Privacy Audits (updated)
Your organization has undertaken a privacy impact assessment (PIA) as part of its process of designing and implementing a new program. So, what’s next? Once the new program has gone live, your organization should plan regular privacy audits to ensure that the program is operating in a manner that complies with applicable access and privacy... read more
Unauthorized Access
This blog is focused on the unauthorized access to electronic health records for purposes such as curiosity, concern, personal gain, spite, or boredom, and the harm that results from such unauthorized access. I note that the majority of trustee employees or individuals in service of a trustee (including physicians) access electronic health records for purposes... read more
Updated: Tips for a Good Submission
So much of what we do here at the OIPC involves reviewing submissions (or representations) from parties. In my time here, I have seen some very persuasive ones. I thought some tips on what, in my view, made a persuasive submission would be helpful. A submission contains a party’s arguments in support of their position. ... read more
When Salary is Open to Public Scrutiny
The starting point of determining whether or not your salary is releasable starts with what access and privacy law applies to you in your circumstance. If you work for a government institution or local authority, then your salary is not considered your personal information. Why does it matter if it is or is not considered... read more