|
 
|
 |
|||||||
|
|||||||
| HOME | The Acts | Regulations | Directory of Records | Directory of Institutions | | |||||||
Location: MGCS Home > Office of the Chief Information and Privacy Officer > Acts |
 OCIPO |
 |
Personal privacy14.--(1) A head shall refuse to disclose personal information to any person other than the individual to whom the information relates except, (a) upon the prior written request or consent of the individual, if the record is one to which the individual is entitled to have access; (b) in compelling circumstances affecting the health or safety of an individual, if upon disclosure notification thereof is mailed to the last known address of the individual to whom the information relates; (c) personal information collected and maintained specifically for the purpose of creating a record available to the general public; (d) under an Act of Ontario or Canada that expressly authorizes the disclosure; (e) for a research purpose if, (i) the disclosure is consistent with the conditions or reasonable expectations of disclosure under which the personal information was provided, collected or obtained, (ii) the research purpose for which the disclosure is to be made cannot be reasonably accomplished unless the information is provided in individually identifiable form, and (iii) the person who is to receive the record has agreed to comply with the conditions relating to security and confidentiality prescribed by the regulations; or (f) if the disclosure does not constitute an unjustified invasion of personal privacy. Criteria re invasion of privacy (2) A head, in determining whether a disclosure of personal information constitutes an unjustified invasion of personal privacy, shall consider all the relevant circumstances, including whether, (a) the disclosure is desirable for the purpose of subjecting the activities of the institution to public scrutiny; (b) access to the personal information may promote public health and safety; (c) access to the personal information will promote informed choice in the purchase of goods and services; (d) the personal information is relevant to a fair determination of rights affecting the person who made the request; (e) the individual to whom the information relates will be exposed unfairly to pecuniary or other harm; (f) the personal information is highly sensitive; (g) the personal information is unlikely to be accurate or reliable; (h) the personal information has been supplied by the individual to whom the information relates in confidence; and (i) the disclosure may unfairly damage the reputation of any person referred to in the record. Presumed invasion of privacy (3) A disclosure of personal information is presumed to constitute an unjustified invasion of personal privacy if the personal information, (a) relates to a medical, psychiatric or psychological history, diagnosis, condition, treatment or evaluation; (b) was compiled and is identifiable as part of an investigation into a possible violation of law, except to the extent that disclosure is necessary to prosecute the violation or to continue the investigation; (c) relates to eligibility for social service or welfare benefits or to the determination of benefit levels; (d) relates to employment or educational history; (e) was obtained on a tax return or gathered for the purpose of collecting a tax; (f) describes an individual's finances, income, assets, liabilities, net worth, bank balances, financial history or activities, or creditworthiness; (g) consists of personal recommendations or evaluations, character references or personnel evaluations; or (h) indicates the individual's racial or ethnic origin, sexual orientation or religious or political beliefs or associations. Limitation (4) Despite subsection (3), a disclosure does not constitute an unjustified invasion of personal privacy if it, (a) discloses the classification, salary range and benefits, or employment responsibilities of an individual who is or was an officer or employee of an institution; or (b) discloses financial or other details of a contract for personal services between an individual and an institution. Refusal to confirm or deny existence of record (5) A head may refuse to confirm or deny the existence of a record if disclosure of the record would constitute an unjustified invasion of personal privacy. R.S.O. 1990, c. M.56, s. 14. |
|