Office of the Information and Privacy Commissioner

Lessons from the Saanich spyware fiasco and new privacy laws to be aware of

December 2, 2015 Employer Advisor, McCarthy Tétrault LLP Employee Relations, HR Policies and Procedures, Human Resources, Penalties and Fines, Privacy and Security, Training and Development

In our current information age, security over electronic information and protection against unauthorized access is foundational to employers’ businesses. To guard against endlessly multiplying electronic threats, employers must resort to electronic means and, understandably, often resort to broad and comprehensive software to protect their operations. However, the situation involving the District of Saanich earlier this […]

business’ privacy policies, Digital Act, electronic threats, employee’s consent, employee’s personal information, employment law, guidance from the Privacy Commissioner, implementing IT protections, Office of the Information and Privacy Commissioner, personal information, Privacy breach notification, privacy laws, privacy officer, Saanich spyware complaint

Personal information online: new tools, old responsibilities

October 24, 2011 Adam Gorley Employee Relations, Human Resources, Privacy and Security

Sometimes, technology creates new ways to exploit information faster than the law and business can keep up. The Office of the Privacy Commissioner of Canada is trying to make sure that doesn’t happen in the case of behavioural advertising. Last year, the Privacy Commissioner conducted consultations on the new ways that organizations are collecting and using customers’ personal information, and prepared its Report on the 2010 Office of the Privacy Commissioner of Canada’s Consultations on Online Tracking, Profiling and Targeting, and Cloud Computing.

behavioural advertising, marketing, mobile technology, Office of the Information and Privacy Commissioner, oipc, privacy, Privacy Commissioner, profiling, targeting, technology, tracking

Employer and insurer both breached privacy of employee

June 29, 2011 Christina Catenacci Human Resources, Privacy and Security

The Office of the Information and Privacy Commissioner of Alberta has determined that an employer violated the Personal Information Protection Act and the Freedom of Information and Protection of Privacy Act when it disclosed more information than necessary to determine the employee’s eligibility for disability benefits, and that the group insurance provider used the information without consent.

Alberta, Breach of privacy, collecting medical information, consent, Disability benefits, Disclosing medical information, eligibility for disability benefits, employment law, Freedom of Information and Protection of Privacy Act, group insurance, Office of the Information and Privacy Commissioner, oipc, personal information, Personal Information Protection Act, using medical information, workers’ compensation, workplace injury

Take access to information requests seriously

January 7, 2011 Christina Catenacci Human Resources, Privacy and Security

I recently read a case coming out of the Alberta Office of the Information and Privacy Commissioner dealing with an access to information request. Though this was a case dealing with a public body, the principle applies to any information request: there was simply no reason to deny the disclosure of information.

access to information, Alberta, disclosure, employment law, FIPPA, Freedom of Information and Protection of Privacy Act, information request, Office of the Information and Privacy Commissioner, personal information, trade secrets

Most organizations still don’t encrypt data when it leaves the office

December 17, 2010 Christina Catenacci Human Resources, Privacy and Security

I recently read a news release by the Alberta Office of the Information and Privacy Commissioner that indicated that there are still high incidences of laptops containing personal information being stolen—without having security measures such as encryption put in place. The commissioner was left scratching his head.

Alberta, canadian employment law, employment law, encryption, Encryption technology, identity theft, laptops, Office of the Information and Privacy Commissioner, personal information, private sector privacy legislation, protecting personal information, security measures, stolen laptops, technology