Your Privacy Rights
Privacy is a fundamental right of every Ontarian. In order to protect that right, Ontario public institutions are required by law to protect your personal information, and to follow strict rules when collecting, using and disclosing your personal information.
The IPC’s role is to ensure that Ontario public institutions and health information custodians abide by privacy laws and principles. The IPC also assists you with resolving privacy complaints and has broader powers to investigate and research privacy issues.
Ontario’s three access and privacy laws are the following:
- Freedom of Information and Protection of Privacy Act (FIPPA)
- Municipal Freedom of Information and Protection of Privacy Act (MFIPPA)
- Personal Health Information Protection Act (PHIPA)
These three acts help to protect your personal information held by Ontario public institutions.
“Personal information” means recorded information about you as an individual. It may include your name, address, sex, age, education, and medical or employment history. It can also include identifying numbers such as a Social Insurance Number, and your personal views or opinions. Information that may seem personal, such as name and contact information, may not be your personal information if that information relates to your business activities, that is, you are acting in a professional capacity in the context of the information.
Ontario public institutions may collect your personal information in order to provide services to you.
For example, you may be asked to provide personal information when you fill out an application for programs or services, such as:
- a driver’s licence
- a recreation program
- a building permit
- tax benefits
- school or university
In addition, institutions may indirectly collect your personal information. An application form that requires an individual to provide personal information about his or her spouse, children or someone else is a common example of an indirect collection.
For privacy concerns pertaining to information held by the federal government or private sector institutions, please contact the Office of the Federal Privacy Commissioner.
Ontario public institutions must protect your personal information in their possession. You have the right to expect that your personal information will only be collected for legitimate, limited and specific purposes, that the collection of your personal information will be limited to only what is necessary for the specified purpose and that your personal information will only be used and disclosed for specified purposes.
An Ontario public institution must tell you:
- The legal authority for collecting your personal information.
- How it intends to use the information it collects.
- Who can answer any questions you may have about how your personal information will be used.
In most circumstances, you have the right to see your personal information held by an Ontario institution. Learn how to request your personal information.
If you find that personal information about you held by an institution is incorrect, you have the right to ask for a correction. Learn how to ask for a correction.
Yes, if you feel there is a problem with the way your personal information is being handled, you can file a complaint. Learn how to file a privacy complaint.