Insights
Short notes on the January 1, 2027 duties
Practical, dated and linked to the law, so you can forward them to your CAO or council. General information, not legal advice.
Most municipal web forms miss part of a notice the Act already requires
Notice of collection is not new. Our October 2026 review of municipal web forms shows how often it is incomplete, and how to fix it in an afternoon.
Does online recreation registration need a privacy impact assessment?
Registration collects children’s details, health information and payment data, often through an outside booking service. How the January 1, 2027 duty applies.
Real risk of significant harm: the first 48 hours after a privacy breach
The Act says “as soon as feasible”, not 48 hours. A practical way to run the first two days, built around the IPC’s August 2026 guidelines.
Ask for your free readiness check
Send your institution’s name to:
hello@municipalprivacydesk.caWe reply within 2 business days. Please do not send personal information about residents or staff. We do not need it.
What to put in your email
- Your institution’s name.
- Your name and role, so we know who the PDF is for.
That is all we need. We find your public forms and privacy pages ourselves.