Federal Privacy Commissioner on Bill c-27 news release.

Report into the 2021 cyber attack on Newfoundland health information systems released.

Privacy Commissioner of Canada announced his office is launching a joint investigation into OpenAI

Federal Privacy Commissioner launches new guidance on workplace privacy

Cybersecurity: Best Practices for Setting Up a Security Operations Centre

Alberta IPC finds risk of significant harm from stolen server.

Updates to Chapter 3 for the Guide to FOIP and the Guide to LA FOIP are now available!

Steps for effectively deploying multi-factor authentication.

Concerns about AI

Federal Privacy Commissioner issued updated guidance on privacy in the work place

Legislation - The Rules of Procedure

The Rules of Procedure

On September 1, 2022, updated Rules of Procedure applicable to reviews and investigations under The Freedom of Information and Protection of Privacy Act (FOIP) The Local Authority Freedom of Information and Protection of Privacy Act (LA FOIP) and The Health Information Protection Act (HIPA) came into effect. These changes include the following:

  • Our office will no longer provide draft reports to public bodies/trustees to review.
  • Revisions to the Index of Records which include a simplified Form A and the sharing of the index of records with consent only.
  • Changes to how and when public bodies can raise discretionary exemptions.

For a full copy of the updated Rules (effective September 1, 2022) in one document, or if you require an accessible pdf version, please click on the following link: Rules of Procedure

For referencing specific Parts of the updated Rules, please refer to the pdf above and select a specific Part. You may also refer to the flipbook below and navigate to the Part using the table of contents or search feature.

This document sets out the Rules of Procedure for reviews of complaints under section 49 of The Freedom of Information and Protection of Privacy Act (FOIP), section 38 of The Local Authority Freedom of Information and Protection of Privacy Act (LA FOIP), section 42 of The Health Information Protection Act (HIPA) and investigations under the Acts.

These procedures are established pursuant to section 45 of FOIP, which provides as follows:

General powers of commissioner
45 The commissioner may:

(d) determine the procedure to be followed in the exercise of the powers or
performance of any duties of the commissioner pursuant to this Act; and

Rules of Procedure