Agenda

Please register for this session early, last year's workshop sold out!!!

More often than not, professional staff in many organizations are required to assume the duties of "privacy officer" without having formal training, or any previous experience. Even those who have some awareness of the world of privacy's Fair Information Principles are often challenged by the need to keep management attuned to the privacy needs of their organization as well as the day-to- day tasks of developing and monitoring policies and protocols. Meeting such challenges in an age of outsourcing personal information IT projects can be daunting, especially when the potential for a privacy breach with serious ramifications for the organization is just around the corner. Privacy is the "trust entrance window" for an organization, and is often the credibility test for other elements of the customer or client relationship. Of all this means that it is important to keep your privacy program simple but thorough, responsive but also anticipatory, and flexible but solid in its approach. There are basic tools that every private and public sector organization should have that respond to these challenges, and effectively meet privacy compliance obligations, but at the same time are systemic with mechanisms that automatically ensure currency and relevance.

This session will provide a practical guide for the inexperienced privacy officer, as well as the seasoned privacy professional who is seeking a manageable comprehensive approach to privacy protection for their organization. It will provide a summary of the privacy tools that an organization should use and an outline of the major components for each. The session will provide presentations, videos, and case studies related to the background and experience of the audience. There will be points useful to both public and private sector practitioners and the session will be tailored to be of use and interest to all attending.

Those attending the session will receive:

• a user-friendly flow-chart that navigates the confusing arena of privacy laws
• a check list of the key tools that you need to ensure are in place and operational
• Tips and components for a privacy policy and a privacy breach protocol
• some basic privacy security tips around shredding, memory sticks, and laptops
• a handy "vulnerability meter" with respect to possible U.S. claims on the personal information of Canadians held by the organization.

Robert P. Doherty
President
Access & Privacy Services

Bob Doherty was the Province of Nova Scotia’s first Director of Information Access and Privacy, a position he held for 10-plus years and in that capacity oversaw and provided education and training services to the Nova Scotia Government, universities, hospitals, and school boards. He also provided policy and legislative advice to the government.

Since leaving the public service he has continued to be a guest speaker at conferences in Nova Scotia, New Brunswick, and Ontario and has provided access and privacy consulting and training services to federal, provincial, and municipal clients as well as to the private sector. He has also written op-ed page opinion pieces on privacy for the Halifax Chronicle Herald and authored an analysis of the proposed new Nova Scotia Health Information Act for the "The Winston Report" an on-line journal of the Canadian Association of Professional Access and Privacy Administrators (CAPAPA). He has taught seminars in access and privacy law at Mount St. Vincent University, and worked with the University of Alberta's on-line certificate program in information access and privacy.

He holds a Bachelor of Arts degree from St. Francis Xavier University, a Master of Science degree in Communications from Boston University, and a Bachelor of Laws Degree from Dalhousie University. He is on the board and is a regional representative for the Canadian Association of Access and Privacy Professionals (CAPAPA). He is also a practicing member of the Nova Scotia Barristers Society and specializes in Access to Information and Privacy Law.

David Fraser will lead an interactive workshop on the latest on regulations and privacy best practices, spanning the public and private sectors. The format will be flexible to make sure that the session focuses on what the participants want to learn. Issues will include:

• Trends from the courts and the regulators.

• Cross-border privacy issues:

• How to manage Patriot Act blocking statutes

• Crossing the border with electronic devices

• Social networking sites and Web 2.0

David Fraser
Chair
Privacy Practice Group
McInnes Cooper

David is widely recognized as one of Canada's leading privacy law experts. He is the chair of McInnes Cooper's Privacy Practice Group, working with large and small clients to implement compliance programs for Canadian privacy laws spanning the public, private and health-care sectors. He regularly provides opinions related to Canadian privacy law and is a frequently invited speaker on this topic. David also acts for organizations and individuals in privacy complaints before regulators and in the courts.

David is the President of the Canadian IT Law Association. He is the Vice Chair of the National Privacy and Access Law Section of the Canadian Bar Association and co-chair of the Section's legislation and law reform committee. He has twice appeared before the Standing Committee on Access to Information, Privacy and Ethics of the Canadian Parliament and has contributed to the CBA's submissions on privacy law reform, criminal justice matters, submissions to the Arar Inquiry, the Air India Inquiry, to name a few.

Anne Allard
Director
Regional Services Center Division
Library and Archives Canada

How are you going to promote the benefits of Information Management? How can you empower employees to control their information so that risk issues and concerns are reduced? How do you promote good habits for managing information resources? At the Federal Government level, Treasury Board Secretariat (TBS) is implementing an enterprise wide strategy on Information Management. To be successful, the Strategy outlines the need for a change in culture across the government. Awareness is a critical technique for enabling this change. As such, TBS is creating an IM Awareness Tool Kit. In this session you'll get a sneak preview of the Treasury Board IM Awareness Tool Kit; you'll see how an awareness kit can be positioned with an IM Outreach and Engagement plan. Ultimately, you'll see why it is important to adopt a new approach to promoting the business of IM.

Trevor Banks
Manager, Governance & Community Relations
Information Management Division - CIOB
Treasury Board of Canada Secretariat

Trevor Banks has been involved in the field of IM since joining the Government in 1995. As part of his work at Health Canada, Trevor was involved in launching the IM Awareness sessions. This project included being the lead in the production of the video IM Extreme Make Over. Recently, Trevor was the Manager of IM Policy at Privy Council Office. Among his successful endeavours there, was the co-production of an orientation session that demonstrated a partnership between the Library and other IM groups. Trevor has now taken all his lessons learnt on how to explain, teach and present IM to his current post as Manager of Governance & Community Relations at Treasury Board Secretariat.

The way people want to create and access information is changing - rapidly. Customers want to know what another customer feels about a product before making a purchasing decision. Official corporate policies are nicely stored away and safely complying with regulations but an employee updated version that hasn't been approved is more up to date and accurate.

New information gets created fast, real fast and tools are popping up everywhere to help share it around. There's more information at our finger tips now than ever but its still hard to get the right information. Organizations still need a "paper trail", policies and managed risk.

What's going on?

How do you manage through all this? The touch stones of good IM practices are still required and shouldn't be forgotten, in fact they can help manage and help you provide leadership through changing technology and shifting public habits.

Mark Brown
VP Information Technology
Nova Scotia Liquor Corporation