Winnipeg Data Privacy Bylaw Guide

Technology and Data Manitoba 3 Minutes Read · published February 11, 2026 Flag of Manitoba

This guide explains data privacy obligations for organisations operating in Winnipeg, Manitoba, focusing on municipal compliance alongside provincial access and privacy law. It summarizes who enforces rules, how to request records, complaint and appeal routes, common violations, and practical steps to reduce risk for businesses, non-profits, and city contractors.

Legal sources and scope

Municipal bodies in Winnipeg are subject to Manitoba's Freedom of Information and Protection of Privacy Act for public bodies; where the City publishes its own access procedures, those apply to City operations. For provincial statute text see The Freedom of Information and Protection of Privacy Act (Manitoba)[1].

Check whether your activity is covered as a public body before relying on municipal guidance.

Penalties & Enforcement

Enforcement for access and privacy matters affecting City operations is typically handled through the Office of the Manitoba Ombudsman and the statutory mechanisms in FIPPA. Municipal bylaw offences unrelated to FIPPA are enforced by City of Winnipeg by-law officers and other designated departments. Specific monetary penalties for breaches of municipal privacy practices are not consistently listed on the cited statutory page; see the linked provincial statute for sections on offences and the Ombudsman for remedies.[1]

  • Enforcer: Office of the Manitoba Ombudsman for FIPPA complaints; City of Winnipeg By-law Enforcement for municipal bylaw offences.
  • Inspection and complaint pathways: submit access or privacy complaints to the Ombudsman or file municipal complaints with the City Clerk or By-law Enforcement.
  • Fines: not specified on the cited page for municipal privacy breaches; refer to the controlling instrument when published.
  • Escalation: first and repeat/continuing offences and escalation ranges are not specified on the cited provincial statute page for municipal bylaws.
  • Non-monetary sanctions: orders to disclose or cease collection, court actions, injunctive relief, and administrative directions via the Ombudsman or courts.
  • Appeals & review: complain to the Ombudsman or follow statutory review routes; time limits for filing complaints are not specified on the cited page and may appear in governing instruments or regulations.
If you process personal data for the City, document lawful authority and retention schedules immediately.

Applications & Forms

The City of Winnipeg publishes access request and privacy forms where applicable; if no form is required, the City accepts written requests as described on its access pages. Specific municipal form names, numbers, fees, and deadlines are not specified on the cited provincial statute page; consult the City Clerk or the City access web pages for current forms and submission instructions.[1]

Common violations and typical outcomes

  • Unauthorized disclosure of personal information — may lead to orders to remediate and complaints to the Ombudsman.
  • Failure to respond to an access to information request — administrative review and possible orders under FIPPA.
  • Poor records management and retention — remedial directions and policy requirements.

How organisations should respond

  • Identify whether you are a public body or a private organisation working for the City and document legal authority for data processing.
  • Adopt or update retention schedules, access procedures, and breach response plans.
  • Designate a privacy contact and provide a clear complaint channel for individuals.

FAQ

Who enforces data privacy for City operations in Winnipeg?
The Office of the Manitoba Ombudsman enforces FIPPA for public bodies, and City departments or By-law Enforcement handle municipal bylaw breaches where applicable.
How do I request access to records held by the City?
Submit an access request following the City of Winnipeg's access procedures; some requests use a published form while others accept a written application.
What penalties apply for mishandling personal information?
Monetary fines for municipal privacy breaches are not specified on the cited provincial statute page; remedial orders and court actions are possible and depend on the controlling instrument.

How-To

  1. Determine whether your activity is governed by FIPPA or a municipal bylaw and identify the responsible department.
  2. Locate and complete any required City access or privacy forms, or prepare a written request following City guidance.
  3. Implement data minimization, retention schedules, and breach response procedures.
  4. Report suspected breaches or file complaints with the Office of the Manitoba Ombudsman or the City Clerk, as appropriate.
  5. If ordered to comply or if issues persist, seek review or appeal through statutory review routes or the courts.

Key Takeaways

  • Winnipeg organisations must follow provincial FIPPA rules for public bodies and City procedures for municipal operations.
  • Document authority to collect and retain data, maintain clear access procedures, and designate a privacy contact.

Help and Support / Resources

  1. [1] The Freedom of Information and Protection of Privacy Act (Manitoba)

Categories

General Governance and Administration Public Safety Public Health and Welfare Land Use and Zoning Housing and Building Standards Transportation Environmental Protection Parks and Public Spaces Business and Consumer Protection Taxation and Finance Labor and Employment Education Civil Rights and Equity Elections and Campaign Finance Events and Special Uses Signs and Advertising Utilities and Infrastructure Technology and Data