The Vision
of a Modern and Effective Regulator

  • 2022
Commissioner’s message

Throughout my career, I have had the honour of working with different regulators who shoulder great responsibility for ensuring compliance with privacy and access laws in a rapidly evolving digital world. I have also worked with public institutions who must implement requirements in the real world, as well as astute practitioners who have a very practical sense of the opportunities and challenges at play, academics who have devoted their careers to advancing knowledge in this critical field, and dedicated civil society groups who play such a vital role in advancing access and privacy rights for the benefit of us all.

This broad experience has taught me to listen to and appreciate the many diverse perspectives that come to bear on the complex issues we deal with. It has instilled a sense of humility with which I approach my work and a natural inclination to consult and collaborate with others to reach pragmatic solutions with beneficial impacts.

This is why, when I began my mandate as Information and Privacy Commissioner of Ontario, I came with a vision of a modern and effective regulator dedicated to supporting compliance and promoting public trust in our public institutions.


"This broad experience has taught me to listen to and appreciate the many diverse perspectives that come to bear on the complex issues we deal with. It has instilled a sense of humility with which I approach my work and a natural inclination to consult and collaborate with others to reach pragmatic solutions with beneficial impacts.

To be a modern and effective regulator with real-world impact

enhance Ontarians’ trust that their privacy and access rights will be respected by:


Proactively advancing their rights in key strategic areas that impact their lives


Addressing complaints and appeals in a fair, timely and meaningful manner


Maintaining their confidence in the organizational excellence of the IPC


We treat all people with respect and dignity, and value diversity and inclusiveness.


We take accountability for our actions and embrace transparency to empower public scrutiny.


We make decisions that are impartial and independent, based on the law, using fair and transparent procedures.


We work constructively with our colleagues and stakeholders to give advice that is practical and effective.


We strive to achieve the highest professional standards in quality of work and delivery of services in a timely and efficient manner.

Privacy and transparency in a modern government

The transparency challenge

On International Right to Know Day 2022, the IPC launched a Transparency Challenge, calling on public institutions subject to the Freedom of Information and Protection of Privacy Act (FIPPA) and the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA) to share their innovative programs that improve government transparency for the benefit of Ontarians.

Privacy and Transparency in a Modern Government
FPT digital ID resolution

Proposals for digital identity or other forms of digital credentials are emerging in Canada and around the world to make it easier for individuals, businesses, and governments to confirm identity information and conduct online transactions more seamlessly and efficiently.

Read More
Trustworthy AI frameworks

Rapid developments in artificial intelligence (AI) offer tremendous opportunities to address many of society’s most complex problems across all sectors of society. AI technologies can be used to fast-track the delivery of government services, solve major public health issues, and reconfigure our cities. They can improve public safety, respond to global emergencies, enhance commercial innovation, and bolster our economy.

Read More

Being an IPC'er means taking pride in what I do. It means having the great privilege of working with smart, kind, and caring people, on fascinating issues, with common purpose and commitment to advance the public interest.

Children and youth
in a digital world


Our goal is to champion the access and privacy rights of Ontario's children and youth by promoting their digital literacy and expansion of their digital rights while holding institutions accountable for protecting the children and youth they serve.

IPC Youth
Youth Advisory Council

In September 2022, the IPC issued a call to Ontario youth, inviting them to join the IPC’s new Youth Advisory Council.

Read More
IPC on instagram

After careful deliberation, in 2022, the IPC launched an Instagram account to connect with Ontario’s children and youth. Our objective is to teach them about privacy risks and how to protect themselves online. Our account, @IPC.Ontario, is a trusted online space where young people can get useful and age-appropriate tips on how to protect their privacy online and access their records from a government institution, health care provider or children’s aid society.

Read More
Privacy Pursuit! Lesson Plans

Throughout 2022, the IPC worked with MediaSmarts, Canada’s Centre for Digital Literacy, to develop lesson plans for teachers, parents and caregivers building on the critical messages contained in Privacy Pursuit! Games and Activities for Kids.

Read More

Trust in digital health

Axe the Fax

Statistics collected by our office in 2022 revealed a continuing concern with misdirected faxes in the health sector, representing almost 38 per cent of health privacy breaches in Ontario.

Read More
Ongoing advocacy for administrative penalties

Last year, the commissioner recommended the government set out the details of PHIPA’s administrative penalty scheme in regulations. The purpose of these administrative penalties is to encourage compliance and prevent persons from deriving, directly or indirectly, any economic benefit as a result of contravening Ontario’s health privacy law or its regulations. This would enable the IPC to impose monetary consequences on the few bad actors who unfortunately undermine Ontarians’ trust in the entire health system.

We expect the government to release the proposed regulation for public comment, setting out the criteria to be considered by the IPC when imposing a penalty and the maximum dollar amounts. We look forward to seeing this regulation come into force and giving Ontarians confidence that there are effective mechanisms in place to promote positive behaviour, while stamping out the bad.

Read More

IPC and our counterparts urge governments to address the issue by coordinating a strategic plan and providing appropriate supports, such as funding or other incentives, to phase out traditional fax and unencrypted email. The resolution asks governments to promote the adoption of more modern and secure digital alternatives that are equitably available and accessible to all, and calls on health sector organizations and providers to do their part as well.

Next-generation law enforcement

Facial recognition technology

In May 2022, Canada’s federal, provincial and territorial privacy commissioners issued a joint statement, recommending a legal framework specific to facial recognition (FR) technologies. Such a law should clearly define the purposes for which police can use FR and those for which they can’t. It should also require that the use be necessary and proportionate for the proposed purpose and provide for appropriate privacy protections to mitigate the risks involved.

