English Information Commissioner issues statement on police use of facial recognition technology (FRT)

BC OIPC provides instruction to delete a user account and DNA on 23andMe

Alberta, update to access and privacy legislation, passed in December and in force this spring

Federal Privacy Commissioner launches new online privacy breach risk self-assessment tool

Law Society – Bite Size video – cloud computing guide

Ontario IPC commissions report on workplace surveillance technologies

Australian IPC releases new Privacy Basics e-Learning module

Watch Law Society video-Cyber Breaches through Third Parties

Australia’s privacy commissioner publishes its Digital ID regulatory strategy

5 takeaways from the Lifelabs case

Blog

Privacy Officer in a Difficult Spot

April 7, 2017 - Ron Kruzeniski, Information and Privacy Commissioner

I encourage every public body to appoint an Access and Privacy Coordinator. In larger organizations you might want to have a position of Chief Privacy Officer (CPO). The reasons for having an Access and Privacy Coordinator or a CPO are that in these times organizations really need one person who is knowledgeable on access and privacy issues. That person needs to know the legislation, when and where it applies, and the best practices in the organization’s sector or industry. The coordinator will also be responsible for supervising the processing of access requests and investigating privacy breaches.

Any resident can file an access request and that includes the media. A journalist pursuing a story may request information to assist in writing that story.

When a journalist files an access request, my office will encourage the public body to work with the Applicant to narrow the scope of the request and clarify exactly what is being requested. Such efforts can reduce the time spent by the public body, the fees charged, if any, and the time lag between request and provision of the documents.

The Access and Privacy Coordinator is in a difficult position when first talking to the journalist. His or her organization may have a policy that communications with the media go through the Communication Director. On the other hand, only by talking to the journalist will the possibility of narrowing or clarifying the request occur. If the coordinator talks to the journalist, the fear is that he or she might get quoted in tomorrow’s story. So, does the coordinator not talk at all and give up an opportunity to clarify and speedily deal with the request?

This is a problem for the coordinator, journalist and my office. Why my office? If matters don’t get resolved at the first stage, an Applicant (journalists) might appeal to my office for a review. This takes time and resources in my office. The end result is that it takes a lot longer to get the information.

My solution is that public bodies and the media reach an understanding that communications with the Access and Privacy Coordinator will not be quoted in any story. In other words, there is no interview with the Access and Privacy Coordinator. The communications with the coordinator will be strictly to clarify and narrow the request. The understanding should be that the journalist will contact the Communications Director if they want an interview.

As we work to create this understanding, Access and Privacy Coordinators when contacted by a journalist should ask whether it is an interview or whether they will be quoted in any future stories. If the journalist says yes, the Access and Privacy Coordinator should refer the journalist to the Communications Director. Similarly, a journalist calling about an access request should begin by indicating this is not an interview and if an interview is sought the journalist will contact the Communications Director.

My goal is a well-functioning access to information system in the province where access requests are answered quickly and without confusion as to roles.

 

Categories: Blog

Back to Blog

Was this page helpful?

Google Translate Disclaimer

Translations on the IPC Website are performed by Google Translate. Please note that not all text may be translated accurately or be translated at all. The IPC is not responsible for incorrect or inaccurate translations. The IPC will not be held responsible for any damage or issues that may result from using Google Translate.

For more information, read our full disclaimer.