On November 25, 2024, the Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024 (Bill 194) received Royal Assent. Bill 194 introduces new legislation, the Enhancing Digital Security and Trust Act, 2024 (EDSTA), aimed at enhancing cyber security within the public sector. It also amends the Freedom of Information and Protection of…
Practice Area: Information, Data Security & Privacy
Information and Privacy Commissioner of Ontario Releases Guidance on Information-Sharing in Situations of Intimate Partner Violence
In May 2024, the Information and Privacy Commissioner of Ontario released Sharing Information in Situations Involving Intimate Partner Violence: Guidance for Professionals (the Guidance). The Guidance was developed as a result of a 2022 coroner’s inquest into three deaths caused by intimate partner violence (IPV). The Guidance is helpful for organizations, service providers and staff…
Court Certifies Class Action Relating to Improper Access of Medical Files
In Welshman v. Central Regional Health Authority, the Supreme Court of Newfoundland and Labrador (Court) certified a class action in which the plaintiffs alleged that employees of the defendant, the Central Regional Health Authority, improperly accessed the private personal and medical information of 260 individuals outside of the scope of their employment. The Court’s decision…
Supreme Court of Canada Finds Individuals Have a Privacy Interest in Their IP Addresses
In R. v. Bykovets, released on March 1, 2024, the majority of the Supreme Court of Canada (Court) found that individuals have a privacy interest in their internet protocol (IP) addresses. The issue arose in the context of the Court’s consideration as to whether police had breached section 8 of the Canadian Charter of Rights…
IPC Power to Determine Administrative Monetary Penalties Takes Effect
On January 1, 2024, changes to the General Regulation made under the Personal Health Information Protection Act (PHIPA) took effect (see O. Reg. 343/23). The changes stipulate how the Information and Privacy Commissioner of Ontario (IPC) determines the amount of administrative monetary penalties (AMPs) issued as part of its enforcement powers for violations of PHIPA….
New Transparency Requirements for Corporations Subject to the Canada Business Corporations Act Come Into Force on January 22, 2024
The federal government has proclaimed January 22, 2024 as the coming into force date for certain provisions of the Canada Business Corporations Act (CBCA) that were enacted by the Budget Implementation Act, 2022, No. 1. Corporations which are subject to the CBCA (Corporations) will now have additional reporting obligations regarding their registry of individuals with significant…
Ontario Announces Legislative Review of the Police Record Checks Reform Act, 2015
The Ministry of the Solicitor General is conducting a legislative review of the Police Record Checks Reform Act, 2015 (PRCRA). The legislative review was announced on the government’s Regulatory Registry.
Ontario Tables Bill to Create Integrated Community Health Services Centres, and More
On February 21, 2023, the Ontario government tabled Bill 60, Your Health Act, 2023 for First Reading. The government states that the objective of the Bill is to reduce wait times for surgeries, procedures and diagnostic imaging ‘while enabling its new “As of Right” rules to automatically recognize the credentials of health care workers registered in other provinces and territories.’ If passed, Bill 60 would enact the Integrated Community Health Services Centres Act, 2023 (Proposed Act) which would create integrated community health services centres, among other things.
Beyond COVID-19: 2022 Year in Review – Cases and Legislation of Note
Employers and human resource professionals will undoubtedly remember 2022 as another year shaped by the pandemic.
But…there were also legal developments in 2022 that were not related to COVID-19. In this FTR Now, we look at some of the past year’s notable “non-pandemic” cases and legislative developments.
Appellate Court Finds Database Defendants not Liable for Tort of Intrusion upon Seclusion where Personal Information “Hacked” by Third Parties
In a trio of cases, the Ontario Court of Appeal recently held that a claim for the tort of intrusion upon seclusion does not apply to companies who store personal information for commercial use (the “Database Defendants”) when those databases are hacked by third parties. Background In June 2022, the Court of Appeal heard three…