Tag: Best Practices

Found 78 results


Frequently Asked Questions: Personal Health Information Protection Act

This revised FAQ has a new look and feel and has been rewritten with cleaner, easy to understand, gender-neutral language. Also included are a few additions to the original publication: Questions on assumed implied consent and consent from children under 16. Questions regarding the relationship ...

Date: Nov 02 2015   Type: Resource   Access: Both

Download

Privacy Diagnostic Tool (PDT) Workbook

The PDT is an instrument that uses a series of questions to give businesses a ‘read’ on how well they manage their customers’ personal information. The PDT uses internationally recognized fair information practices as its basis.

Date: Aug 01 2001   Type: Resource   Access: Both

Download

A Model Access and Privacy Agreement
Topic: access | privacy

Provides a template designed for insertion into contracts drawn up when a government function is transferred over to the private sector. The model contract will provide assurances to the public that their personal information will be kept secure and their right to privacy preserved when governmen...

Date: Aug 01 1997   Type: Resource   Access: Both

Download

Best Practices for Institutions in Mediating Appeals under the Freedom of Information and Protection of Privacy Act and the Municipal Freedom of Information and Protection of Privacy Act

A Joint Project of the Office of the Information and Privacy Commissioner of Ontario and the Ministry of the Attorney General.

Date: Mar 01 2004   Type: Resource   Access: Both

Download

IPC Practices No. 1 – Drafting a Letter Refusing Access to a Record

Tip sheet for government organizations on handling information

Date: Nov 04 2005   Type: Resource   Access: Professional

Download

IPC Practices No. 5 – Third Party Information at the Request Stage

Tip sheet for government organizations on handling information.

Date: Sep 01 1998   Type: Resource   Access: Both

Download

IPC Practices No. 7 – The Collection and Use of the Social Insurance Number

Tip sheet for government organizations on handling personal information with regards to social insurance numbers.

Date: Sep 01 1998   Type: Resource   Access: Both

Download

IPC Practices No. 8 – Providing Notice of Collection

Tip sheet for government institutions on information management.

Date: Sep 24 2003   Type: Resource   Access: Professional

Download

IPC Practices No. 16 – Maintaining the Confidentiality of Requesters and Privacy Complainants

Tip sheet for government institutions on information management.

Date: Sep 01 1998   Type: Resource   Access: Both

Download

IPC Practices No. 22 – Routine Disclosure/Active Dissemination (RD/AD) of Government Information

Tip sheet for government organizations on information management.

Date: Sep 01 1998   Type: Resource   Access: Both

Download

IPC Practices No. 25 – You and Your Personal Information at the Ministry of Transportation

Tip sheet for government institutions on handling personal information. Revised July, 2009.

Date: Sep 01 1998   Type: Resource   Access: Both

Download


Best Practices for Online Privacy Protection

An educative tool designed to help companies identify and implement appropriate practices for protecting the privacy of their online customers.

Date: Jun 01 2001   Type: Resource   Access: Both

Download

Exercising Discretion under section 38(b) of the Municipal Freedom of Information and Protection of Privacy Act

Provides institutions with an outline of what constitutes a valid exercise of discretion in the application of section 38(b), and some practical tips on how to properly exercise discretion when dealing with a specific category of records.

Date: Jan 01 2002   Type: Resource   Access: Professional

Download

Guidelines for Protecting the Privacy and Confidentiality of Personal Information When Working Outside the Office

Provides best practices and tips to assist government organizations in developing policies that address the privacy obligations of employees who are working in locations outside the traditional office setting.

Date: Jul 01 2001   Type: Resource   Access: Both

Download

Guidelines on Facsimile Transmission Security

This updated paper sets out guidelines for government institutions to consider when developing systems and procedures to maintain the confidentiality and integrity of information transmitted by fax.

