OIPC 블로그

A follow-up report has found the Provincial Health Services Authority (PHSA) has taken meaningful steps to incorporate recommendations aimed at strengthening the privacy and security of the Provincial Public Health Information System (System), following the Office of the Information and Privacy Commissioner’s (OIPC) December 2022 report that found the PHSA’s failure to address security and privacy vulnerabilities put British Columbians at risk.

Commissioner McEvoy presents the 2022-23 OIPC Annual Report. Read on to watch a welcome video from the Commissioner on the report.

On March 9, 2023, the Office of the Information and Privacy Commissioner for British Columbia (OIPC) hosted the OIPC Youth Forum. A group of high school students from across British Columbia joined experts from the OIPC, the BC Civil Liberties Association, MediaSmarts, and special guest speaker, Cambridge Analytica whistleblower and social researcher Christopher Wylie, for a wide-ranging discussion on the privacy issues that impact students most.

The investigation looked at a number of issues, including: whether consent to FRT was properly obtained from individuals, whether those visitors were properly notified about how their images would be collected and used, and, whether the broad use of FRT was reasonable in the circumstances.

A preliminary review of the impact of BC’s application fee for freedom of information requests reveals limited payment options, a lack of criteria among public bodies for not charging or for refunding the fee when fairness warrants, and mixed findings about the initial impact on applicants.

The Provincial Health Services Authority (PHSA) has failed to address security and privacy vulnerabilities in BC’s Provincial Public Health Information System (the System) — putting the personal health information of British Columbians at risk.

An investigation report released by Information and Privacy Commissioner Michael McEvoy says the security and privacy vulnerabilities have been known to the PHSA since 2019.

Commissioner McEvoy presents the 2021-22 OIPC Annual Report. Read on to watch a welcome video from the Commissioner on the report.

Information and Privacy Commissioner Michael McEvoy announced the launch of the OIPC Young Scholars Project today, on the International Day of Education.

The OIPC continues to provide service to the public, public bodies, and private sector. To protect the health of our employees and to do our part to slow community transmission of the COVID-19 virus, most OIPC staff have now transitioned to working remotely. This will mean that, for the time being, our Office will not receive in person visits from those we serve.

We will post updates on our website and social media channels as the situation continues to unfold.

Getting #PrivacyRight means respecting the trust that individuals place in organizations that collect, use or disclose their personal information. People should be confident that businesses will collect their personal information appropriately and in a straightforward manner and, where needed, only after they have provided meaningful consent.

This month, learn about the authority to collect, use, and disclose personal information. Explore our latest online tools, including a video, a webinar, a podcast, and one of our key guidance documents. Whether you’re an organization that collects, uses, and discloses personal information or a customer who is wondering what happens to your information, this month’s releases have the answers you need.

This month, learn about accountability and the benefits of implementing a privacy management program. We have several online tools for you to explore, including two webinars (each with printer-friendly notes), a video, and podcast. Dig a little deeper with our related guidance documents, then take our privacy assessment challenge.

The secret’s out… privacy is good business. And to help you and your organization get on board, we are launching PrivacyRight, a series of educational tools for BC organizations that will help you understand your obligations under the Personal Information Protection Act (PIPA).

You probably noticed a flurry of emails in your inbox over the past few weeks, as everything from social media apps to your email provider to your fridge rush to send you privacy policy updates. Why now, you ask? Well, it has to do with a new privacy law called the GDPR.

I am as surprised as anyone that email retention and deletion by government staff is again making news. These matters have been thoroughly canvassed in numerous reports by my office, by government and in government’s own retention schedules and policies. They also emphasize the need for independent oversight of record management including the duty to document.

This year, as the Asia Pacific Privacy Authorities (APPA) mark Privacy Awareness Week, there couldn’t be a more important time to talk about the need to protect personal information. I spoke about this very topic last week to a gathering of small business owners, communications professionals, and government employees.

How many times a day are you asked for your email, telephone number, postal code, or birth date? Probably more than you might realize. Think about when you go to the grocery store, the pharmacy, or to a clothing or electronics store. Many retailers ask for your email to connect purchase history with future promotional offers to better tailor potential discounts with your spending habits. But is this legal? Well, it all comes down to the purpose for which the information was collected.

Let’s face it – protecting data in our digital society isn’t easy. Devices intended to improve our lives also collect an astounding amount of information about you, your family, and friends. Voice assistant technology, connected devices, and apps that give you remote access to your home sound pretty convenient. But before you unlock your front door with your phone, think about this: in 2016, 2.2 billion data records were compromised and vulnerabilities were uncovered in products and services, such as baby monitors and door locks. Yikes!

Last week we released a tip sheet for public bodies managing requests for records, in conjunction with our audit report examining the access to information policies and procedures of WorkSafeBC.

Are you tempted by the potential benefits of cloud-computing? The option can be appealing, as the service often cuts costs and removes obstacles for users looking to reduce IT infrastructure and maintenance. Before you reach for the clouds, make sure you know the legal requirements that apply when processing and storing personal information outside of Canada.

I recently spoke about the Internet of Things and Big Data at a healthcare summit in Vancouver. Well, let’s be honest and call it what it really is - the Internet of Everything. From the rubber ducky in your child’s bathtub to your smart tea kettle, the array of connected devices on the market today seems almost limitless.

Updated guidance is now available to physicians on privacy and security of patient records

A few weeks ago, my office and the Office of the Privacy Commissioner of Canada (OPC-Canada) co-hosted the 48th Asia Pacific Privacy Authorities (APPA) Forum in Vancouver. From November 15-17, APPA officials from 14 member jurisdictions and invited guests shared insights and perspectives, discussed global privacy trends, exchanged experiences, and looked for opportunities for joint regulatory guidance and enforcement activities across the Asia Pacific Region.

From September 25 to October 2 we are celebrating Right to Know week to raise awareness of our right to access government records, essential to democracy and good governance.

The use of dash-cams by private sector organizations is, from any practical perspective, likely unlawful in BC.

I was invited to speak to this group because Selkirk College has been awarded a three-year federal grant to explore open data and open government in rural B.C. The organizers asked me to share my views about open data, including where datasets should be published, and what data should be considered sensitive and private.

오늘은 전 세계 정보의 자유를 증진하기 위한 알 권리 주간을 기념하는 날입니다. 2002년 불가리아에서 시작된 알 권리 운동은 매년 9월 28일에 약 40개 국가와 60개 비정부기구에서 기념하고 있습니다.

B.C.’s Personal Information Protection Act (“PIPA”) sets out how the province’s 380,000-plus private-sector “organizations” can collect, use, and disclose personal information. Personal information held by a federally regulated organization, such as a bank or telephone company; however, is protected by the federal Personal Information and Electronic Document Act, or “PIPEDA”.

This post is the first in a series of essays from students in Political Science 370, The Politics of Surveillance, a University of Victoria course taught by Dr. Colin Bennett. By sharing these posts on its blog, the Office of the Information and Privacy Commissioner hopes to facilitate discussions about privacy and access issues. The views expressed, of course, are those of the authors.

매년 5월 초, 전 세계 개인정보 보호 전문가들은 개인정보 보호 인식 주간(PAW)을 기념합니다. 올해로 10주년을 맞이하는 이 이니셔티브는 2006년 아시아 태평양 개인정보 보호 당국(APPA)에서 다양한 개인정보 보호 문제와 정보 보호의 중요성을 알리고 인식을 제고하기 위해 시작되었습니다.

적은 비용으로 개인 트레이너를 두는 것과 같습니다. 하지만 토론토 대학교 연구진의 연구 결과에 따르면 걸음 수, 칼로리, 수면 및 기타 데이터를 추적하는 인기 웨어러블 기기인 피트니스 트래커도 우리를 추적하고 있을 수 있습니다.

의심스러운 이메일, 성가신 전화 또는 너무 좋은 제안을 받은 경험은 누구나 있을 것입니다. 다단계 사기부터 스패머와 사기꾼에 이르기까지 캐나다인들은 전자 사기로 인해 매년 수백만 달러를 잃고 있습니다.

복잡한 디지털 시대에 법 집행 기관과 기술 기업 간의 긴장은 계속 강화되고 있습니다. 특히 최근 전 세계에서 발생한 테러 이후 국제 테러리즘으로 인한 어려움을 과소평가하지 않습니다. 하지만 국가 안보 및 법 집행 기관의 감시 활동에 대한 적절한 감독과 감독은 무엇일까요?

2015년 12월, 유럽 데이터 보호 감독관인 Giovanni Buttarelli는 빅데이터 시대에 맞게 데이터 보호를 재창조해야 하며, 원칙에 타협하는 것이 아니라 빅데이터가 사람들에게 도움이 되는 방향으로 사용되도록 해야 한다는 의견을 발표했습니다.

From dog licences and parking tickets to property taxes and building permits, B.C.’s regional governments and municipalities routinely collect, store, and share large amounts of personal information about those they serve.

디지털 경제에는 여권이나 특별 비자가 필요하지 않습니다. 하지만 개인정보 보호에 대한 다양한 법률 시스템과 문화적 규범으로 인해 국경을 넘나드는 정보 흐름이 복잡하다는 문제가 있습니다.

