Insights
Short notes on the January 1, 2027 duties
Practical, dated and linked to the law, so you can forward them to your CAO, council or board. General information, not legal advice.
Most public forms miss part of a notice the Act already requires
What s. 29(2) asks for, what we found on 1,503 public forms, and how to fix it in an afternoon.
Does online recreation registration need a privacy impact assessment?
Children’s details, health notes and payment data, often held by an outside booking service. How the January 1, 2027 duty applies.
Real risk of significant harm: the first 48 hours after a privacy breach
The Act says “as soon as feasible”, not 48 hours. A practical way to run the first two days, built around the IPC’s August 2026 guidelines.
Longer reads
What Bill 97 changes, section by section
Every new duty with its section of MFIPPA, what the IPC has said, and what is still unconfirmed.
Notice of collection on 1,503 public forms
Results by type of institution and by municipal size, with the method and its limits.
Bill 97 readiness checklist (PDF, 2 pages)
Every item tied to its section of the Act. Print it, tick it, share it with your CAO.
Start with a free check, or ask for a quote
Email your institution’s name to:
hello@mapleprivacydesk.caWe reply within 2 business days. Please do not send personal information about residents or staff. We do not need it.
What to put in your email
- Your institution’s name.
- Your name and role, so we know who the check or quote is for.
That is all we need. We find your public forms and privacy pages ourselves.