Federal Privacy Commissioner on Bill c-27 news release.

Report into the 2021 cyber attack on Newfoundland health information systems released.

Privacy Commissioner of Canada announced his office is launching a joint investigation into OpenAI

Federal Privacy Commissioner launches new guidance on workplace privacy

Cybersecurity: Best Practices for Setting Up a Security Operations Centre

Alberta IPC finds risk of significant harm from stolen server.

Updates to Chapter 3 for the Guide to FOIP and the Guide to LA FOIP are now available!

Steps for effectively deploying multi-factor authentication.

Concerns about AI

Blog

Third parties under FOIP and LA FOIP

June 21, 2018 - Ron Kruzeniski, Information and Privacy Commissioner

In other blogs I have talked about public bodies and third parties. If a public body is a city, town or municipality, legislation requires the disclosure of contracts and The Local Authority Freedom of Information and Protection of Privacy Act (LAFOIP) requires the same unless part of the contract falls under one of the exemptions. Public bodies like government ministries, boards, agencies and crown corporations are bound by The Freedom of Information and Protection of Privacy Act (FOIP) and contracts are disclosed unless they come under section 19(1).

As we provide advice or begin a review, it always seems the third party expects the entire agreement to be withheld because the third party does not want any of the information disclosed.

Many clauses in an agreement do not disclose sensitive information. Clauses like the singular includes the plural and successors to the parties are bound to not disclose sensitive information. So in many of the cases, the entire contract will never be withheld.

Third parties sometimes want all correspondence and reports related to the project withheld. Again, they have to show that individual items fall under section 19(1) of FOIP and section 18(1) of LA FOIP. Some rely on a clause in the contract that all will be kept confidential. I remind both public bodies and third parties they cannot contract out of the law of the province. FOIP and LA FOIP apply in spite of a confidentiality clause.

Public bodies and third parties sometimes are concerned that the applicant will distribute the documents or publish them. As a citizen, the applicant has the right to documents unless section 19(1) or section 18(1) applies. The intention or anticipated actions of the applicant are irrelevant in a FOIP or LA FOIP context. Some get more concerned when it is the media applying. The media has the same right to the information. What might the media do with the documents? The answer is, obviously, they will analyze and might write a story. That is part of the democratic process.

If after thinking about the above, a third party intends to object to the release of documents, they will have to move quickly. They have 20 days after they receive notice. The public body is bound to give the applicant a response to the access request within 30 days (or 60 days if an extension is decided upon). If the public body failed to respond to the applicant in 30 days (or 60 days) my office will consider that the public body has decided not to respond and it is treated as a deemed refusal.

Third parties should, where they enter into contracts involving taxpayer funds, not expect total confidentiality and should read section 19(1) of FOIP and section 18(1) of LA FOIP.

Categories: BlogTags: ,

Back to Blog