Privacy Breach & Information and Privacy Commissioner of Ontario

Annual Statistical Report

CKO published an article Practice Advice: Privacy Breach Reporting in November 2023 to remind Kinesiologists of their reporting obligations in the event of a privacy breach. These responsibilities include making a report to the Information and Privacy Commissioner of Ontario (IPC).

In addition, Kinesiologists who are Health Information Custodians (HICs) are also required to submit annual statistical reports to the IPC on or before March 1, 2024. This is a legislative requirement set out in Section 6.4 of the Personal Health Information Protection Act (PHIPA), 2004.

CKO advises Kinesiologists to reach out to the IPC for clarification as needed.

Administrative Monetary Penalties

As of Jan. 1, 2024, the IPC has been authorized to issue Administrative Monetary Penalties (AMPs) as part of its enforcement of PHIPA. AMPs of up to $50,000 for individuals and $500,000 for organizations may be issued to encourage compliance with PHIPA and prevent individuals and organizations from deriving economic benefits from violating the law.