Audits

Among other activities, the Office of the Privacy Commissioner of Canada (OPC) fulfills its mandate to protect and promote privacy rights by auditing federal institutions subject to the Privacy Act and businesses subject to the Personal Information Protection and Electronic Documents Act (PIPEDA).

The OPC conducts audits to verify that an organization is adequately managing its personal information holdings. These audits may look at the physical and security controls used to protect the personal information that the organization holds, what policies, procedures and practices are in place, and how the organization manages privacy incidents. Through these audits, the OPC assesses the extent to which organizations are meeting their privacy obligations. They identify areas for improvement and highlight good privacy practices.

Explore the links on this page to learn about audits conducted by the OPC.

Showing items 11 through 11 of 11.