December 17, 2012
On September 5, 2012, the Information and Privacy Commissioner of Ontario (“IPC”) released a new guidance paper, entitled “A Policy is Not Enough: It Must be Reflected in Concrete Practices”. This guidance paper will be particularly useful for organizations seeking preliminary guidance on implementing the “privacy by design” principles developed by Commissioner Cavoukian.
The IPC outlines 7 steps for implementing privacy policies. Sensibly, the Commissioner acknowledges that there are no “one-size-fits-all” approaches for embedding privacy-by-design practices. Nevertheless, Commissioner Cavoukian notes that there are common steps to implementing a course of action. These steps are applicable to organizations of all sizes and complexity.
Extract from Focus on Canadian Employment & Equality Rights, a monthly newsletter published by CCH Canadian Limited ( www.cch.ca ). Information available at: 1-800-268-4522 or 416 224 2248 (Toronto).
Download the Article