Language selection


For federal institutions

The Federal Government needs information about citizens to deliver effective programs and services, and to shape sound public policies. However, individuals also need to be confident that their personal information will be protected and handled appropriately.

The Privacy Act governs the personal information handling practices of the federal institutions. It limits the collection, use, sharing and disclosure of individuals’ personal information. It also gives individuals the right to access and request correction of personal information about themselves held by the federal government.

The Treasury Board of Canada Secretariat (TBS) is responsible for preparing policy instruments concerning the operation of the Privacy Act and its regulations. This includes issuing directives and guidelines related to the Privacy Act.

The Office of the Privacy Commissioner of Canada (OPC) oversees compliance with the Privacy Act and aims to help federal institutions improve their personal information handling practices.

From this page, you can find a variety of information and resources designed to help federal institutions protect privacy.

Privacy Act

Legislation, processes, guidance, investigations

Privacy Act compliance help

Guidance, access to information, disclosures, public safety

Breach reporting

Guidelines, reporting forms

Privacy impact assessments

PIAs, expectations, guide, process, tips

Police and public safety

Facial recognition, video surveillance, mega events, body-worn cameras

Privacy Act Bulletins

Lessons learned, best practices and other important privacy news, trends and information

Artificial intelligence

Guidance, privacy protection and AI technologies

Guidance on deemed denials under the Privacy Act

Exceptions to access rights, timeliness, complaints

Public interest disclosures

Guidance, disclosures without consent, paragraph 8(2)(m), notify OPC, PID portal

Privacy Act investigation process

Process, obligations, timing

See all topics

Frequently asked questions

This list highlights advice and information related to privacy issues that employees of federal institutions frequently ask about when they contact us.

How can an institution report a privacy breach to the OPC?

Use our breach reporting form for federal institutions.

What does the OPC expect in a PIA?

See our Guide for Submitting Privacy Impact Assessments to the OPC.

Can an institution release personal information without a person’s consent?

The Privacy Act sets out circumstances in which government institutions may disclose personal information in the public interest without consent. Go to our page on public interest disclosures.

How can an institution notify the OPC about a public interest disclosure?

You can use our public interest disclosure portal to submit your notification.

What does the OPC expect from institutions making representations in relation to a complaint?

See the explanation of the government institution’s role in: What to expect during a complaint investigation under the Privacy Act

How does the OPC interpret and apply the Privacy Act?

We publish summaries and reports from our investigations into federal institutions. These offer concrete examples of how the OPC enforces the Privacy Act.

Date modified: