FIPPA & PHIA Practice Notes

Practice notes are prepared by Manitoba Ombudsman to assist persons using the legislation. They are intended as advice only and are not a substitute for the legislation. 

Practice notes that cover both FIPPA and PHIA 

• 5 minute privacy checkup: personal information and personal health information (2019)
• Distinguishing between access to information requests and authorized disclosures under FIPPA and PHIA (2010)
• Key steps in responding to privacy breaches under FIPPA and PHIA (2022)
• Privacy breach notification letter checklist (2022)
• Privacy considerations for emailing personal and personal health information (2008)
• Privacy considerations for faxing personal and personal health information (2008)
• Protecting personal and personal health information when working outside the office (2007)
• Protecting the privacy of access requesters (2007)
• Severing information in records under FIPPA and PHIA (2011)
• The duty to assist under FIPPA and PHIA (2010)

Practice notes for FIPPA 

• Changing the basis for a decision to refuse access (2007)
• Checklist – contents of a complete response under FIPPA (2022)
• Collection and providing notice of collection of personal information under FIPPA (2012)
• Considerations for applying exceptions when refusing access under FIPPA (2011)
• Considering limits to exceptions when making access decisions under FIPPA (2022)
• Dealing with access requests involving employee information (2011)
• Dealing with fee waivers under FIPPA (2022)
• Disclosure under FIPPA (2010)
• Distinguishing between personal information and business information under FIPPA (2011)
• Documentation about processing access requests under the Freedom of Information and Protection of Privacy Act (FIPPA)  2022-01-07
• Extending the time limit for responding under FIPPA (2022)
• FIPPA privacy breach risk rating tool (2022)
• Guideline on time frames for processing a FIPPA request (2022)
• Handling requests for correction under FIPPA (2007)
• Interaction between FIPPA and other acts (2011)
• Making a Submission to the Ombudsman for an Extension Longer than 30 days (2022)
• Making effective written representations in responding to complaints about refused access under FIPPA (2009)
• Preparing fee estimates under FIPPA (2018)
• Providing notice to a third party under section 33 of FIPPA (2011)
• Providing reasons to an applicant when refusing access under FIPPA (2206)
• Responding to a complaint about a failure to respond to an access request under FIPPA (2006)
• Responding to a complaint about a fee estimate under FIPPA (2006)
• Responding to a complaint about a refusal to correct personal information under FIPPA (2022)
• Responding to a complaint about a refusal to grant a fee waiver under FIPPA (2006)
• Responding to a Complaint about an Extension of the Time Limit for Responding under FIPPA (2022)
• Responding to a complaint about collection of personal information under FIPPA (2007)
• Responding to a complaint about disclosure of personal information under FIPPA (2007)
• Responding to a complaint about refusal of access under FIPPA (2022)
• Responding to a complaint about the transfer of an access request under FIPPA (2006)
• Responding to a complaint about use of personal information under FIPPA (2007)
• Responding to recommendations made by the ombudsman under FIPPA (2022)
• The exercise of discretion when applying discretionary exceptions to refuse access under FIPPA (2011)
• Use under FIPPA (2010)

Practice Notes for PHIA 

• 5 minute privacy checkup: personal health information (2019)
• Checklist – contents of a complete response under PHIA (2006)
• Collection and providing notice of collection of personal health information under PHIA (2010)
• Considerations for applying exceptions when refusing access under PHIA (2011)
• Disclosure under PHIA (2010)
• Handling requests for correction under PHIA (2022)
• PHIA privacy breach risk rating tool (2022)
• Providing reasons to an individual when refusing access under PHIA (2006)
• Responding to a complaint about a failure to respond to an access request under PHIA (2006)
• Responding to a complaint about a refusal of access under PHIA (2006)
• Responding to a complaint about a refusal to correct personal health information under PHIA (2022)
• Responding to a complaint about collection of personal health information under PHIA (2007)
• Responding to a complaint about disclosure of personal health information under PHIA (2007)
• Responding to a complaint about fees under PHIA (2006)
• Responding to a complaint about security of personal health information (2007)
• Responding to a complaint about the transfer of an access request under PHIA (2006)
• Responding to a complaint about use of personal health information under PHIA (2007)
• Responding to recommendations made by the ombudsman under PHIA (2022)
• The Duty to Assist Under PHIA (2010)
• Use under PHIA (2010)