"많은 민간 부문 조직에서 '개인 디바이스 가져오기'(BYOD)가 점점 인기를 얻고 있습니다. 하지만 기업 정보 보호와 고객 및 직원의 개인정보 보호 권리 사이의 균형을 맞추는 것은 정책, 교육, 기술 솔루션이 필요한 까다로운 작업일 수 있습니다. 다음은 고려해야 할 몇 가지 팁입니다.

말하는 인형부터 엄마 아빠의 휴대폰, 태블릿, 스마트 시계의 미니어처 버전까지, 이번 시즌에는 최신 버전의 인터넷 연결 장난감들이 매장 진열대에 가득 쌓여 있습니다. 디지털 기술이 발전함에 따라 더 많은 커넥티드 장난감이 시장에 출시될 것입니다. 다음은 가족의 개인정보를 보호하기 위한 몇 가지 팁입니다.

공공 기관과 기업은 모두 외부 위협으로부터 IT 네트워크를 보호해야 한다고 생각하지만, 직장 내부에서 발생할 수 있는 위협은 어떨까요? 소프트웨어 도구는 어느 정도 보호 기능을 제공할 수 있지만, 의도치 않게 직원의 개인 정보를 수집할 수도 있습니다.

지난주, 제 사무실은 밴쿠버에서 프라이버시 및 액세스 20/20: 프라이버시의 미래라는 중요한 컨퍼런스를 주최하게 되어 자랑스러웠습니다. 컨퍼런스 세션은 생각을 자극하고 시의적절하며 선견지명이 있었습니다.

비가 내리는 13일 금요일, 밴쿠버에서 열린 '프라이버시 및 접근 20/20: 프라이버시의 미래' 컨퍼런스에서 BC주 정보 및 개인정보 보호 위원 엘리자베스 덴햄과 아동 및 청소년 담당 의원 메리 엘렌 터펠-라폰드는 사이버 폭력에 관한 공동 보고서를 발표했습니다.

8시간 안에 모든 업무를 끝내는 것이 항상 가능한 것은 아닙니다. 어쩔 수 없이 재택근무를 해야 할 때도 있습니다. 하지만 사무실 밖에서 개인 정보에 액세스할 때마다 개인 정보가 분실되거나 손상될 위험이 높아집니다. 공공 기관과 민간 조직은 정보의 자유 및 사생활 보호법("FIPPA")과 개인 정보 보호법("PIPA")에서 요구하는 대로 종이 및 전자 기록을 안전하게 보관해야 합니다.

2014년 7월 1일 캐나다의 스팸 방지법(CASL)이 발효되면서 이메일 받은 편지함을 관리하기가 훨씬 쉬워졌습니다. 하지만 스팸은 여전히 컴퓨터에 침투할 수 있습니다. 이러한 원치 않는 이메일은 단순히 성가신 것 이상으로 받은 편지함에 악성 스파이웨어를 실행하여 개인 정보를 침해할 수 있습니다. 다행히도 이러한 위험을 최소화하기 위해 취할 수 있는 몇 가지 간단한 조치가 있습니다.

위원장과 함께한 어제 트위터 채팅을 놓치셨나요? 질문과 답변의 전체 스크립트를 읽어보세요.

On Nov. 12 and 13, the OIPC will host “Privacy and Access 20/20: The Future of Privacy" with our partner, Reboot Communications. The conference will bring stakeholders from the public, private and non-profit sectors together at the Coast Coal Harbour Hotel for some thought-provoking, content from experts in industry, government, academic institutions and civil society. Here are some thoughts on the topic from Commissioner Elizabeth Denham.

The Information and Privacy Commissioner receives hundreds of complaints and appeals from British Columbians each year.

These numbers have increased significantly in recent years. And we aren’t alone: privacy and access to information commissioners in Canada and beyond are experiencing big increases in case volumes that are challenging them to deliver timely service to the public.

Every year I look forward to Right to Know week, because it gives us a chance to celebrate and acknowledge the value of access to information rights. As an avid book-lover and dedicated book-club member, it seemed like a good opportunity to share some of my top picks for books that could find a home in the "access to information" section of your bookshelf.

알 권리 주간은 정부 정보에 접근할 수 있는 권리에 대한 인식을 높이는 데 목적이 있습니다. 알 권리는 또한 민주주의와 좋은 거버넌스의 필수 요소인 정보의 자유를 장려합니다. 다음은 알 권리 주간에 대한 몇 가지 주요 사실입니다:

This month, learn about accountability and the benefits of implementing a privacy management program. We have several online tools for you to explore, including two webinars (each with printer-friendly notes), a video, and podcast. Dig a little deeper with our related guidance documents, then take our privacy assessment challenge.