Burlington PIA Submission Steps - City bylaw guide

Technology and Data Ontario 3 Minutes Read · published May 24, 2026 Flag of Ontario · By Daniel Roy

Burlington, Ontario projects that collect or process personal information should follow a clear Privacy Impact Assessment (PIA) process to meet municipal and provincial privacy expectations. This article explains who in the city oversees PIAs, how to prepare and submit a PIA, typical timelines, and what to do if privacy concerns or enforcement actions arise. It draws on the City of Burlington privacy resources and provincial privacy law to identify required steps, relevant contacts, and official appeal routes for municipal projects in Burlington.

Penalties & Enforcement

Privacy compliance for municipal projects in Burlington is governed by applicable city policies and the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA) under Ontario law. Exact monetary fines for PIA noncompliance are not specified on the cited page for Burlington projects; where provincial statute or orders apply, enforcement and remedies are described on the provincial pages cited below.[1][2]

  • Fine amounts: not specified on the cited page.
  • Escalation: first, repeat, and continuing offences - not specified on the cited page; provincial orders may apply.
  • Non-monetary sanctions: orders to cease processing, mandatory remedial steps, notification requirements, and review by the Information and Privacy Commissioner of Ontario.
  • Enforcer: municipal information governance or clerk office in coordination with provincial oversight bodies; complaints may be directed via official city contact pages.[1]
File a complaint promptly to preserve appeal rights and timelines.

Applications & Forms

The City of Burlington does not publish a universally required PIA form for all projects on its public privacy pages; specific departments may require project-specific privacy assessments or templates. If a department requires a submitted PIA form, the department page or project intake instructions will provide the form name, submission address, and fee information. For general provincial obligations see the MFIPPA reference below.[1][2]

Check the project lead department for any local PIA template before you start.

How to prepare and submit a PIA

Prepare a PIA that documents purpose, data elements, lawful authority, retention, access controls, third-party sharing, and privacy risk mitigation. Coordinate with the city department sponsoring the project and the municipal information governance contact before submission. Maintain a records copy and document approvals and any data protection measures.

  • Identify the project sponsor and the municipal contact responsible for intake.
  • Compile a data inventory and risk assessment section within the PIA.
  • Allow adequate review time; departmental review times vary by project complexity.
  • Confirm any fees or service charges with the sponsoring department during intake.
Start the PIA early in project planning to avoid delays in approvals.

FAQ

Who in Burlington reviews PIAs?
The municipal information governance team or the sponsoring department typically coordinates review; contact details are available on the City of Burlington privacy and services pages.[1]
Are there standard fines for privacy breaches?
Standard monetary fines for municipal PIA noncompliance are not specified on the cited Burlington page; provincial statutes and orders describe remedies and oversight.[2]
How do I appeal a municipal privacy decision?
Appeals or complaints about access and privacy decisions can be directed to the Information and Privacy Commissioner of Ontario when statutory rights under MFIPPA apply; consult the official provincial guidance for timelines.[2]

How-To

  1. Engage the project sponsor and identify the municipal intake contact.
  2. Document the scope, data elements, legal authority, retention, and access controls in the PIA.
  3. Submit the PIA to the sponsoring department as instructed by the municipal intake process.
  4. Respond to departmental review comments and obtain written approval before launch.
  5. If denied or directed to change processing, follow the remedial steps or seek review per the provincial appeal routes.

Key Takeaways

  • Coordinate early with the sponsoring department to identify any local templates or requirements.
  • Include a clear data inventory and mitigation steps in the PIA to speed review.
  • Understand provincial oversight under MFIPPA and appeal options with the IPC.

Help and Support / Resources

  1. [1] City of Burlington - Privacy and protection
  2. [2] Municipal Freedom of Information and Protection of Privacy Act (MFIPPA)

Categories

General Governance and Administration Public Safety Public Health and Welfare Land Use and Zoning Housing and Building Standards Transportation Environmental Protection Parks and Public Spaces Business and Consumer Protection Taxation and Finance Labor and Employment Education Civil Rights and Equity Elections and Campaign Finance Events and Special Uses Signs and Advertising Utilities and Infrastructure Technology and Data
Daniel Roy

Daniel Roy

Municipal Bylaw Analyst

Daniel analyses municipal bylaws across Canadian provinces and territories. He checks every guide against official municipal and provincial sources.