Next GENERATION Law Enforcement
Coroner recommendations to address intimate partner violence

In August 2022, the Office of the Chief Coroner provided the IPC with the jury recommendations of an inquest into the murders of three women in rural eastern Ontario. Recommendation 78 called on the IPC to work with the Domestic Violence Death Review Committee, justice partners, and intimate partner violence service providers to develop a plain language tool to empower intimate partner violence professionals to make informed decisions about privacy, confidentiality, and public safety. Our office readily agreed to carry out this critically-important recommendation.

Read More

Being an IPC'er means being someone who does interesting and challenging work for an organization that makes a difference in many people’s lives in terms of helping them to access or protect information that is important to them. It means being a part of a community of good people whose interests are aligned in helping the public understand the importance of access and privacy laws.

The IPC's year at a glance

Reaching out to Franco-Ontarians
Remarks to Legislative Assembly on employee monitoring
Recommendations on proof of vaccination certificates in Ontario
Submission on Bill 106: Ontario Health Teams’ access to e-records
IPC invites policy consultations and sets out rules of engagement
IPC sponsors declaration at International Conference of Information Commissioners
Commissioner’s blog: Privacy and Humanity on the Brink
IPC launches secure e-appeals
IPC welcomes its first scholar-in-residence!
IPC joins national call to retire fax machines and secure digital communications in health care delivery
IPC launches Transparency Challenge
IPC updates its ransomware guidance
IPC on Instagram!
Commissioner’s reflections on 2022: We listened, we learned, we did things


Addressing complaints and appeals in a fair, timely and meaningful manner

One day mediation pilot project

To streamline processes, the mediation team launched a pilot project in 2022 where parties in select sole-issue appeals were invited to participate in a half-day teleconference. The goal was to resolve the appeal during or shortly after the teleconference.

Read More
IPC introduces e-appeals

In August 2022, and as part of our efforts to modernize and provide digital services to Ontarians, the IPC launched a new service for filing and paying for appeals online, making it easier for people to file an appeal with our office — online, anytime.

Read More
Updates to M/FIPPA Code of Procedure

Throughout 2022, the IPC undertook a thorough review of its FIPPA and MFIPPA Code of Procedure and associated practice directions. These key documents that guide the appeals process had not undergone a significant review and revision since 2004.

Read More
Files Opened
Files Closed
Appeals Opened
Appeals Resolved

Notable examples of cases

Early resolution

Cyberattacks threaten essential services

Three school boards, one college, and two universities contacted the IPC to report a ransomware attack on, a third-party company providing insurance coverage to international students at these institutions, experienced a ransomware attack that affected the personal information of some of their students.

Read More


More than meets the eye

Over two months, a city received requests from a legal clinic for information relating to poverty, homelessness, encampments, overdose prevention, and race-based data. The city denied five of the requests outright on the basis that they appeared to be frivolous or vexatious.

Read More

Privacy investigations

Selling de-identified health data \\ PHIPA 175

After learning that a health information custodian was allegedly selling de-identified personal health information to a third party, the IPC opened an investigation.

Read More


Multiple requests for similar information \\ MO-4241 and MO-4257

Within a relatively short period, requesters made dozens of multi-part, excessively detailed, and significantly overlapping requests for records relating to a class-action lawsuit against a town.

Read More


Maintaining Ontarians’ confidence in the organizational excellence of the IPC

Transform the IPC into a modern, digital organization

In 2022, we addressed the findings of our 2021 threat risk assessments by implementing key IT upgrades and cyber security enhancements. We launched a new online appeal service, allowing Ontarians to securely file and pay for their appeals electronically.

Read More

Being and IPC’er means delivering high-quality work in a collaborative, supportive, and professional work environment. Learning and growing professionally, every day.

IPC as an employer of choice

Throughout 2022, the IPC slowly and gradually returned staff to the office for certain in-person activities. We worked towards an eventual hybrid work model, which evolved over three phases, beginning with those activities that staff felt would be best carried out in person to promote greater employee collaboration, cohesion, and sense of community.

Read More

Policy Advice and Consultations

Formal submissions to government

Through our advocacy work in 2022, the IPC submitted comments, open letters, and recommendations on various proposed laws and regulations having privacy implications.


Employee privacy

Before the pandemic, relatively few Canadians regularly worked from home. During the first few months of 2022, about 46 percent of employees worked from home at least some of the time. Demand for workplace monitoring and remote surveillance tools has dramatically accelerated as employers seek alternate ways of ensuring productivity and accountability in the workforce. Employee monitoring software also referred to as “bossware” — can have many different capabilities, including the ability to: monitor all computing device activity; record employees through webcams and microphones; and track employee location, movements, and activities When combined with powerful algorithms that can analyze patterns in the data and make inferences about employees’ conduct, behaviours, and even their aptitudes and sentiments, the potential for privacy invasion and discriminatory practices can become very real, very quickly.

Read More

IPC Outreach by the Numbers

as at December 31, 2022

Info matters podcasts
Commissioner blogs
Media statements
Youtube subscribers
Media mentions
Privacy day webcast viewers
Info calls
Podcast downloads
Twitter followers
Info emails
LinkedIn connections
YouTube video views
Website visits

Spending in 2022

Salaries and Wages $14,900,500
Employee Benefits $3,980,400
Transportation and Communications $122,000
Services $3,492,400
Supplies and Equipment $137,000
Total $22,632,300