Date: Jan 01 2003   Type: Resource   Access: Professional

Download






Practice Direction #7 – Sharing of representations

Revised March 2014

Date: Apr 06 2006   Type: Resource   Access: Professional

Download


Practice Direction #11 – Appeal Form

Date: Apr 06 2006   Type: Resource   Access: Professional

Download


Practice Tool for Exercising Discretion: Emergency Disclosure of Personal Information by Universities, Colleges and other Educational Institutions

In emergency situations, privacy laws in Ontario and British Columbia1 do not prohibit universities, colleges or other educational institutions from responsibly disclosing a student’s personal information, including information about their mental, emotional or other health conditions, to pare...

Date: Oct 30 2008   Type: Resource   Access: Professional

Download

Dispelling the Myths Under the Personal Health Information Protection Act

There are many myths surrounding how information may be collected, used and disclosed under the Personal Health Information Protection Act. Working with our partners in the health care community, we have created this one-page document to dispel some of the more common myths.

Date: Sep 28 2012   Type: Resource   Access: Both

Download

Detecting and Deterring Unauthorized Access to Personal Health Information

Unauthorized access continues to be a growing problem in the health sector in Ontario. The province’s Personal Health Information Protection Act, (PHIPA), permits health information custodians (HIC) to collect, use and disclose personal health information for the purposes of providing or assist...

Date: Jan 28 2015   Type: Resource   Access: Both

Download

Guidance for the Use of Body-Worn Cameras by Law Enforcement Authorities

This guidance document aims to identify some of the privacy considerations law enforcement authorities should take into account when deciding whether to outfit law enforcement officers with body-worn cameras. Published by the federal Privacy Commissioner and privacy and personal information prote...

Date: Feb 18 2015   Type: Resource   Access: Both

Download

Best Practices for Protecting Individual Privacy in Conducting Survey Research

  As governments and public sector organizations strive to become more efficient, accountable and customer focused, they frequently seek input from the public about their programs and services. One of the most cost-effective ways to accomplish this is through surveys. While surveys can be an...

Date: Apr 07 2015   Type: Resource   Access: Both

Download

Guidelines for the Use of Video Surveillance

  Many institutions turn to video surveillance to help them fulfil their obligations to protect the safety of individuals and the security of their equipment and property. Video footage captured by cameras is regularly used to assist in the investigation of wrongdoing. However, the use of th...

Date: Oct 06 2015   Type: Resource   Access: Both

Download

FIPPA and MFIPPA: Bill 8 — The Recordkeeping Amendments

Bill 8, the Public Sector and MPP Accountability and Transparency Act, 2014, will come into effect on January 1, 2016. This Bill amends the Freedom of Information and Protection of Privacy Act (FIPPA) and the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA) to include requi...

Date: Dec 22 2015   Type: Resource   Access: Both

Download

Yes, You Can. Dispelling the Myths About Sharing Information with Children’s Aid Societies

Common misunderstandings about privacy are frequently cited as reasons for not sharing information with a children’s aid society (CAS) about a child who may be at risk. In fact, Ontario law permits professionals working with children to share this information. To help professionals understand t...

Date: Jan 20 2016   Type: Resource   Access: Both

Download

Mediation checklist

Date: Jan 19 2007   Type: Resource   Access: Both

Download

Mediation Tips for Institutions

Date: Jan 19 2007   Type: Resource   Access: Both

Download

Mediation Best Practices for Institutions

Date: Jan 19 2007   Type: Resource   Access: Both

Download

De-identification Guidelines for Structured Data

This document highlights the key issues to consider when de-identifying personal information in the form of structured data and it provides a step-by-step process that institutions can follow when removing personal information from data sets.

Date: Jun 08 2016   Type: Resource   Access: Both

Download

Processing Voluminous Requests A Best Practice for Institutions

A joint project of the Office of the Information and Privacy Commissioner/Ontario and the Information and Privacy Unit, Ministry of Natural Resources, this publication provides a selection of strategies when dealing with voluminous requests. September 2002.

