Office of the Information and Privacy Commissioner for BC

Tip # 5 Review OIPC Guidance - includes a list of "security" related guidance documents from the guidance section of the OIPC website, with the hashtag #CyberSecurityAwarenessMonth

On our last day of tips, we wanted to remind everyone that OIPC has many guidance documents and videos about keeping your information secure. #cybersecurityawarenessmonth.

Security-related guidance: www.oipc.bc.ca/resources/gu...

PrivacyRight educational program: www.oipc.bc.ca/privacyright/

Canadian information and privacy regulators and ombudspersons in front of mountain backdrop in Banff, Alberta, at conclusion of Federal, provincial, and territorial meeting.

News release: Canada’s information and privacy regulators wrapped up their annual meeting that focused on critical access and privacy issues facing Canadians.
www.oipc.bc.ca/documents/ne...

image show a desktop computer with a location button and the words Limit Location Information

Cybersecurity Awareness Month tip 4? When possible, limit sharing of your location information. If you must share your location, limit it to an approximate location, if that feature is available. Only share your location once or only while you are using the app.

#cybersecurityawarenessmonth

Canadian regulators at their annual meeting in Banff this week were briefed on emerging #access & #privacy issues. L to R, Guilda Rostama, Senior Policy Analyst, Michael Harvey, Information and Privacy Commissioner, Ethan Plato, Acting Deputy Commissioner, and oline Twiss, Deputy Commissioner.

Canadian regulators at their annual meeting in Banff this week were briefed on emerging #access & #privacy issues. L to R, Guilda Rostama, Senior Policy Analyst, Michael Harvey, Information and Privacy Commissioner, Ethan Plato, Acting Deputy Commissioner, and oline Twiss, Deputy Commissioner.

Graphic shows mountainous scene in Banff and type reads FPT Annual Meeting.

Canadian information & privacy regulators shared updates & insights on their jurisdictions at their 2025 #FPT annual meeting in Banff, hosted by OIPC Alberta. Their collaboration creates synergies & opportunities, maximizing their offices’ work to protect Canadian #access & #privacy rights.

image shows the title Limit App permissions with an individual holding a cell home with the security page.

Tip 3 for Cybersecurity Awareness Month? Limit app permissions. Apps may request access to personal information on your device or computer.Review these requests & consider whether they make sense. And - don't share your contacts with an app unless you have permission.
#cybersecurityawarenessmonth

The event is being hosted in Banff, thanks!

Information & privacy regulators from across Canada are converging on Banff, AB today for their annual meeting. They'll discuss privacy & access concerns in our evolving technology-driven world. Follow us for more about critical issues that challenge individuals and organizations around the globe.

this slide shows a screen with apps and the tip, Choose Apps Carefully for cybersecurity week tip 2

Tip #2: Only install apps or download software programs from reputable sources (e.g. Apple's app store).
Avoid downloading apps with negative privacy or security-related feedback or no feedback at all. #cybersecurityweek

image is an information showing the OIPC's strategic priorities in brief, with the headline, Trust in the Age of Information.

OIPC 2025/26-2027/28 Strategic Plan at a glance: Trust in the Age of Information www.oipc.bc.ca/documents/in...

I'm not sure - which event?

images shows a graphic illustration of a woman selecting a digital screen and the headline, OIPC Strategic Plan 2025/26-2027/28

NEWS RELEASE: Strategic plan puts "Trust in the Age of Information" front and centre. www.oipc.bc.ca/documents/ne...

Full 2025/26-2027/28 Strategic Plan: www.oipc.bc.ca/documents/sp... #privacy #accesstoinformation #transparency

graphic shows a woman with a screen with locks on it to symbolize password protection

A password, PIN or passcode is your first line of defence. When possible, use at least 13 characters, and a combination of numbers and uppercase and lowercase characters. Use multi-factor authorization when available to further protect your information.

photo shows a graphic reading Top Five cybersecurity tips and an image of a young woman surrounded various online screens. The hashtag #cybersecurity month is also shown.

As part of Cybersecurity Awareness Month, we’re offering our top five tips this week to refresh your online security practices. #cybersecurityweek

In one week, Canadian information & privacy regulators, including our office, will gather for an annual meeting, hosted this year by OIPC Alberta, to discuss critical concerns related to privacy & access to information. Follow us & learn more. #privacy #accesstoinformation

OIPC Deputy Commissioner oline Twiss will participate in a panel entitled "Shaping Technology for Government" on October 3 at the Centre for Law, Technology and Society/University of Ottawa's conference, "Shaping Technology for Society." Registration details below.

On September 30, the OIPC will respectfully observe the National Day for Truth and Reconciliation as well as Orange Shirt Day in our continuing efforts to advance truth and reconciliation. #NDTR #OrangeShirtDay, #EveryChildMatters

This image is a portrait of Michael Harvey, Information and Privacy Commissioner for British Columbia.

