario’s health privacy law. It includes foundational components of a privacy management program such as governance and accountability, privacy policies, privacy procedures and controls, and
This Practice Direction includes a form individual can use to file a complaint about a contravention, or a potential contravention of the Personal Health Information Protection Act, with the Information and Privacy Commissioner.
Under the Personal Health Information Protection Act, individuals can file a complaint with Ontario’s Information and Privacy Commissioner if they disagree with a health information custodian's refusal to respond to all or part of their request to access or correct their records. This Practice
In Ontario, individuals have a right to request access to their health information pursuant to the Personal Health Information Protection Act. This Practice Direction compliments the detail within PHIPA Practice Direction #1: Clarifying Access Requests, and provides additional clarification to
This Code of Procedure describes the processes the Office of the Information and Privacy Commissioner (IPC) follows when it assesses matters under the Personal Health Information Protection Act, including complaints, Custodian-reported files and IPC-initiated files.
This publication outlines the key obligations of police under privacy legislation in their use of ALPR systems. This is an update of the guidance document originally published in 2017, and provides recommendations, including best practices, on using these systems in a privacy-protective manner
The updated Code of Procedure for appeals under the Freedom of Information and Protection of Privacy Act and the Municipal Freedom of Information and Protection of Privacy Act took effect on September 9, 2024. The IPC has also updated its Practice Directions under the new code which also take effect
