Burnaby Privacy Breach Notification Timelines & Fines

Technology and Data British Columbia 3 Minutes Read · published May 24, 2026 Flag of British Columbia

Burnaby, British Columbia public bodies must follow provincial privacy law and official reporting guidance when personal information is compromised. This article summarizes applicable timelines, enforcement pathways, and potential penalties for municipal agencies in Burnaby, and directs officials and affected individuals to the authoritative provincial and municipal sources for reporting, forms and appeals.

Penalties & Enforcement

Legal authority for privacy protection of municipal records in Burnaby derives from the Freedom of Information and Protection of Privacy Act (FIPPA) of British Columbia; administrative oversight and breach guidance are provided by the Office of the Information and Privacy Commissioner for BC (OIPC). See the Act and OIPC guidance for statutory powers and complaint processes.FIPPA text[1] OIPC breach guidance[2]

  • Monetary fines: not specified on the cited provincial act page for municipal public bodies; the OIPC typically issues orders and recommendations rather than fixed monetary penalties.[1]
  • Enforcement authority: OIPC can investigate complaints, make findings and issue orders under FIPPA; Burnaby corporate FOI/privacy staff implement operational responses and notifications.[2]
  • Escalation: first, investigation and remedial direction by OIPC; repeat or continuing noncompliance may lead to formal orders—specific penalty ranges for municipal bodies are not listed on the cited pages.
  • Non-monetary sanctions: orders to amend practices, require notification to affected individuals, publish corrective actions, and other compliance directives by the Commissioner.
  • Appeals and review: orders of the Commissioner may be subject to judicial review in court; specific time limits for judicial review are described in the governing statutes and court rules or are not specified on the cited administrative guidance page.[1]
Follow OIPC guidance promptly after discovering a breach to reduce regulatory risk.

Applications & Forms

For municipal notifications and FOI requests, Burnaby provides information and submission instructions for access and privacy matters on its FOI and privacy pages; specific form names and fees are published by the City and by provincial guidance.City FOI & Privacy[3]

  • Freedom of Information request form: name and submission method published by City of Burnaby; fees and timelines are noted on the City page or specified by statute.
  • How to report a breach internally: contact Burnaby corporate FOI/privacy office using the City’s contact page.

Action Steps for Burnaby Agencies

  • Immediately contain the breach and document what occurred and when.
  • Assess the scope and sensitivity of personal information involved and identify affected individuals.
  • Follow OIPC reporting guidance and notify affected individuals as advised by counsel and OIPC recommendations.Report guidance[2]
  • Coordinate with Burnaby legal and FOI/privacy officers to prepare remedial measures and public communications.
Documenting decisions and timelines helps demonstrate reasonable steps taken after a breach.

FAQ

Who enforces privacy rules for Burnaby public records?
The Office of the Information and Privacy Commissioner for British Columbia (OIPC) enforces FIPPA for municipal public bodies; Burnaby’s FOI/privacy office handles operational matters and initial reports.
Are there fixed fines for privacy breaches by the City of Burnaby?
The cited provincial act and OIPC guidance do not list fixed monetary fines for municipal privacy breaches; enforcement focuses on orders and compliance measures.[1]
How do I report a privacy breach involving Burnaby data?
Report internally to Burnaby’s FOI/privacy office and consult OIPC breach reporting guidance for steps to notify affected individuals and the Commissioner as appropriate.[3]

How-To

  1. Identify and contain the incident to stop further data exposure.
  2. Gather facts: what data, whose records, when, how and who was notified.
  3. Notify Burnaby FOI/privacy staff and follow internal escalation procedures.
  4. Consult OIPC guidance and, if directed, notify affected individuals and the Commissioner.
  5. Implement remedial actions and update policies to prevent recurrence.

Key Takeaways

  • Burnaby agencies are governed by BC’s FIPPA and OIPC oversight for privacy breaches.
  • Monetary fines are not specified on the cited pages; enforcement emphasizes orders and compliance measures.
  • Report incidents promptly to Burnaby FOI/privacy staff and follow OIPC breach guidance.

Help and Support / Resources

  1. [1] Freedom of Information and Protection of Privacy Act (FIPPA) - BC Laws
  2. [2] Office of the Information and Privacy Commissioner for BC - Breach reporting guidance
  3. [3] City of Burnaby - Freedom of Information & Privacy

Categories

General Governance and Administration Public Safety Public Health and Welfare Land Use and Zoning Housing and Building Standards Transportation Environmental Protection Parks and Public Spaces Business and Consumer Protection Taxation and Finance Labor and Employment Education Civil Rights and Equity Elections and Campaign Finance Events and Special Uses Signs and Advertising Utilities and Infrastructure Technology and Data