For federal institutions
New online PIA submission form!
Federal institutions can now use our new online Privacy Impact Assessment (PIA) submission form to submit approved PIAs and related documents to the Office of the Privacy Commissioner of Canada.
The federal government needs personal information to deliver effective programs and services, and to shape sound public policies. However, individuals also need to be confident that their personal information will be protected and handled appropriately.
The Privacy Act governs the personal information handling practices of federal institutions. It limits the collection, use, sharing, and disclosure of individuals’ personal information. It also gives individuals the right to access and request the correction of personal information about themselves that is held by the federal government.
The Treasury Board of Canada Secretariat (TBS) is responsible for preparing policy instruments concerning the operation of the Privacy Act and its regulations. This includes issuing directives and guidelines related to the Privacy Act.
The Office of the Privacy Commissioner of Canada (OPC) oversees compliance with the Privacy Act and aims to help federal institutions improve their personal information handling practices.
From this page, you can find information and resources designed to help federal institutions protect privacy. If you need more help, you can contact the OPC’s Government Advisory team to get practical advice and guidance.
Legislation, processes, guidance, investigations
Guidance, access to information, disclosures, public safety
Guidelines, reporting forms
PIAs, expectations, guide, process, tips, submit online
Facial recognition, video surveillance, mega events, body-worn cameras
Lessons learned, best practices and other important privacy news, trends and information
Guidance, privacy protection and AI technologies
Guidance on deemed denials under the Privacy Act
Exceptions to access rights, timeliness, complaints
Outsourcing for government departments
Guidance, relevant investigations
Key privacy protection tips for federal human resources professionals
Tips, investigations
Guidance, disclosures without consent, paragraph 8(2)(m), notify OPC, PID portal
Privacy Act investigation process
Process, obligations, timing
Frequently asked questions
This list highlights advice and information related to privacy issues that employees of federal institutions frequently ask about when they contact us.
How can an institution report a privacy breach to the OPC?
Use our breach reporting form for federal institutions.
What does the OPC expect in a PIA?
See our Guide for Submitting Privacy Impact Assessments to the OPC.
How can an institution submit a PIA to the OPC?
You can use our secure online form to submit your PIAs and additional documents.
Can an institution release personal information without a person’s consent?
The Privacy Act sets out circumstances in which government institutions may disclose personal information in the public interest without consent. Go to our page on public interest disclosures.
How can an institution notify the OPC about a public interest disclosure?
You can use our public interest disclosure form to submit your notification.
What does the OPC expect from institutions making representations in relation to a complaint?
See the explanation of the government institution’s role in: What to expect during a complaint investigation under the Privacy Act
How does the OPC interpret and apply the Privacy Act?
We publish summaries and reports from our investigations into federal institutions. These offer concrete examples of how the OPC enforces the Privacy Act.
- Date modified: