Practice Area: Information, Data Security & Privacy

Privacy Rules Around Non-Disclosure of Administrative Records Declared Unconstitutional

· 7 min read

The Ontario Superior Court of Justice recently held that the Ontario Freedom of Information and Protection of Privacy Act (FIPPA) violates section 2(b) of the Canadian Charter of Rights and Freedoms (Charter), finding that it goes too far to protect the privacy of parties, witnesses and others in matters heard by the Ontario Human Rights Tribunal, Ontario Labour Relations Board and other statutory tribunals. Learn more in this FTR Now.

Ontario Implements Anti-Racism Act Regulations

· 2 min read

On April 20, 2018, the Ontario government filed regulations under the Anti-Racism Act, 2017 (ARA) setting out personal information that certain public sector organizations (PSOs) will be authorized or required to collect under the ARA for the purpose of eliminating systematic racism.

FTR Quarterly – Issue 9

· 16 min read

In This Issue Sexual Harassment: Best Practices for Proactive Employers and Service Providers FTRQ&A – Customer-to-Customer Harassment: Service Provider Liability Questions, Answered Tips for Conducting Harassment Investigations Sexual Harassment and Your Organization: Best Practice Tips for Boards of Directors For Your Workplace, At Your Workplace: Hicks Morley’s On-Site Learn-by-Doing Training Programs Featured Articles Sexual Harassment:…

Workplace Law in Canada: A Primer

· 1 min read

This Guide provides American employers with an introduction to employment laws and regulations that affect businesses in Canada. It outlines an overview of the main differences between Canadian and U.S. workplace laws.

PIPEDA Breach of Security Safeguards Regulations Published

· 2 min read

Beginning November 1, 2018, the Personal Information Protection and Electronic Documents Act (PIPEDA) will require private sector organizations to provide notice to affected individuals and the federal Office of the Privacy Commissioner (OPC) when a security incident involving personal information results in a “real risk of significant harm.” The supporting regulations, Breach of Security Safeguards…

Mandatory Breach Notification Comes to Canada: What To Do About It

· 3 min read

It’s been a long time coming, but we finally know that mandatory breach notification is coming to Canada. Beginning November 1, 2018, the Personal Information Protection and Electronic Documents Act (PIPEDA) will require notification to affected individuals and the federal Privacy Commissioner when a security incident involving personal information results in a “real risk of significant…

IPC Provides Important Guidance on New PHIPA Annual Reporting Obligations

· 2 min read

Organizations which provide healthcare and are governed by the Personal Health Information Protection Act (PHIPA) should note that recent amendments to PHIPA require health information custodians (HICs) to file an annual report disclosing all security incidents involving theft, loss and unauthorized use or disclosure of personal health information to the Information and Privacy Commissioner. At…