Key Questions: What is a privacy breach? What steps should my organization take when faced with a privacy breach?
A privacy breach occurs when personal information is collected, retained, used or disclosed in ways that are not in accordance with the provisions of the Acts. Among the most common breaches of personal privacy is the unauthorized disclosure of personal information. The Freedom of Information and Protection of Privacy Act and the Municipal Freedom of Information and Protection of Privacy Act (the Acts) establish rules for government institutions to follow to ensure the protection of individual privacy. The Acts govern the collection, retention, use, disclosure and security of personal information (sections 37–46 of the provincial Act and 27–35 of the municipal Act).