Date: Sep 01 2002   Type: Resource   Access: Professional

Download

Practice Direction #10 – Appeal fees

Practice Direction #10 – Appeal fees

Date: Apr 06 2006   Type: Resource   Access: Both

Download

IPC Practices No. 15 – Clarifying Access Requests

Tip sheet for government organizations on handling information

Date: Sep 24 2003   Type: Resource   Access: Both

Download

IPC Practices No. 26: Safe and Secure Disposal Procedures for Municipal Institutions

Tip sheet for government insitutions on handling information.

Date: Aug 13 2003   Type: Resource   Access: Both

Download

Manual for the Review and Approval of Prescribed Persons and Prescribed Entities
Topic: health

The Manual for the Review and Approval of Prescribed Persons and Prescribed Entities outlines the process followed by the Information and Privacy Commissioner of Ontario in reviewing the practices and procedures implemented by prescribed persons and prescribed entities to protect the privacy and ...

Date: Jan 19 2024   Type: Resource   Access: Both

Download

Fact Sheet: Communicating Personal Health Information by Email

This fact sheet describes the risks of using email and custodians’ obligations under the Personal Health Information Protection Act. It outlines some of the technical, physical and administrative safeguards needed to protect personal health information when communicating by email and the polici...

Date: Sep 15 2016   Type: Resource   Access: Both

Download

Guidance on the Use of Automated Licence Plate Recognition Systems by Police Services

This guidance document outlines the key obligations of police under privacy legislation in their use of ALPR systems and provides guidance, including best practices, on using these systems in a privacy-protective manner.  It addresses the use of ALPR systems for public safety purposes, in parti...

Date: Jul 04 2017   Type: Resource   Access: Both

Download

You are Affected by a Freedom of Information Request: What You Should Know

This fact sheet seeks to answer some of the common questions you may have about the freedom of information process. This document is part of a series designed to keep the public and professionals up to date with the IPC’s interpretations of access and privacy laws.

Date: Sep 26 2016   Type: Resource   Access: Both

Download

Improving Access and Privacy with Records and Information Management

This guidance is designed to help institutions implement better record and information management practices and enhance the public’s ability to access information.

Date: Nov 03 2016   Type: Resource   Access: Both

Download

Fact Sheet: Video Surveillance

This fact sheet highlights the important factors an institution must consider before implementing a video surveillance system.

Date: Nov 09 2016   Type: Resource   Access: Both

Download

IPC Practices No. 14 – The Indirect Collection of Personal Information

Tip sheet for government organizations on handling information.

Date: Sep 24 2003   Type: Resource   Access: Both

Download







Code of Procedure for Matters under the Personal Health Information Protection Act, 2004

PHIPA Code of Procedure

Date: Feb 28 2017   Type: Resource   Access: Both

Download




Disposing of Your Electronic Media

This fact sheet provides guidance on how Ontario public institutions and health information custodians can securely destroy personal information when disposing of electronic media.

Date: Mar 06 2018   Type: Resource   Access: Both

Download

Fees, Fee Estimates and Fee Waivers

Date: Jun 11 2018   Type: Resource   Access: Both

Download

Responding to a Health Privacy Breach: Guidelines for the Health Sector

This publication replaces the guidance document, What to do When Faced With a Privacy Breach: Guidelines for the Health Sector. This new, updated guide highlights the importance of having a detailed privacy breach protocol and explains the steps to take in responding to a breach under Ontario’s...

Date: Oct 04 2018   Type: Resource   Access: Both

Download











Reporting a Privacy Breach to the Information and Privacy Commissioner: Guidelines for Service Providers

Guidelines for service providers under Part X of the Child, Youth and Family Services Act

Date: Oct 17 2019   Type: Resource   Access: Both

Download





Manual for the Review and Approval of Prescribed Organizations
Topic: health

Date: Oct 18 2021   Type: Resource   Access: Both

Download

Privacy guidance on facial recognition for police agencies (link below)

Privacy guidance on facial recognition for police agencies (Privacy Commissioner of Canada)

Date: May 02 2022   Type: Resource   Access: Both

Read more