Description

Adopted Freedom of Information and Protection of Privacy Amendment Act (Bill 22)

On 25 November 2021, the Freedom of Information and Protection of Privacy Amendment Act (Bill 22) was adopted by the British Columbia Parliament, received royal assent. The entire Bill enters into force except for Sections 25 (obligations concerning privacy management programs and privacy breach notifications) and 48 (responsibilities of police chiefs), which shall be enacted by regulation of the Lieutenant Governor in Council. The Bill amends the Freedom of Information and Protection of Privacy Act (FIPPA), which is British Columbia’s public sector privacy law. In particular, the Bill requires public bodies to develop a privacy management program and report breaches to British Columbia's Privacy Commissioner. Moreover, the Bill introduces new offences in the case of collection or use of personal data when not authorized by the FIPPA. Finally, the Bill eliminates the prohibition for public administration offices of disclosing and storing personal information of British Columbia citizens outside of Canada.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
subnational
Government Branch
legislature
Government Body
parliament

Complete timeline of this policy change

Hide details
2021-10-18
under deliberation

The Freedom of Information and Protection of Privacy Amendment Act (Bill 22) is introduced in the B…

2021-11-25
in force

On 25 November 2021, the Freedom of Information and Protection of Privacy Amendment Act (Bill 22) w…

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Governmental organisation
Economic activity cross-cutting
Category State-owned organisation

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): data processing
Regulatory tool
Preventive security requirement
Responsive security requirement
Regulator approval requirement
Sanctions
Regulated subjects
1

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

personal data (all forms): data processing