Latest Blog Posts
For a complete list of all blog posts please click here
Why some reviews and investigations cannot pass go (updated)
If you have ever contacted our office regarding a concern with how an organization (government institution, local authority or trustee) has responded to your access to information request or handled your personal information or personal health information, you would have been told that we are an office of last resort. As the oversight body, we... read more
Real Risk of Significant Harm (updated)
Amendments to The Freedom of Information and Protection of Privacy Act (FOIP) and The Local Authority Freedom of Information and Protection of Privacy Act in 2018, require that once it is confirmed that a privacy breach occurred, the public body must consider if, as a result of the incident, there is a real risk of... read more
“A” Trustee vs. “THE” Trustee (updated)
If you are reading this blog, I probably don’t need to tell you how complex the healthcare system is. When dealing with The Health Information Protection Act (HIPA), one of the most challenging brain teasers I have to deal with on files is who is the trustee in any given circumstance. When we start to... read more
Data Residency Outside Canada for Trustees
Trustees often ask our office about the use of an information management service provider (IMSP) to manage personal health information. Some want to know about using IMSPs linked to companies outside Canada. Once personal health information leaves Canada, it becomes subject to the laws of the country where it resides. If an individual’s personal health... read more