IPC Ontario News Releases

IPC Criticizes Proposed FIPPA Changes Excluding Top Officials

The Information and Privacy Commissioner of Ontario (IPC) released an updated statement on March 25, 2026, expressing continued concern about proposed amendments to Ontario's Freedom of Information and Protection of Privacy Act (FIPPA). The proposed changes would exclude all government records held by the premier, cabinet ministers, parliamentary assistants, and their political staff from access requests, including retroactively. The IPC argues this would not modernize FIPPA, as existing exemptions already protect personal information and cabinet confidences, while removal would increase cybersecurity risks and diminish public accountability. The IPC urges the government to reconsider the proposal.

Commissioner Kosseim Opposes Proposed FIPPA Changes in Ontario

Ontario's Information and Privacy Commissioner Patricia Kosseim issued a statement on March 13, 2026, opposing proposed amendments to the province's Freedom of Information and Protection of Privacy Act (FIPPA). The proposed changes would prevent Ontarians from accessing government information held by the Premier, cabinet ministers, elected officials, and political staff, and would significantly reduce oversight of government data integration programs. Commissioner Kosseim characterized the amendments as an attempt to evade public accountability, particularly in light of an ongoing court case concerning call logs from the Premier's personal cellphone.

Ontario Alberta Privacy Commissioners Release PowerSchool Breach Investigation Findings

Ontario and Alberta information and privacy commissioners released coordinated investigation findings into the PowerSchool breach, which affected student information systems used by school boards across both provinces. The investigations found that educational bodies failed to include adequate privacy and security provisions in contracts with PowerSchool, lacked policies to monitor the company's technical safeguards, and did not limit remote access by support personnel. The commissioners recommended that educational bodies renegotiate vendor agreements, implement oversight of security safeguards, limit remote access on an as-needed basis, and develop adequate breach response plans. Both commissioners also called on their respective governments to strengthen procurement leverage and provide technical guidance to support the education sector in meeting privacy law requirements.