Update to The Rules of Procedure
The Rules of Procedure were last updated June 10, 2019. It was time for an update based on experience with applying the rules. In addition, my office made a change on what it asks for in a breach investigation: see our blog IPC change in practice for privacy breach investigations. This involved introducing three new forms which citizens and public bodies can use to provide information to my office.
The first form is called Alleged Breach of Privacy Reporting Form: for Affected Individuals/Complainants and can be filled out by residents of the province. The second form is called Proactively Reported Breach of Privacy Reporting Form for Public Bodies and can be used by public bodies when reporting a breach of privacy.
The third form is called Privacy Breach Investigation Questionnaire. In our notification emails, my office asks that a public body or trustee fill out the questionnaire regarding the alleged breach or proactively reported breach. At the moment, my office sends out this form with the notification email.
With all of this in mind, it was a perfect opportunity to update The Rules of Procedure to accommodate the above change and to clarify the language wherever possible.
Finally, The Rules of Procedure can change whenever necessary. Please give us your suggestions for changes when you encounter something that should be clarified or where something is missing.