Today, Commissioner Harvey participated in a panel entitled “Why Trust is Critical in Canadian Politics” at the Political Leadership & Trust in Canada workshop at Acadia University in Wolfville, Nova Scotia.

This image depicts symbols of a telephone, a social media post, and an email to symbolize contact us, while the text reads, Contact us if you have any questions about your responsibilities under FIPPA. The text in the post contains the various ways to contact us. Email: info@oipc.bc.ca Phone: (250) 387-5629

Our final tip for public bodies is to contact us! We are here to help! If you have any questions about your responsibilities under FIPPA, contact us for assistance.

Email: info@oipc.bc.ca Phone: (250) 387-5629

Thanks for joining us for #RTK2025

Information and Privacy Commissioner Michael Harvey and OIPC staff stand in front of the Centennial Fountain on the grounds of the BC Legislature. The fountain is lit up in green in recognition of World Mitochondrial Disease Week 2025.

OIPC staff joined MitoCanada's Light up for Mito Walk in Victoria to raise awareness for mitochondrial diseases. Buildings in downtown Victoria were lit up in green as part of World Mitochondrial Disease Week 2025.

Image: Top: Text reads Tip 9: Make Info Accessible with two bullet points: Make the information you collect available electronically whenever possible. Help individuals quickly and efficiently access their own information through a secure online portal. Below: Hand holding a search bar interface with the word "ACCESS" in the text field.

Tip 9 for public bodies who handle FOI requests is to make personal information easily accessible for individuals. #RTK2025

First image: Tip 8: Routine Release: Routinely make information available that will likely b ethe subject of an access request or released in response to general access requests (excluding requests that contain personal information). Second image of OIPC guidance document, Proactive disclosure: guidance for public bodies.

Tip 8 for public bodies concerns proactive disclosure.

Check out our guidance for more information about how to routinely make information available to the public. www.oipc.bc.ca/documents/gu...
#RTK2025

This image shows tip 7: Follow OIPC Guidance. Guidance documents, orders, reports, and other publications can help you comply with FIPPA. This week, we published Guidance to FIPPA’s FOI Processes to assist public bodies (see link above in post)

Tip 7? Follow OIPC guidance and familiarize yourself with our orders, reports, and other publications, such as our new Guidance to FIPPA’s FOI Processes: www.oipc.bc.ca/documents/gu... #RTK2025

This image depicts nine recommendations provided to UBC in the Audit of the University of British Columbia's duty to assist. Full report: https://www.oipc.bc.ca/documents/infographics/3025 1. UBC begin counting the time limit to respond on the day after an FOI request is received and only suspend the time after notifying the applicant of the requirement to pay the application fee. 2. Public bodies that administer an application fee clearly inform applicants of all available payment options. 3. UBC executive promote a culture of transparency throughout all program areas to improve FOI responsiveness. This includes monitoring program area accountability. 4. UBC staff follow up promptly if searches for records become overdue. 5. UBC continuously monitor its FOI system and correct delays in responding to FOI requests. 6. UBC evaluate the effectiveness of its FOI file tracking system within six months. 7. UBC eliminate the backlog within one year of this report. 8. UBC provide onboarding and refresher training to FOI staff on its duty to assist applicants including time limits, time extensions, and required notifications. 9. UBC protect applicant anonymity (including journalist/media applicant anonymity) when responding to FOI requests.

Recommendations from the Audit of the University of British Columbia's Duty to Assist.

Full overview text: www.oipc.bc.ca/documents/in...

This text is a summary of Commissioner Harvey's Message in the Audit of the University of British Columbia's Duty to Assist. Photo of Commissioner Harvey walking outside. Link to full overview is in the report.

Summary of Commissioner's Message from the Audit of the University of British Columbia's duty to assist.
Full overview: www.oipc.bc.ca/documents/in...

Cover of Overview of the Audit Report: The University of British Columbia's duty to assist. Link to overview is in the post.

Overview of the Audit Report: The University of British Columbia's duty to assist.
Full overview: www.oipc.bc.ca/documents/in...

Portrait of Michael Harvey, Information and Privacy Commissioner for British Columbia accompanies post highlighting his video message about the Audit into the University of British Columbia's Duty to Assist. Video link is in the post.

Commissioner Michael Harvey presents a video overview of the Audit into the University of British Columbia's Duty to Assist.
www.youtube.com/watch?v=89aF...

Cover of Audit of The University of British Columbia's Duty to Assist report, dated September 2025. Link to report in post.

News release: UBC failed to meet FOI response timelines in 90% of requests, audit finds. www.oipc.bc.ca/documents/ne...

Full report: www.oipc.bc.ca/documents/au...

Keeping up to date with policies and training is another important practice all public bodies who handle FOI requests should observe. #RTK2025

Tip 5 for public bodies handling FOI requests concerns documentation. Knowing what to retain is key to fulfilling requests for information. #RTK2025