Privacy Breach Protocol and Guidelines for Government Organizations


Key Questions: What is a privacy breach? What steps should my organization take when faced with a privacy breach?

A privacy breach occurs when personal information is collected, retained, used or disclosed in ways that are not in accordance with the provisions of the Acts. Among the most common breaches of personal privacy is the unauthorized disclosure of personal information. The Freedom of Information and Protection of Privacy Act and the Municipal Freedom of Information and Protection of Privacy Act (the Acts) establish rules for government institutions to follow to ensure the protection of individual privacy. The Acts govern the collection, retention, use, disclosure and security of personal information (sections 37–46 of the provincial Act and 27–35 of the municipal Act).


  • What is a privacy breach? 
  • Guidelines on what government organizations should do
  • What happens when the IPC investigates a privacy complaint? 
  • What steps to take to avoid a privacy breach?
  • IPC Website
  • About the IPC

Type of Tool:

Publication Date: 

Internet Privacy and Security