A Minister’s Guide to Protecting Personal Information 5 It should be noted that this section becomes active where it is believed the breach “creates a real risk of significant harm”. For further information, see IPC blog Real Risk of Significant Harm. Further, the IPC can investigate privacy related concerns related to Ministers’ offices. This occurs most often when a citizen brings a concern to the Commissioner. Section 33 of FOIP provides: 33 The commissioner may: (a) offer comment on the implications for privacy protection of proposed legislative schemes or government programs; (b) after hearing the head, recommend that a government institution: (i) cease or modify a specified practice of collecting, using or disclosing information that contravenes this Act; and (ii) destroy collections of personal information that is collected in contravention of this Act; (c) in appropriate circumstances, authorize the collection of personal information in a manner other than directly from the individual to whom it relates; (d) from time to time, carry out investigations with respect to personal information in the possession or under the control of government institutions to ensure compliance with this Part. For more information about the IPC’s investigation process, please see Privacy Breach Guidelines for Government Institutions and Local Authorities and The Rules of Procedures. WHAT IS MY DUTY TO PROTECT? Section 24.1 of FOIP imposes a duty on Ministers’ offices to protect personal information in its possession or control. It requires that Ministers’ offices have administrative, technical and physical safeguards in place to protect personal information. Section 24.1 of FOIP provides: 24.1 Subject to the regulations, a government institution shall establish policies and procedures to maintain administrative, technical and physical safeguards that: (a) protect the integrity, accuracy and confidentiality of the personal information in its possession or under its control; (b) protect against any reasonably anticipated:
RkJQdWJsaXNoZXIy MTgwMjYzOA==