Winnipeg Records Retention and Privacy Bylaws

This guide explains how records retention and confidentiality obligations apply to City of Winnipeg operations and public requests in Winnipeg, Manitoba. It summarizes the legal framework that governs municipal records, the practical steps public bodies and contractors should follow, and how members of the public can request access or raise privacy concerns. The article emphasizes duties for preserving records, secure storage and approved destruction; it also outlines enforcement pathways, typical sanctions, and how to appeal decisions. Use the steps and resources here to check retention periods, respond to access requests, and report suspected breaches to the appropriate city office.

Records retention framework

Municipal records include documents, emails, meeting minutes, applications, permits and electronic records created or received by city staff and delegated service providers. Retention is driven by legal, fiscal and operational requirements: some records have long-term archival value while others follow routine disposal schedules. Departments should maintain a retention schedule, document disposition approvals, and ensure secure deletion when the retention period expires.

• Identify record types and assign retention periods.
• Maintain an approved retention and disposition schedule.
• Use secure storage and encrypted backups for sensitive records.
• Document authorizations for destruction or permanent transfer to archives.

Penalties & Enforcement

Enforcement of records retention and confidentiality generally involves both municipal procedures and provincial privacy law oversight. Specific monetary fines and statutory penalties for recordkeeping failures are not universally listed on a single City-by-law page and may be governed by provincial statutes that apply to municipalities or by discrete municipal by-laws; when a specific fine or statutory amount is not published on an official page, it is noted below as not specified on the cited page. Administrative remedies commonly include compliance orders, directions to preserve or produce records, and referral to provincial oversight bodies.

• Monetary fines: not specified on the cited page.
• Escalation: first, repeat and continuing offences - not specified on the cited page.
• Non-monetary sanctions: compliance orders, preservation orders, seizure of records by court order, injunctions.
• Enforcer: By-law Enforcement, City Clerk/Access and Privacy office, and provincial privacy authorities may act depending on the issue.
• Inspection and complaint pathways: file an access or privacy complaint with the City Clerk or the designated provincial office.
• Appeal/review: appeals or reviews may be available to provincial oversight bodies or courts; specific time limits are not specified on the cited page.
• Defences and discretion: holder defences commonly include having a reasonable excuse, reliance on legal privilege, or actions taken under an authorised retention schedule or variance.

Applications & Forms

City departments commonly publish access to information request forms and retention schedules; when no form is required or no official form is published, the official guidance will state so. For many municipal privacy or access matters the City Clerk or Access and Privacy office provides the required request forms and submission instructions.

• Access to information request form: check the City Clerk/Access and Privacy office for the official form.
• Records disposition authorizations: department-level forms or approval logs as required by internal policy.

Action steps for public bodies and contractors

Practical steps help ensure compliance, reduce risk, and support transparency.

• Create and publish a retention schedule for each record class.
• Apply secure storage, access controls and encryption for confidential records.
• Document authorizations before destroying records and keep disposition logs.
• Provide clear public instructions for making access or privacy complaints.

FAQ

Who is responsible for municipal records retention?

Departments and delegated contractors are responsible for records they create or manage; the City Clerk and Access and Privacy office provide oversight and policy direction.

How do I request access to city records?

Submit an access to information request using the City Clerk/Access and Privacy office procedure; check the official municipal site for the current form and submission details.

What if my personal information is disclosed improperly?

Report the breach to the City Clerk/Access and Privacy office promptly; there may be escalation to provincial privacy oversight depending on the severity.

How-To

1. Identify all record types your program holds and map where they are stored.
2. Assign retention periods based on legal, fiscal and operational needs and document them in a schedule.
3. Implement secure storage and access controls, including encryption for sensitive electronic records.
4. When retention expires, follow approved disposition steps and record the destruction or transfer.
5. Provide public access instructions and respond to access or privacy complaints within the timelines set by applicable policy or statute.

Key Takeaways

• Maintain an approved retention schedule and disposition logs for accountability.
• Secure confidential records with appropriate access controls and encryption.
• Use the City Clerk/Access and Privacy office for requests, complaints and guidance.

Help and Support / Resources

• City of Winnipeg - Access and Privacy
• City of Winnipeg - Legislative and By-law Database
• Manitoba - The Freedom of Information and Protection of Privacy Act (FIPPA)