A privacy management program (PMP) ensures that organizations build in privacy to all initiatives, programs, or services, and assists in meeting legislative privacy obligations. The Office of the Information and Privacy Commissioner (OIPC) has created a step-by-step guidance document on how to implement such a program. OIPC applies these guidelines in our privacy investigations when we look for indications of accountable privacy management.
OIPC has received requests for additional support tools to assist with PMP development. In response, we have developed a Gap Analysis tool, leveraging a similar resource that the Office of the Information and Privacy Commissioner for Nova Scotia developed. You may download the Gap Analysis tool that provides detailed information about each element of a PMP, with the goal of identifying strengths and areas for improvement:
OIPC is available to deliver training sessions in relation to PMPs upon request.