Our frequently asked questions on health cards and health numbers clarify who may collect, use or disclose health numbers for health care purposes, as well as the use of health cards as a proof of identity. Originally published November 2004.

Date: Oct 01 2021   Type: Resource   Access: Both

The PDT is an instrument that uses a series of questions to give businesses a ‘read’ on how well they manage their customers’ personal information. The PDT uses internationally recognized fair information practices as its basis.

Date: Aug 01 2001   Type: Resource   Access: Both

Tip sheet for government organizations on handling information

Date: Nov 04 2005   Type: Resource   Access: Professional

Tip sheet for government organizations on handling information.

Date: Sep 01 1998   Type: Resource   Access: Both

Tip sheet for government organizations on handling personal information with regards to social insurance numbers.

Date: Sep 01 1998   Type: Resource   Access: Both

Tip sheet for government institutions on information management.

Date: Sep 24 2003   Type: Resource   Access: Professional

Tip sheet for government organizations on handling information

Date: Sep 24 2003   Type: Resource   Access: Both

Tip sheet for government institutions on information management.

Date: Sep 01 1998   Type: Resource   Access: Both

Tip sheet for government organizations on information management.

Date: Sep 01 1998   Type: Resource   Access: Both

Tip sheet for government institutions on handling personal information. Revised July, 2009.

Date: Sep 01 1998   Type: Resource   Access: Both

An educative tool designed to help companies identify and implement appropriate practices for protecting the privacy of their online customers.

Date: Jun 01 2001   Type: Resource   Access: Both

Provides best practices and tips to assist government organizations in developing policies that address the privacy obligations of employees who are working in locations outside the traditional office setting.

Date: Jul 01 2001   Type: Resource   Access: Both

This updated paper sets out guidelines for government institutions to consider when developing systems and procedures to maintain the confidentiality and integrity of information transmitted by fax.

Date: Jan 01 2003   Type: Resource   Access: Professional

Revised February 2012

Date: Apr 06 2006   Type: Resource   Access: Both

Date: Apr 06 2006   Type: Resource   Access: Both

Date: Apr 06 2006   Type: Resource   Access: Professional

Date: Apr 06 2006   Type: Resource   Access: Professional

Date: Apr 06 2006   Type: Resource   Access: Professional

Revised March 2014

Date: Apr 06 2006   Type: Resource   Access: Professional

Date: Apr 06 2006   Type: Resource   Access: Professional

Date: Apr 06 2006   Type: Resource   Access: Professional

Date: Oct 16 2005   Type: Resource   Access: Both

Commissioner Ann Cavoukian prepared these Guidelines to provide Ontario municipalities with a framework to meet the privacy requirements under MFIPPA.

Date: Sep 14 2007   Type: Resource   Access: Professional

Date: Nov 27 2007   Type: Resource   Access: Professional

This document was thoroughly reviewed and updated in August, 2015, introducing clear and easy to understand gender-neutral language. Updated: August 2015

Date: Aug 16 2015   Type: Resource   Access: Both

There are many myths surrounding how information may be collected, used and disclosed under the Personal Health Information Protection Act. Working with our partners in the health care community, we have created this one-page document to dispel some of the more common myths.

Date: Sep 28 2012   Type: Resource   Access: Both

Information is becoming far more valuable as businesses seek to learn more about their customers and those of their competitors, and as advertisers seek to gain a competitive advantage by finding new and innovative ways to use information to target advertisements that are most relevant to their c...

Date: Jun 25 2014   Type: Resource   Access: Professional

Unauthorized access continues to be a growing problem in the health sector in Ontario. The province’s Personal Health Information Protection Act, (PHIPA), permits health information custodians (HIC) to collect, use and disclose personal health information for the purposes of providing or assist...

Date: Jan 28 2015   Type: Resource   Access: Both

This guidance document aims to identify some of the privacy considerations law enforcement authorities should take into account when deciding whether to outfit law enforcement officers with body-worn cameras. Published by the federal Privacy Commissioner and privacy and personal information prote...

Date: Feb 18 2015   Type: Resource   Access: Both

Ontario public sector institutions must meet high standards of care and trust whenever collecting, using and disclosing personal and other sensitive information. Any public institution considering new information technologies, systems, and program services that may affect privacy are strongly en...

Date: May 19 2015   Type: Resource   Access: Both

Municipalities are turning to the Internet as a means of making information public in an effort to improve accessibility, transparency and accountability. This may include publishing records directly to their website or including records in searchable databases that can be accessed online. Publis...

Date: Aug 04 2015   Type: Resource   Access: Both

  Proactive disclosure of procurement records strengthens clarity and accountability around government spending. It can also provide tangible benefits to institutions by reducing the number of procurement-related freedom of information requests, appeals and associated costs. This resource de...

Date: Sep 21 2015   Type: Resource   Access: Both

  As governments and public sector organizations strive to become more efficient, accountable and customer focused, they frequently seek input from the public about their programs and services. One of the most cost-effective ways to accomplish this is through surveys. While surveys can be an...

Date: Apr 07 2015   Type: Resource   Access: Both

  Many institutions turn to video surveillance to help them fulfil their obligations to protect the safety of individuals and the security of their equipment and property. Video footage captured by cameras is regularly used to assist in the investigation of wrongdoing. However, the use of th...

Date: Oct 06 2015   Type: Resource   Access: Both

Common misunderstandings about privacy are frequently cited as reasons for not sharing information with a children’s aid society (CAS) about a child who may be at risk. In fact, Ontario law permits professionals working with children to share this information. To help professionals understand t...

