Strategies for Privacy Compliance

The issue of privacy of personal information should be considered carefully by all charities and not-for-profit corporations. Privacy is good for business, and, as such, it should be viewed as a business issue more than a compliance issue. Charities and not-for-profit corporations should observe and follow privacy laws, industry best practices and fair information practices in respect of personal information. This session focuses on strategies for privacy compliance for charities and not-for-profit corporations operating in Ontario.

A cautionary note

The foregoing text and video is provided for general information purposes only. It is neither intended as, nor should be considered, legal advice and readers and viewers are cautioned against making any decisions based on this material alone. Rather, a qualified lawyer should be consulted. © McMillan LLP 2011.

Five Good Ideas

1. Privacy is good for business.
2. Be proactive, not reactive.
3. Follow laws, industry best practices and fair information practices.
4. Develop privacy incident/breach protocols now, not on the fly.
5. Revisit, revise and retrain.

Five Good Resources

1. Privacy Commissioner of Canada
2. Information and Privacy Commissioner, Ontario
3. Ontario Hospital Association’s Hospital Privacy Toolkit
4. Textbook on PIPEDA: C. H.H. McNairn, A Guide to the Personal Information Protection and Electronic Documents Act (Markham: LexisNexis Canada Inc., 2010)
5. Textbook on PHIPA: Lydia Wakulowsky, Personal Health Information Protection Act – Implementing Best Privacy Practices (2^nd ed) (Markham: LexisNexis, 2011)

This event is made possible by the generous support of McMillan LLP