The Office of the Information and Privacy Commissioner of Ontario’s (IPC) statistics submission website is open.
Institutions that are subject to the Freedom of Information and Protection of Privacy Act (FIPPA) or the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), health information custodians under the Personal Health Information Protection Act (PHIPA), or service providers under Part X of the Child, Youth and Family Services Act (CYFSA), are required to submit annual statistics to the IPC, as described below.
All institutions under FIPPA or MFIPPA are required to submit access, correction and other statistics, even if they received no freedom of information requests during the reporting year.
Those who are both a health information custodian under PHIPA and an institution under FIPPA or MFIPPA, or an institution under FIPPA or MFIPPA that has a health information custodian acting as part of the institution, must submit both a FIPPA/MFIPPA and a PHIPA access, correction and other statistics report. For instance, a hospital or medical officer of health must submit a FIPPA/MFIPPA and a PHIPA report.
The requirements for statistical reporting with respect to FIPPA, MFIPPA, and PHIPA are set out under section 34 of FIPPA and section 26 of MFIPPA.
No requests? Simply log in to the account and click on “No Requests.”
All health information custodians who have experienced a breach during the year must submit a report of health information privacy breaches, as set out in section 6.4 of O. Reg. 329/04 under PHIPA.
Coroners to whom Ontario Health provides personal health information that is accessible by means of the electronic health record must also comply with this requirement, with any necessary modification, as if they were health information custodians.
Health information custodians that are also institutions under FIPPA/MFIPPA must submit health information privacy breach statistics, even if they experienced no breaches during the 2024 reporting year.
All breaches must be reported, whether or not the IPC was required to be notified at the time they occurred.
Child and family services providers subject to Part X of the CYFSA are required to provide the IPC with an annual report on requests for access and correction to records of personal information, privacy breaches, and other statistics during the previous calendar year. The requirements for statistical reporting are set out under section 11 of O. Reg. 191/18 under the CYFSA.
Statistical reports must be filed online. Statistical reports by fax, mail, or email will not be accepted.
Forgot your password? Do not create a new account. Recover your login here or e-mail the IPC at [email protected] for login assistance.
If you do not have an account and it’s your first time submitting an annual report to the IPC, you can register here to set up an account and get a login id and a password. You will need to include:
Personnel changes? Email the IPC at [email protected] if your statistics contacts have changed so they can update their records.
Visit the IPC's website for helpful resources and watch their statistical reporting webinars for tips on submitting your report.
If you have any questions, please e-mail the IPC at [email protected] or call them at (416) 326-3333 or 1-800-387-0073.