Date: Jan 20 2016   Type: Resource   Access: Both

Date: Jan 19 2007   Type: Resource   Access: Both

Date: Jan 19 2007   Type: Resource   Access: Both

Date: Nov 04 2005   Type: Resource   Access: Both

Date: Oct 01 2004   Type: Resource   Access: Both

Date: Oct 14 2004   Type: Resource   Access: Both

A brochure outlining suggested best practices for securing mobile devices (PDAs, laptops, etc.) and protecting the information carried out of the workplace on them. Steps are organized into sections: Before you Walk out of the Workplace, While you are Out and When You have Completed Your Work. In...

Date: Jun 14 2007   Type: Resource   Access: Professional

The IPC has prepared this new guidance document, Thinking About Clouds? Privacy, security and compliance considerations for Ontario public sector institutions, to help institutions evaluate whether cloud computing services are suitable for their information management needs. In particular, it see...

Date: Feb 20 2016   Type: Resource   Access: Both

Practice Direction #10 – Appeal fees

Date: Apr 06 2006   Type: Resource   Access: Both

Tip sheet for government organizations on handling information

Date: Sep 24 2003   Type: Resource   Access: Both

Tip sheet for government insitutions on handling information.

Date: Aug 13 2003   Type: Resource   Access: Both

This guidance paper is intended as a starting point for institutions considering Open Government and highlights two critical goals: enhancing access to government-held information and public participation.  It includes a discussion about making government-held information open by default and at...

Date: Sep 05 2016   Type: Resource   Access: Both

This fact sheet describes the risks of using email and custodians’ obligations under the Personal Health Information Protection Act. It outlines some of the technical, physical and administrative safeguards needed to protect personal health information when communicating by email and the polici...

Date: Sep 15 2016   Type: Resource   Access: Both

This guidance document outlines the key obligations of police under privacy legislation in their use of ALPR systems and provides guidance, including best practices, on using these systems in a privacy-protective manner.  It addresses the use of ALPR systems for public safety purposes, in parti...

Date: Jul 04 2017   Type: Resource   Access: Both

This fact sheet explains the meaning of the term “personal information,” and answers frequently asked questions.

Date: Oct 20 2016   Type: Resource   Access: Both

This guidance is designed to help institutions implement better record and information management practices and enhance the public’s ability to access information.

Date: Nov 03 2016   Type: Resource   Access: Both

This fact sheet highlights the important factors an institution must consider before implementing a video surveillance system.

Date: Nov 09 2016   Type: Resource   Access: Both

Tip sheet for government organizations on handling information.

Date: Sep 24 2003   Type: Resource   Access: Both

Provincial Guidelines on Applications to the Office of the Information and Privacy Commissioner/Ontario for Authorization of Indirect Collection by Institutions Covered Under the Freedom of Information and Protection of Privacy Act.

Date: Apr 02 1993   Type: Resource   Access: Both

Municipal Guidelines on Applications to the Office of the Information and Privacy Commissioner/Ontario for Authorization of Indirect Collection by Institutions Covered Under the Municipal Freedom of Information and Protection of Privacy Act.

Date: Apr 02 1993   Type: Resource   Access: Both

Date: Apr 02 1993   Type: Resource   Access: Both

Date: Apr 02 1993   Type: Resource   Access: Both

Date: Nov 25 2016   Type: Resource   Access: Both

Date: Feb 28 2017   Type: Resource   Access: Both

Date: Feb 28 2017   Type: Resource   Access: Both

Document Updated: A change to PHIPA Practice Direction #3 takes effect on October 10, 2023. The IPC’s current practice is to publish PHIPA decisions made during adjudication, including the name of the respondent and of affected person(s), unless doing so would reveal the identity of a complain...

Date: Feb 01 2017   Type: Resource   Access: Both

Date: Feb 28 2017   Type: Resource   Access: Both

Date: Feb 28 2017   Type: Resource   Access: Both

PHIPA Code of Procedure

Date: Feb 28 2017   Type: Resource   Access: Both

This fact sheet answers some frequently asked questions about reasonable searches for records.

Date: Apr 11 2017   Type: Resource   Access: Both

Date: May 17 2017   Type: Resource   Access: Both

Date: Sep 17 2019   Type: Resource   Access: Both

Date: Nov 10 2017   Type: Resource   Access: Both

Date: Jun 11 2018   Type: Resource   Access: Both

This publication replaces the guidance document, What to do When Faced With a Privacy Breach: Guidelines for the Health Sector. This new, updated guide highlights the importance of having a detailed privacy breach protocol and explains the steps to take in responding to a breach under Ontario’s...

Date: Oct 04 2018   Type: Resource   Access: Both

Date: Feb 15 2019   Type: Resource   Access: Both

Date: Feb 26 2019   Type: Resource   Access: Both

Date: May 13 2019   Type: Resource   Access: Both

Date: Aug 21 2019   Type: Resource   Access: Both

Date: Sep 05 2019   Type: Resource   Access: Both

Date: Oct 03 2019   Type: Resource   Access: Both

Guidelines for service providers under Part X of the Child, Youth and Family Services Act

Date: Oct 17 2019   Type: Resource   Access: Both

Guidelines for service providers under Part X of the Child, Youth and Family Services Act

Date: Oct 17 2019   Type: Resource   Access: Both

Date: Nov 27 2019   Type: Resource   Access: Both

Date: Apr 29 2020   Type: Resource   Access: Both

Date: Jun 26 2020   Type: Resource   Access: Both

Date: Jun 30 2020   Type: Resource   Access: Both

Date: Feb 25 2021   Type: Resource   Access: Both

Date: Jul 29 2021   Type: Resource   Access: Both