Privacy & Access to Information

Organizations have more data at their disposal than ever before. Generally, this is a good thing: data can help inform organizations’ strategic and operational decision-making. Increasingly, though, data is also a business risk. Organizations face increasingly complex laws governing the collection, storage, use and disclosure of information. Data breaches can also expose organizations to significant operational and reputational harm. To properly manage these risks, organizations must understand their legal obligations and adopt effective policies and information management practices.

WeirFoulds proudly serves organizations such as public institutions, universities (and other educational institutions), and healthcare providers (including hospitals, regulatory bodies, and their respective stakeholders), providing advice on the impact of the Personal Information Protection and Electronic Documents Act (PIPEDA), Municipal Freedom of Information and Protection of Privacy Act,  Freedom of Information and Protection of Privacy Act, and the Personal Health Information Protection Act. We also assist in the  development of information management systems, privacy policies and codes, and provide advice relating to access to information requests, prepare submissions to regulators, and represent companies that face legal challenges in the wake of a data breach. We also regularly prepare submissions to government advisory bodies and legislative standing committees on legislative and regulatory initiatives.