Who Handles Privacy Complaints in Whitby, Ontario

Technology and Data Ontario 4 Minutes Read · published May 26, 2026 Flag of Ontario

Whitby, Ontario residents with privacy concerns should first check whether the issue involves the Town of Whitby, a provincial body, a health custodian, or a private business. For matters involving municipal records or Town services, start by contacting the Town's Access to Information and Privacy coordinator for Whitby Town of Whitby - Access to Information[1]. If the issue is a suspected breach of provincial privacy rules under MFIPPA or PHIPA, the Information and Privacy Commissioner of Ontario handles complaints and reviews IPC Ontario - Make a privacy complaint[2]. For privacy complaints about private-sector organizations (federal jurisdiction), contact the Office of the Privacy Commissioner of Canada Office of the Privacy Commissioner of Canada[3].

Who handles what

The responsible authority depends on the type of organization:

  • Town of Whitby records and municipal services: Town Access/Privacy Coordinator and Town Clerk (municipal institution).
  • Provincial institutions and personal health information: Information and Privacy Commissioner of Ontario (IPC).
  • Private-sector businesses and national carriers: Office of the Privacy Commissioner of Canada (OPC) under federal privacy law.
Start with the organisation that holds your information before filing an external complaint.

Penalties & Enforcement

Enforcement tools and sanctions depend on the governing law and the enforcing office. For municipal and provincial privacy matters under MFIPPA and PHIPA, the Information and Privacy Commissioner can investigate, order disclosure or correction, and issue orders requiring institutions to change practices; specific monetary fines for breaches are not specified on the cited page IPC Ontario - Make a privacy complaint[2]. For private-sector breaches under federal law, the OPC may investigate and can seek remedies; monetary penalties or administrative fines depend on the statutory regime and are not specified on the cited federal complaint page Office of the Privacy Commissioner of Canada[3].

  • Monetary fines: not specified on the cited page for municipal/provincial matters; see the IPC link for enforcement powers.[2]
  • Non-monetary orders: compliance orders, recommendations, reports and directions to change practices are available from the IPC.[2]
  • Enforcer: Information and Privacy Commissioner of Ontario (for MFIPPA/PHIPA) and the Office of the Privacy Commissioner of Canada (for federal/private-sector matters).[2]
  • Inspections and investigations: typically triggered by a formal complaint; the enforcing office will set its process and timelines on its site.[2]
  • Appeal/review: orders or decisions may be subject to judicial review; specific time limits are not specified on the cited page and should be checked with the enforcing office.[2]
The IPC can issue orders requiring institutions to change how they handle personal information.

Applications & Forms

To request municipal records or make an access request under MFIPPA you will typically use the Town's access to information request procedures and any published forms; the Town's access page includes guidance and any applicable application details Town of Whitby - Access to Information[1]. If you are filing a formal complaint to the IPC or OPC, use the complaint forms and instructions on their official pages linked above.[2]

How to report a privacy concern

  1. Gather details: names, dates, what information was disclosed, copies of communications, and any internal complaint numbers.
  2. Contact the organisation that holds the data (Town of Whitby or the private company) and request an internal review or explanation.
  3. If unsatisfied, file a formal complaint: for municipal or provincial matters, file with the IPC; for private-sector matters, file with the OPC.
  4. Keep records of all actions and follow the enforcing office's instructions; consider legal advice for judicial review if ordered relief is not complied with.
Document dates and copies of correspondence to support any complaint or review.

FAQ

Who do I contact first for a privacy issue involving Town services?
Contact the Town of Whitby's Access to Information and Privacy coordinator; if unresolved, you may submit a complaint to the IPC.[1]
What if a business in Whitby shared my personal information?
If the business is private and federally regulated, file a complaint with the Office of the Privacy Commissioner of Canada; some sectors have specific regulators.[3]
How long will an investigation take?
Investigation timelines vary by office and case complexity; specific standard timelines are not specified on the cited pages and should be confirmed with the enforcing office.[2]

How-To

  1. Collect evidence and note key dates.
  2. Make an internal complaint to the organisation and request remediation.
  3. If unresolved, submit the official complaint form to the IPC (provincial) or OPC (federal) following their online instructions.
  4. Follow up on any orders, and consider legal options if compliance is not achieved.

Key Takeaways

  • Municipal privacy concerns about Town records start with the Town's Access to Information coordinator.
  • The Information and Privacy Commissioner of Ontario handles MFIPPA and PHIPA complaints.
  • Private-sector privacy complaints are handled by the Office of the Privacy Commissioner of Canada.

Help and Support / Resources

  1. [1] Town of Whitby - Access to Information
  2. [2] IPC Ontario - Make a privacy complaint
  3. [3] Office of the Privacy Commissioner of Canada - Report a concern

Categories

General Governance and Administration Public Safety Public Health and Welfare Land Use and Zoning Housing and Building Standards Transportation Environmental Protection Parks and Public Spaces Business and Consumer Protection Taxation and Finance Labor and Employment Education Civil Rights and Equity Elections and Campaign Finance Events and Special Uses Signs and Advertising Utilities and Infrastructure Technology and Data