Provincial and territorial privacy laws and oversight

Each province and territory in Canada has a commissioner or ombudsperson responsible for overseeing provincial and territorial privacy legislation. This page lists the provincial and territorial privacy laws as well as who is responsible for their enforcement.

On this page

• Alberta
• British Columbia
• Manitoba
• New Brunswick
• Newfoundland and Labrador
• Northwest Territories
• Nova Scotia
• Nunavut
• Ontario
• Prince Edward Island
• Québec
• Saskatchewan
• Yukon

Alberta

The Information and Privacy Commissioner of Alberta is responsible for overseeing and enforcing the following provincial access and privacy laws:

• Freedom of Information and Protection of Privacy Act, Alberta’s public sector privacy law;
• Personal Information Protection Act, Alberta’s private sector privacy law that has been deemed “substantially similar” to the federal private sector privacy law;
• Health Information Act, Alberta’s privacy law relating to health records.

British Columbia

The Information and Privacy Commissioner for British Columbia is responsible for overseeing and enforcing the following provincial access and privacy laws:

• Freedom of Information and Protection of Privacy Act, BC’s public sector privacy law;
• Personal Information Protection Act, BC’s private sector privacy law that has been deemed “substantially similar” to the federal private sector privacy law;
• E-Health (Personal Health Information Access and Protection of Privacy) Act, BC’s privacy law relating to health records.

Manitoba

The Office of the Ombudsman is responsible for overseeing and enforcing the following provincial access and privacy laws:

• Freedom of Information and Protection of Privacy Act, Manitoba’s public sector privacy law;
• Personal Health Information Act, Manitoba’s privacy law relating to health records.

New Brunswick

The Office of the Ombud for New Brunswick is responsible for overseeing and enforcing the following provincial access and privacy laws:

• Right to Information and Protection of Privacy Act (PDF), New Brunswick’s public sector privacy law;
• Personal Health Information Privacy and Access Act (PDF), New Brunswick’s privacy law relating to health records that has been deemed “substantially similar” to the federal private sector privacy law  with respect to health information custodians.

Newfoundland and Labrador

The Office of the Information and Privacy Commissioner for Newfoundland and Labrador is responsible for overseeing and enforcing the following provincial access and privacy laws:

• Access to Information and Protection of Privacy Act, Newfoundland and Labrador’s public sector privacy law;
• Personal Health Information Act and Pharmacy Network Regulations, Newfoundland and Labrador’s privacy laws relating to health records that has been deemed “substantially similar” to the federal private sector privacy law with respect to health information custodians.

Northwest Territories

The Information and Privacy Commissioner of the Northwest Territories is responsible for overseeing and enforcing the following provincial access and privacy laws:

• Access to Information and Protection of Privacy Act (PDF), The Northwest Territories’ public sector privacy law;
• Health Information Act (PDF), The Northwest Territories’ privacy law relating to health records.

Nova Scotia

The Information and Privacy Commissioner of Nova Scotia is responsible for overseeing and enforcing the following provincial access and privacy laws:

• Freedom of Information and Protection of Privacy Act (PDF) and the Privacy Review Officer Act, Nova Scotia’s  public sector privacy laws;
• Personal Health Information Act (PDF), Nova Scotia’s privacy law relating to health records that has been deemed “substantially similar” to the federal private sector privacy law with respect to health information custodians;
• Part XX of the Municipal Government Act (PDF);
• Personal Information International Disclosure Protection Act.

Nunavut

The Information and Privacy Commissioner of Nunavut is responsible for overseeing and enforcing the following provincial access and privacy laws:

• Access to Information and Protection of Privacy Act, Nunavut’s public sector privacy law.

Ontario

The Information and Privacy Commissioner of Ontario is responsible for overseeing and enforcing the following provincial access and privacy laws:

• Freedom of Information and Protection of Privacy Act, Ontario’s provincial public sector privacy law;
• Municipal Freedom of Information and Protection of Privacy Act, Ontario’s municipal public sector privacy law;
• Personal Health Information Protection Act, 2004, Ontario’s privacy law relating to health records that has been deemed “substantially similar” to the federal private sector privacy law with respect to health information custodians.

Prince Edward Island (PEI)

The Information and Privacy Commissioner of Prince Edward Island is responsible for overseeing and enforcing the following provincial access and privacy laws:

• Freedom of Information and Protection of Privacy Act, PEI’s provincial public sector privacy law;
• Health Information Act, PEI’s health information law.

Québec

The Commission d'accès à l'information du Québec is responsible for overseeing and enforcing the following provincial access and privacy laws:

• Act Respecting Access to Documents Held by Public Bodies and the Protection of Personal Information, Québec’s public sector privacy law;
• Act Respecting the Protection of Personal Information in the Private Sector, Québec’s private sector privacy law that has been deemed “substantially similar” to the federal private sector privacy law;
• Act respecting health services and social services, the Health Insurance Act and the Act respecting the Régie de l’assurance maladie du Québec, Québec’s privacy laws relating to health records.

Saskatchewan

The Information and Privacy Commissioner of Saskatchewan is responsible for overseeing and enforcing the following provincial access and privacy laws:

• Freedom of Information and Protection of Privacy Act (PDF), Saskatchewan’s provincial public sector privacy law;
  Local Authority Freedom of Information and Protection of Privacy Act (PDF), Saskatchewan’s municipal public sector privacy law;
• Health Information Protection Act (PDF), Saskatchewan’s privacy law relating to health records.

Yukon

The Ombudsman and Information and Privacy Commissioner of the Yukon is responsible for overseeing and enforcing the following provincial access and privacy laws:

• Access to Information and Protection of Privacy Act (PDF), Yukon’s public sector privacy law;
• Health Information Privacy and Management Act (PDF), Yukon’s privacy law relating to health records.