FIPPA & PHIA Practice Notes

Practice notes are prepared by Manitoba Ombudsman to assist persons using the legislation. They are intended as advice only and are not a substitute for the legislation. Below is a complete list of our FIPPA and PHIA practice notes but you can also find our practice notes grouped by topic in our public body resource area.

Practice notes that cover both FIPPA and PHIA 

• 5 minute privacy checkup: personal information and personal health information (2019)
• Distinguishing between access to information requests and authorized disclosures under FIPPA and PHIA (2010)
• Key steps in responding to privacy breaches under FIPPA and PHIA (2022)
• Privacy breach notification letter checklist (2022)
• Privacy considerations for emailing personal and personal health information (2008)
• Privacy considerations for faxing personal and personal health information (2008)
• Protecting personal and personal health information when working outside the office (2007)
• Protecting the privacy of access requesters (2007)
• Severing information in records under FIPPA and PHIA (2011)

Practice notes for FIPPA 

• Changing the basis for a decision to refuse access (2007)
• Checklist – contents of a complete response under FIPPA (2022)
• Collection and providing notice of collection of personal information under FIPPA (2012)
• Considerations for applying exceptions when refusing access under FIPPA (2011)
• Considering limits to exceptions when making access decisions under FIPPA (2022)
• Dealing with access requests involving employee information (2011)
• Dealing with fee waivers under FIPPA (2006)
• Disclosure under FIPPA (2010)
• Disregarding Access Requests Under FIPPA (2025) *New*
• Distinguishing between personal information and business information under FIPPA (2011)
• Documentation about processing access requests under the Freedom of Information and Protection of Privacy Act (FIPPA)  2022-01-07
• Extending the time limit for responding under FIPPA (2022)
• FIPPA privacy breach risk rating tool (2022)
• Guideline on time frames for processing a FIPPA request (2022)
• Handling requests for correction under FIPPA (2007)
• Interaction between FIPPA and other acts (2011)
• Making a Submission to the Ombudsman for an Extension Longer than 30 days (2022)
• Making effective written representations in responding to complaints about refused access under FIPPA (2009)
• Preparing fee estimates under FIPPA (2018)
• Providing notice to a third party under section 33 of FIPPA (2011)
• Providing reasons to an applicant when refusing access under FIPPA (2006)
• Responding to a complaint about a failure to respond to an access request under FIPPA (2006)
• Responding to a complaint about a fee estimate under FIPPA (2006)
• Responding to a complaint about a refusal to correct personal information under FIPPA (2022)
• Responding to a complaint about a refusal to grant a fee waiver under FIPPA (2006)
• Responding to a Complaint about an Extension of the Time Limit for Responding under FIPPA (2022)
• Responding to a complaint about collection of personal information under FIPPA (2007)
• Responding to a complaint about disclosure of personal information under FIPPA (2007)
• Responding to a complaint about refusal of access under FIPPA (2022)
• Responding to a complaint about the transfer of an access request under FIPPA (2006)
• Responding to a complaint about use of personal information under FIPPA (2007)
• Responding to recommendations made by the ombudsman under FIPPA (2022)
• The exercise of discretion when applying discretionary exceptions to refuse access under FIPPA (2011)
• The Duty to Assist Under FIPPA – Elements of the duty to assist (2025)*Recently Updated*
• Use under FIPPA (2010)

Practice Notes for PHIA 

• 5 minute privacy checkup: personal health information (2019)
• Checklist – contents of a complete response under PHIA (2006)
• Collection and providing notice of collection of personal health information under PHIA (2010)
• Considerations for applying exceptions when refusing access under PHIA (2011)
• Disclosure under PHIA (2010)
• Handling requests for correction under PHIA (2022)
• PHIA privacy breach risk rating tool (2022)
• Providing reasons to an individual when refusing access under PHIA (2006)
• Responding to a complaint about a failure to respond to an access request under PHIA (2006)
• Responding to a complaint about a refusal of access under PHIA (2006)
• Responding to a complaint about a refusal to correct personal health information under PHIA (2022)
• Responding to a complaint about collection of personal health information under PHIA (2007)
• Responding to a complaint about disclosure of personal health information under PHIA (2007)
• Responding to a complaint about fees under PHIA (2006)
• Responding to a complaint about security of personal health information (2007)
• Responding to a complaint about the transfer of an access request under PHIA (2006)
• Responding to a complaint about use of personal health information under PHIA (2007)
• Responding to recommendations made by the ombudsman under PHIA (2022)
• The Duty to Assist Under PHIA (2022)
• Use under PHIA (2010)