Language selection


For federal institutions

New online PIA submission form!

Federal institutions can now use our new online Privacy Impact Assessment (PIA) submission form to submit approved PIAs and related documents to the Office of the Privacy Commissioner of Canada.

The federal government needs personal information to deliver effective programs and services, and to shape sound public policies. However, individuals also need to be confident that their personal information will be protected and handled appropriately.

The Privacy Act governs the personal information handling practices of federal institutions. It limits the collection, use, sharing, and disclosure of individuals’ personal information. It also gives individuals the right to access and request the correction of personal information about themselves that is held by the federal government.

The Treasury Board of Canada Secretariat (TBS) is responsible for preparing policy instruments concerning the operation of the Privacy Act and its regulations. This includes issuing directives and guidelines related to the Privacy Act.

The Office of the Privacy Commissioner of Canada (OPC) oversees compliance with the Privacy Act and aims to help federal institutions improve their personal information handling practices.

From this page, you can find information and resources designed to help federal institutions protect privacy. If you need more help, you can contact the OPC’s Government Advisory team to get practical advice and guidance.

Privacy Act

Legislation, processes, guidance, investigations

Privacy Act compliance help

Guidance, access to information, disclosures, public safety

Breach reporting

Guidelines, reporting forms

Privacy Impact Assessments

PIAs, expectations, guide, process, tips, submit online

Police and public safety

Facial recognition, video surveillance, mega events, body-worn cameras

Privacy Act Bulletins

Lessons learned, best practices and other important privacy news, trends and information

Artificial intelligence

Guidance, privacy protection and AI technologies

Guidance on deemed denials under the Privacy Act

Exceptions to access rights, timeliness, complaints

Public interest disclosures

Guidance, disclosures without consent, paragraph 8(2)(m), notify OPC, PID portal

Privacy Act investigation process

Process, obligations, timing

See all topics

Frequently asked questions

This list highlights advice and information related to privacy issues that employees of federal institutions frequently ask about when they contact us.

How can an institution report a privacy breach to the OPC?

Use our breach reporting form for federal institutions.

What does the OPC expect in a PIA?

See our Guide for Submitting Privacy Impact Assessments to the OPC.

How can an institution submit a PIA to the OPC?

You can use our secure online form to submit your PIAs and additional documents.

Can an institution release personal information without a person’s consent?

The Privacy Act sets out circumstances in which government institutions may disclose personal information in the public interest without consent. Go to our page on public interest disclosures.

How can an institution notify the OPC about a public interest disclosure?

You can use our public interest disclosure form to submit your notification.

What does the OPC expect from institutions making representations in relation to a complaint?

See the explanation of the government institution’s role in: What to expect during a complaint investigation under the Privacy Act

How does the OPC interpret and apply the Privacy Act?

We publish summaries and reports from our investigations into federal institutions. These offer concrete examples of how the OPC enforces the Privacy Act.

Date modified: