For federal institutions
The Federal Government needs information about citizens to deliver effective programs and services, and to shape sound public policies. However, individuals also need to be confident that their personal information will be protected and handled appropriately.
The Privacy Act governs the personal information handling practices of the federal institutions. It limits the collection, use, sharing and disclosure of individuals’ personal information. It also gives individuals the right to access and request correction of personal information about themselves held by the federal government.
The Treasury Board of Canada Secretariat (TBS) is responsible for preparing policy instruments concerning the operation of the Privacy Act and its regulations. This includes issuing directives and guidelines related to the Privacy Act.
The Office of the Privacy Commissioner of Canada (OPC) oversees compliance with the Privacy Act and aims to help federal institutions improve their personal information handling practices.
From this page, you can find a variety of information and resources designed to help federal institutions protect privacy.
Legislation, processes, guidance, investigations
Guidance, access to information, disclosures, public safety
Guidelines, reporting forms
PIAs, expectations, guide, process, tips
Facial recognition, video surveillance, mega events, body-worn cameras
Lessons learned, best practices and other important privacy news, trends and information
Guidance, privacy protection and AI technologies
Exceptions to access rights, timeliness, complaints
Guidance, relevant investigations
Guidance, disclosures without consent, paragraph 8(2)(m), notify OPC, PID portal
Process, obligations, timing
Frequently asked questions
This list highlights advice and information related to privacy issues that employees of federal institutions frequently ask about when they contact us.
How can an institution report a privacy breach to the OPC?
What does the OPC expect in a PIA?
Can an institution release personal information without a person’s consent?
The Privacy Act sets out circumstances in which government institutions may disclose personal information in the public interest without consent. Go to our page on public interest disclosures.
How can an institution notify the OPC about a public interest disclosure?
You can use our public interest disclosure portal to submit your notification.
What does the OPC expect from institutions making representations in relation to a complaint?
See the explanation of the government institution’s role in: What to expect during a complaint investigation under the Privacy Act
How does the OPC interpret and apply the Privacy Act?
We publish summaries and reports from our investigations into federal institutions. These offer concrete examples of how the OPC enforces the Privacy Act.
- Date modified: