Agenda
Monday, October 26, 2009
7:45am – 8:45am
Registration and Continental Breakfast
8:45am – 9:00am
Welcome to Conference
Miriam McTiernan
Archivist of Ontario
Ministry of Government Services
Miriam McTiernan
Archivist of Ontario
Ministry of Government Services
9:00am – 9:50am
An Update from the Information and Privacy Commissioner of Ontario
Ann Cavoukian Ph.D.
Commissioner
Office of the Information and Privacy Commissioner/Ontario
Ann Cavoukian Ph.D.
Commissioner
Office of the Information and Privacy Commissioner/Ontario
Dr. Ann Cavoukian is recognized as one of the leading privacy experts in the world. An avowed believer in the role that technology can play in protecting privacy, Dr. Cavoukian's leadership has seen her office develop a number of tools and procedures to ensure privacy is protected in Ontario - and around the globe. Dr. Cavoukian is Ontario's first Information and Privacy Commissioner to be re-appointed for a second term. Initially appointed in 1997, her role in overseeing the operations of the freedom of information and privacy laws in Canada's most populous province was extended to 2009. Like the Auditor General, she serves as an officer of the legislature, independent of the government of the day. Businesses across North America and Europe regularly seek Dr. Cavoukian's advice and guidance on privacy and data protection issues. She has been involved in a number of international committees focused on privacy, technology and business. Her ground-breaking 1995 paper with the Netherlands Data Protection Authority on advancing privacy protection through the pursuit of privacy-enhancing technologies or PETs is now part of the industry lexicon. Whenever a privacy, security or access issue hits the news, Dr. Cavoukian is one of the first experts called in by the media to make sense of it. She often serves the role of "translator" - breaking down complex issues into understandable terms and concepts. She is also frequently called upon to speak at leading international forums.
9:50am – 10:10am
Networking and Refreshment Break
10:10am – 11:00am
Privacy Considerations with Cloud Computing
Dan Michaluk
Lawyer
Hicks Morley LLP
Cloud computing holds many opportunities as a model for business computing, yet it is also associated with a number of legal issues that have caught the public eye and invite close scrutiny. Join Dan Michaluk from Hicks Morley in taking a focussed look at these issues. Dan will lead a discussion with a view to helping government administrators develop a strong ability to manage legal issues in assessing, planning for and implementing cloud computing projects. Issues such as:
- Good, bad and ugly cloud computing models
- Applicable regulation and its impact on cross-border transfers
- Laying the groundwork for outsourcing - the importance of due diligence
- The negotiation and the contract
- The Lakehead University and City of Los Angeles outsourcing projects as case studies
Dan Michaluk
Lawyer
Hicks Morley LLP
Dan Michaluk is a lawyer at Hicks Morley, the leading firm in Canada representing employers on human resources law and advocacy issues. Dan represents Hicks Morley's public sector clients in a wide-range of matters, but does a significant amount of work on information management, access-to-information and privacy files and a significant amount of work in support of university and college administration. Dan has advised public sector institutions on privacy compliance and records management initiatives and security breaches, has represented institutions in responding to access-to-information appeals and has represented unionized institutions in privacy-related grievance arbitrations. Dan received a Bachelor of Commerce in 1994 and an LL.B. in 1997. Prior to joining Hicks Morley, he was the Director of Operations for a start-up business simulation software company. Dan's information and management privacy blog is called "All About Information" http://danmichaluk.wordpress.com, and he can be reached at 416-864-7253.
11:05am – 12:05pm
Breakout Session 1
1A: Basic Access MFIPPA
Gina Coish
Freedom of Information/Records Management Officer
The Simcoe County District School Board
Ontario’s Municipal Access and Privacy legislation is divided into two main sections: Access and Privacy. In this session you will learn the main concepts of Ontario’s access schemes, including the exemptions, definitions and their importance. This session will greatly benefit newcomers to the legislation.
Gina Coish
Freedom of Information/Records Management Officer
The Simcoe County District School Board
Gina Coish is the Freedom of Information/Records Management Officer for the Simcoe County District School Board where she has been employed for over 18 years in a variety of positions. Gina has worked with MFIPPA for over 10 years and in her current role she is responsible for the establishment of a privacy program and a records management program. She is a graduate the University of Alberta’s Information Access and Protection of Privacy Certificate Program and has served as Chair of the Ontario Association of School Business Officials Freedom of Information/Records Management Committee. Gina is the current co-chair of the Privacy and Information Management (PIM) Taskforce, a grassroots group that came together to develop a toolkit of resources and guidelines for Ontario School Boards to aid in the development of a culture of information that protects privacy, manages risk and promotes public trust and confidence.
1B: Basic Access FIPPA
Wendy Terhune
FOI Coordinator
Ministry of Municipal Affairs and Housing
Erin Coulter
FOI Coordinator
Ministry of the Environment
This presentation will be aimed at a beginner audience who are wishing to learn the basics about the process of obtaining access to records held by institutions covered under the Freedom of Information and Protection of Privacy Act (FIPPA). We will also make reference to the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA).
Topics to cover include:
- The purpose of the Act
- Right of Access
- Mandatory and Discretionary Exemptions
- Procedures to Access Information
- Role of the Freedom of Information and Privacy Office
- Role of the Information and Privacy Commissioner (IPC)
Wendy Terhune
FOI Coordinator
Ministry of Municipal Affairs and Housing
Wendy Terhune began her OPS career in 2002, working on various electronic service delivery projects at both the Ministry of Government Services and the Ministry of Citizenship and Immigration. She joined the Ministry of Finance and the Ministry of Revenue, where she worked as the FOI Program Analyst for almost 4 years. Wendy then worked at the Ministry of the Environment as an Assistant FOI Coordinator. Wendy recently joined the Ministry of Municipal Affairs and Housing as their FOI Coordinator.
Erin Coulter
FOI Coordinator
Ministry of the Environment
Erin Coulter has worked in the field of information management in the OPS since 2004 when she joined the Archives of Ontario as an archivist. Erin became Assistant FOI Coordinator at the Ministry of the Environment in 2008.
1C: Recent Orders
John Higgins
Senior Adjudicator and Manager of Adjudication
Office of the Information and Privacy Commissioner, Ontario
Ian Ross
Counsel
Access and Privacy Law Group
Ministry of Government Services
Linda Naidoo
Counsel
Access and Privacy Law Group
Ministry of Government Services
Examine recent decisions of the Office of the Information and Privacy Commissioner/Ontario and the Courts to find out about new interpretations and significant clarifications or restatements of the law. Familiarity with the legislation is needed for this in-depth look at new developments.
John Higgins
Senior Adjudicator and Manager of Adjudication
Office of the Information and Privacy Commissioner, Ontario
John Higgins, Senior Adjudicator and Manager of Adjudication with the Office of the Information and Privacy Commissioner of Ontario (IPC), is a member of the Law Society of Upper Canada. After spending ten years as a lawyer in private practice, Mr. Higgins moved to the public sector, and has worked at the IPC since 1991. Mr. Higgins adjudicates access to information appeals under Ontario’s public sector Freedom of Information and Protection of Privacy Act and its municipal counterpart, the Municipal Freedom of Information of Information and Protection of Privacy Act. He also leads the team of adjudicators who deal with these appeals at the IPC. Prior to accepting this position, Mr. Higgins was Legal Counsel at the IPC, providing legal advice to adjudicators and representing the IPC in judicial review litigation.
Mr. Higgins is Chair of the Ontario Bar Association’s Administrative Law section. He is a frequent speaker on administrative law, as well as access and privacy issues.
Ian Ross
Counsel
Access and Privacy Law Group
Ministry of Government Services
Linda Naidoo
Counsel
Access and Privacy Law Group
Ministry of Government Services
1D: Your Digital Trail
Francois van Heerden
Cluster Security Officer
MInistry of Community and Social Services
Are you aware of the extent of your "digital trail"? This presentation will provide you with an overview of the extent of the electronic signature each person leaves behind them every day. It will touch on privacy issues, aspects of social engineering and how simple it is to locate the information for fraudulent and malicious purposes.
Francois van Heerden
Cluster Security Officer
MInistry of Community and Social Services
Francois van Heerden is a security professional with over 26 years of IT experience. He is an entertaining and accomplished speaker who believes security starts with awareness and education.
He has presented to audiences on timely topics such as Identity Theft, Social Engineering and the threats facing people on the Internet.
1E: Privacy Issues for Social Services Delivery Agents
C.M. (Chuck) Dowdall
Director Client Services
Social Housing Services Corporation
Privacy can mean many things to many people! Lawyers, philosophers, psychologists, historians, politicians, teachers, parents and clients all have different ideas about privacy and what it represents. Every social service organization deals with a vast array of personal and sensitive information of clients they serve on a daily basis. This is complicated by the degree of interaction with many external agencies as well as other departments within the social service organization. The management of personal information and protection of an individual’s privacy has never been more important. This presentation will provide an overview of the applicable privacy legislation and fundamental principles of privacy compliance within the social service environment. Attendees will leave this presentation with a clear understanding of when and how client information can be exchanged internally and externally as well as understand the purpose and format of acceptable consent.
C.M. (Chuck) Dowdall
Director Client Services
Social Housing Services Corporation
12:05pm – 1:00pm
Lunch
1:00pm – 2:00pm
Breakout Session 2
2A: Basic Privacy MFIPPA
Geoff Bell
FOI and Privacy Coordinator
Regional Municipality of Waterloo
Municipal institutions handle personal information in many of the services they deliver. This session is oriented to FOIP coordinators and others who are new to the world of privacy protection and covers the basic principles and operation of MFIPPA's framework for handling personal information. Privacy requirements will be described with practical examples from the municipal perspective. You will hear some tips and suggestions for implementing privacy supportive practices in your institutions and have the opportunity to direct questions to an experienced municipal privacy practitioner.
Geoff Bell
FOI and Privacy Coordinator
Regional Municipality of Waterloo
2B: Basic Privacy FIPPA
Janet Dadufalza
Senior Policy Adviser
Ministry of Transportation
Nadia Bruno
Policy Analyst
Ministry of Transportation
Ontario’s Access and Privacy legislation should play an important role in determining how an institution operates on a daily basis. Learn how privacy is defined, what the legislation says about privacy and how this should be applied to your institutions day-to-day activities. This session will appeal to people who are new to the law and who will be applying privacy principles in their FIPPA organization.
Janet Dadufalza
Senior Policy Adviser
Ministry of Transportation
Janet Dadufalza is a graduate of University Of Toronto and is currently Senior Policy Advisor at the Ministry of Transportation's Freedom of Information and Privacy Office. She has been a member of the Ontario Public Service for 16 years and has 6 years of access and privacy experience working with the provincial legislation. This is her second year presenting at the Access and Privacy Workshop.
Nadia Bruno
Policy Analyst
Ministry of Transportation
Nadia Bruno is currently a Policy Analyst in the Freedom of Information and Privacy Office at the Ministry of Transportation. Nadia has over 10 years experience working for the provincial government. Prior to joining the FOI and Privacy Office four years ago Nadia held various issues management positions at the Ministry of Transportation. She provides training and provides guidance and advice to ministry staff on access to information and privacy matters. Nadia also holds an Honours Bachelor Degree in Anthropology from the University of Toronto.
2C: FIPPA and Procurement-Key Concepts
Todd Milton
Counsel
Ministry of Transportation
Joe Pannella
Counsel
Ministry of Transportation
This session will focus on the interaction of public sector procurement with the FOIPPA obligations of institutions. The focus will be on the following aspects:
- Custody/Control of commercial information
- Threshold requirements for protecting information
- Practical considerations for procurement development
Seminal as well as recent IPC decisions would be reviewed along with their application to various practical procurement situations.
Todd Milton
Counsel
Ministry of Transportation
Joe Pannella
Counsel
Ministry of Transportation
2D: Release of Police Records to Outside Agencies
Pat Seaton
Freedom of Information Analyst
Peel Regional Police
Chair, Freedom of Information Police Network
Shobana Rajan
Secretary – FOIPN, Analyst
Waterloo Regional Police
Kelli Eyres
Director – FOIPN, Coordinator
Thunder Bay Police
Paul Cormier
Records Manager
Waterloo Regional Police
Police are continually used as a “resource” for information and/or records about individuals. A panel, made up of Police Freedom of Information specialists and a Records Manager, will discuss Section 32/42 MFIPPA/FIPPA and the discretionary release provisions of the Section(s). The discussion will cover the various procedures that most police agencies require in these situations and will include examples of instances where the Police will request that records be obtained by way of a summons or warrant.
Pat Seaton
Freedom of Information Analyst
Peel Regional Police
Chair, Freedom of Information Police Network
Shobana Rajan
Secretary – FOIPN, Analyst
Waterloo Regional Police
Kelli Eyres
Director – FOIPN, Coordinator
Thunder Bay Police
Paul Cormier
Records Manager
Waterloo Regional Police
2E: Implementing Privacy by Design: Unplugged and Up Close
Panel Moderator: Michelle Chibba
Director of Policy
Office of the Information and Privacy Commissioner, Ontario
Fred Carter
Senior Policy and Technology Advisor
Office of the Information and Privacy Commissioner, Ontario
Mark Barkley
Sergeant, Communication Services
Toronto Police Service
Andrew Lewman
Executive Director
The Tor Project
The message of Privacy by Design (PbD), www.privacybydesign.ca – that privacy can be protected without sacrificing security, functionality or performance, if it is designed in from the outset – is a powerful one. A panel of experts will describe their own experiences with designing privacy into systems, as well as offering guidance to those who will undertake the task in the future. This session will provide system designers and privacy practitioners live examples of PbD in the context of CCTV and law enforcement, Web 2.0 and open government, and The Tor Project, a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet.
Panel Moderator: Michelle Chibba
Director of Policy
Office of the Information and Privacy Commissioner, Ontario
Michelle has over two decades of professional experience, most of it in the Ontario Public Service (OPS), where she managed several strategic policy projects both at Management Board and Ministry of Health and Long-Term Care. Early in her career, she worked in the private sector as well as for a non-governmental policy research organization in the U.S. One of her major accomplishments within the OPS was as Quality Manager for the Health Economic Development Unit, where she was instrumental in implementing a quality management system that was successfully registered to ISO 9001 standards. For this, she received the Amethyst Award for Outstanding Achievement by Ontario Public Servants. She is also a recipient of an Ontario Ministry of Health and Long-term Care ACE Award for Stakeholder/Partner Relations. Ms. Chibba received her master’s degree from Georgetown University (Washington, D.C.), with a focus on ethics and international business.
Fred Carter
Senior Policy and Technology Advisor
Office of the Information and Privacy Commissioner, Ontario
Fred Carter has a variety of demanding roles as Senior Policy and Technology Advisor. His primary responsibilities involve providing research, information, and strategic advisory services to the IPC Commissioners, management and staff on a wide range of technology and privacy policy issues. His recent work includes publications on Identity Theft, Identity Management, Radio Frequency Identification (RFID), and Biometric Encryption.
Fred worked for the Office of the Privacy Commissioner of Canada in the Research and Policy Division in a similar capacity, where he dealt with technology-related privacy compliance and public policy issues, including biometrics, authentication methods, Internet privacy and e-Government issues.
Mark Barkley
Sergeant, Communication Services
Toronto Police Service
Mark Barkley has been a member of the Toronto Police Service (TPS) for 24 years, with experience in uniform patrol, specialized investigative units, and technological research and planning. Mark has worked on several committees to research and recommend legislation and governance models, as well as to review the use of technology in support of policing operations. Since 2005, Mark has been the officer in charge of communications technology support at the TPS 9-1-1 centre. In 2006, Mark was tasked with researching the use of Closed Circuit Television (CCTV) as an additional policing tool. Through this research and consultation with the IPC, Mark developed operational and governance models for the use of CCTV in public spaces by the TPS. This blending of privacy consideration with operational design and governance created a CCTV program that stands as an example of the positive-sum paradigm.
Andrew Lewman
Executive Director
The Tor Project
Andrew Lewman is executive director of The Tor Project, a non-profit organization providing research and free software that protects your online privacy and anonymity. Andrew manages The Tor Project's business operations, support, and advocacy roles while also serving on its board of directors. He is an ethologist by training and his experience spans a variety of business fields. In addition to conducting research on animal communication behavior, Andrew has worked for multi-national companies in Japan, Korea, Taiwan, and the Philippines. He is a strong believer of individual rights, privacy, anonymity, and solving real-world problems - sometimes even with technology.
2:05pm – 3:05pm
Breakout Session 3
3A: Train the Trainer
Lynne Gottschling
Access and Privacy Coordinator
Ministry of Government Services
Are you the access/privacy go-to person in your institution? If so, this session is for you ..cause you've got some training to do! Learn how to identify what your colleagues need to know and how to select and deliver the right content in the best way possible. Fun and training can go together...come and find out how.
Lynne Gottschling
Access and Privacy Coordinator
Ministry of Government Services
3B: Ask the Expert
John Wunderlich
Principal
John Wunderlich and Associates
Fazila Nurani
Senior Counsel and Lead Trainer
PrivaTech Consulting
Your chance to get some insightful opinions on some your most challenging questions.
John Wunderlich
Principal
John Wunderlich and Associates
John Wunderlich is a former Senior Policy and Information Technology Advisor for the Information and Privacy Commissioner of Ontario. Mr. Wunderlich’s role with the Office of the IPC involved serving as a research, information, and advisory resource to the Commissioner and her staff on a wide range of technology and privacy policy issues. Prior to joining the IPC, John worked in the private sector in a variety of technology and management roles. John is also a Certified Information System Auditor (CISA) and has designed and completed privacy audits and assessments in a number of companies. John has spoken about privacy to private and public sector audiences in the U.S. and Canada on privacy and information management. He has written about privacy or been interviewed on the subject by both newspapers and industry journals. John is a graduate of the University of Manitoba, with a B.A. in History. He pursued graduate studies at the University of Ottawa in History, and has an MBA from the John Molson School of Business at Concordia University in Montreal.
Fazila Nurani
Senior Counsel and Lead Trainer
PrivaTech Consulting
Fazila Nurani was called to the Bar of Ontario in 2001, and is the President and Founder of PrivaTech Consulting (www.privatech.ca). PrivaTech specializes in advising organizations on implementing privacy and information security best practices, and complying with Canadian privacy laws. Fazila’s privacy consulting, legal and training services have benefited those operating in a variety of industries to better manage privacy and information security risks, including marketing firms, the insurance and health sectors, debt collectors, technology companies, retailers, the staffing industry and financial service providers. Fazila has also worked extensively with the public sector, providing direction on the implementation of government initiatives with privacy implications.
3C: Schools and the Police – Privacy Issues in their Relationship
Panel Moderator: Nancy Massie
Information Asset Services
York Region District School board
Lorraine Wilson
Constable
Peel Regional Police
Internet Child Exploitation Unit
David Seal
Detective
Peel Regional Police
Youth Crime Unit
Martha Mackinnon
Lawyer and Executive Director
Justice for Children and Youth
Sheila Hetherington
Vice Principal
Safe Schools
Maria Bunn
Secondary School Student and Student Trustee
York Region District School Board
A panel of experts will debate the relationship and expectations between schools and police services. What legal rights do both have and do they clash? What can students and schools expect from this relationship? What can the police expect? A select series of scenarios will be posed and our panel will express their own views / knowledge on each, for example, what rights do the police have to open and inspect students’ lockers and knapsacks? The ultimate goal is to educate relative to the protection of privacy vs. upholding the law.
Panel Moderator: Nancy Massie
Information Asset Services
York Region District School board
Lorraine Wilson
Constable
Peel Regional Police
Internet Child Exploitation Unit
David Seal
Detective
Peel Regional Police
Youth Crime Unit
Martha Mackinnon
Lawyer and Executive Director
Justice for Children and Youth
Sheila Hetherington
Vice Principal
Safe Schools
Maria Bunn
Secondary School Student and Student Trustee
York Region District School Board
3D: Emerging Issues in Trans-Border Data Flow
Murray Rosenthal
Senior Policy Analyst
City of Toronto
Lou Milrad
Associate Counsel
Miller Thomson LLP
Debi Wilcox
City Clerk
City of Pickering
The increasing off-site handling and storage of electronic data collected by municipalities has raised new issues of data security and privacy. This is a critical concern especially when the data storage facility lies in a different jurisdiction! This important session will discuss the implications of housing municipal data in other jurisdictions, including how legislation in those jurisdictions might affect your data and your privacy obligations!
Murray Rosenthal
Senior Policy Analyst
City of Toronto
Murray Rosenthal, CISA, is a well-regarded information security practitioner with 20 years of experience in the information security profession. He is known for his thought leadership in the areas of information security strategic planning and information security management systems, as well as state modeling and breach vector identification across the domain architectures of business, information, application, technology, security and privacy. Murray is also responsible for leading-edge thinking on security-related aspects of the Zachman Framework, described by John Zachman as “especially innovative”.
Lou Milrad
Associate Counsel
Miller Thomson LLP
Lou has a double career, the first as Associate Counsel with the national law firm of Miller Thomson LLP and the second, as the Board Chair and CEO of the GTMA - Greater Toronto Marketing Alliance. Lou authors a series of technology law volumes on Computer and Information Technology and occasionally lectures at Waterloo, Ryerson, and at UOIT. He is a board member of KINSA (Kids Internet Safety Association) and on the Executive Committee the Public Sector Lawyers Section of the Ontario Bar Association. Lou is a graduate of the University of Toronto (BA) and of the Osgoode Hall School of Law of York University (LLB).
Debi Wilcox
City Clerk
City of Pickering
3E: The Impact of Technology on FIPPA and MFIPPA
Guy Herriges
Manager, Access, Discovery and Business Recordkeeping
Office of the Chief Information and Privacy Officer
Better management of information is a key enabler of the Ontario government’s modernization agenda to improve the quality and sustainability of public services. The Government of Ontario is leading many changes in information management policies and practices, and implementing new technologies to achieve better value from its information holdings, improve internal and external services and to ensure that the province's knowledge trust is protected now and for future generations.
Practitioners in the field of Access to Information and Privacy will continue to play important and potentially new roles as we transition to a primarily electronic environment for records and document management. This presentation will focus on the changes in information management practices that are underway in the OPS and how those changes may affect the role and function of Freedom of Information and Privacy professionals.
Guy Herriges
Manager, Access, Discovery and Business Recordkeeping
Office of the Chief Information and Privacy Officer
Guy Herriges is Manager of Access, Discovery and Business Recordkeeping with the Office of the Chief Information and Privacy Officer, Ministry of Government Services. Currently, he is focused on the development of an information management strategy for the Government of Ontario. Prior to his current assignment, Guy was on secondment to the City of Toronto leading the renewal of the Corporate Access and Privacy program there. Guy has over 17 years of experience in information access and privacy as a policy advisor and as Manager of Access and Privacy at the former Management Board Secretariat. In those positions Guy was also responsible for the development and implementation of Ontario’s Lobbyists Registration Act. Prior to joining the Ontario government in 1987, Guy was the Assistant Director of the Saskatchewan Human Rights Commission. Guy has degrees in philosophy and law from the University of Saskatchewan.
3:05pm – 3:25pm
Networking and Refreshment Break
3:25pm – 4:15pm
Privacy in the Age of Peep: Why We Don’t Care About Our Privacy – and Need it More Than Ever
Hal Niedzviecki
Writer/Thinker/Internet bloggist
Increasingly, we are turning to our own lives and the lives of our friends, family and strangers around the world as our primary source of mediated entertainment. This represents an evolution of popular culture as we tune in to everything from Facebook to blogs to YouTube, not to mention endless incarnations of celebrity gossip and Reality TV, forsaking traditional media in the process.
Peep Culture teaches us that privacy is negotiable. We can trade it for rewards, attention, community and maybe even stardom. Increasingly, we care less about our privacy, and more about the rewards we can derive from exposing aspects of our personal lives to the wired world. At the same time, we’re learning that we need the ability to control what happens to our private details more than ever.
In this talk, noted cultural observer Hal Niedzviecki introduces Peep Culture and explores the paradox of privacy in a tell-all age.
Hal Niedzviecki is the author, most recently, of the critically acclaimed The Peep Diaries: How We’re Learning to Love Watching Ourselves and Our Neighbors.
Hal Niedzviecki
Writer/Thinker/Internet bloggist
Hal Niedzviecki is a writer, culture commentator and editor whose work challenges preconceptions and confronts readers with the offenses of everyday life. He is the author of six books including the novel The Program and the nonfiction book The Peep Diaries: How We’re Learning to Love Watching Ourselves and Our Neighbors. He is the current fiction editor and the founder of Broken Pencil, the magazine of zine culture and the independent arts (. He edited the magazine from 1995 to 2002. Hal’s writing has appeared in newspapers, periodicals and journals across the world including the New York Times Magazine, Playboy, the Utne Reader, the Globe and Mail, the National Post, Toronto Life, Walrus, Geist, and This Magazine. Niedzviecki is committed to exploring the human condition through provocative fiction and non-fiction that charts the media saturated terrain of ever shifting multiple identities at the heart of our fragmenting age.
4:30pm – 6:15pm
Networking Wine and Cheese Reception
Tuesday, October 27, 2009
8:00am – 8:45am
Continental Breakfast
8:45am – 9:00am
Welcome Back!
9:00am – 9:50am
Now or Never: The risks facing open government in an age of instant gratification
Jesse Hirsh
Internet Strategist, Researcher, and CBC Broadcaster
The principles of open government offer significant potential for peer to peer policy development that harnesses the wisdom of crowds. However visible leadership is required to tame the power of the mob and counter the culture of lawlessness. Are citizens discarding privacy in their quest to access social and economic rewards? Do emerging cultures of transparency further erode how we value and protect our privacy? As activists and advocates understand the power of surveillance are we moving to a sousveillance society where each individual is a potential little sister or little brother, engaged in their own on-demand monitoring. Will open government overwhelm us with data and simply reinforce existing inequalities based on literacy and class? We can deal with these challenges if we are open enough to acknowledge and address them appropriately.
Jesse Hirsh
Internet Strategist, Researcher, and CBC Broadcaster
Jesse Hirsh is an internet strategist, researcher, and broadcaster based in Toronto, Canada. He has a weekly column on CBC radio and regularly appears on CBC Newsworld explaining and analyzing the latest trends and developments in technology using language and examples that are meaningful and relevant to everyday life.
For two years, he was the host of an interfaith show on the Rogers and OMNI networks called 3D Dialogue. That show explored all the world’s religions and spiritual paths through interviews with practitioners, gurus, holy people, and cynics regarding their rituals, scriptures, and beliefs (or lack thereof).
He owns and operates the consulting firm Openflows Networks Ltd., which specializes in using open source intelligence to develop internet strategies. Primarily, this involves researching and deploying advanced platforms and interactive campaigns for companies and organizations, both large and small.
Educated at the McLuhan Program at the University of Toronto, his passion is educating people on the potential benefits and perils of technology.
9:50am – 10:10am
Networking and Refreshment Break
10:10am – 11:00am
Surveillance in Speculative Fiction
Roger Clarke
Principal
Xamax Consultancy
and Visiting Professor in Computer Science Australian National University
There are many variants of surveillance, many pitfalls, and potentially serious consequences for 'good people' as well as 'the baddies'. Fiction-writers of all kinds have taken advantage of the enormous scope that surveillance provides for story-lines and plot-twists. However, although writers of speculative fiction have been running ahead of reality for decades, they need to display more imagination - because reality keeps catching up with them. This paper uses speculative fiction genres and imaginations as a means of identifying several different interpretations of what the surveillance epidemic means for privacy and human freedom.
Roger Clarke
Principal
Xamax Consultancy
and Visiting Professor in Computer Science Australian National University
Roger Clarke brings to his assignments nearly four decades of experience in the information technology industry, in Sydney, London, Zürich and Canberra. He has been a Fellow of the Australian Computer Society since 1986.
He holds degrees in Information Systems from U.N.S.W., and a doctorate from the A.N.U. He maintains contact with developments in technology through his involvement in international conferences, supervision of doctoral candidates, and ongoing Visiting Professorships at U.N.S.W. (in cyberspace law and policy), and at the A.N.U. (in computer science).
Features of Roger's profile include:
- a combination of executive breadth with technical depth
- experience in a wide variety of industry sectors and public sector agencies
- experience not only in Australia but also overseas, particularly in the United Kingdom and in German-speaking countries
- demonstrated capacity to work with people at Board, senior executive, managerial, supervisory and operational levels
- long experience in application software development and maintenance, and the management of those activities
He has broad expertise in the following areas:
- exploitation of information technology to fulfil corporate strategy
- extraction of competitive advantage from information technology
- managing the impact of change brought about by information technology
- commercial and legal aspects of information technology
- the formation of policy relating to information technology
- economic, legal and social impacts and implications of information technology
11:05am – 12:05pm
Breakout Session 4
4A: Best Practices in Processing MFIPPA Requests in the Municipal Sector
Rob Candy
Manager Training and Compliance - Corporate Access and Privacy
Corporate Access and Privacy Office
City of Toronto
Debi Wilcox
City Clerk
City of Pickering
Request processing is a significant administrative task that requires an understanding of legislation, the municipality’s bylaws, time restrictions, records management, organizational structure and more. This session provides an overview of how to process requests with a focus on the municipal sector. Join a panel of key municipal staff as they provide practical advice for the busy administrator, discuss best practices, various types of requests, how to handle contentious, frivolous and vexatious requests, and more! Attend this valuable session to get answers to your questions about how to process MFIPPA requests!
Rob Candy
Manager Training and Compliance - Corporate Access and Privacy
Corporate Access and Privacy Office
City of Toronto
Rob Candy is the Manager Training and Compliance - Corporate Access and Privacy for the City of Toronto's Corporate Access and Privacy Office. His training workshops for the City of Toronto and other municipal and provincial governments and agencies are consistently rated very high.
Debi Wilcox
City Clerk
City of Pickering
4B: Technology for non-Tech People
Tracy Ann Kosa
PIA Specialist, PIA Centre of Excellence
Office of the Chief Information and Privacy Officer
Ministry of Government Services
This session is aimed at helping understand the basics of how technology works for the purpose of assessing privacy. While technology can be – arguably – value neutral it has a critical impact on privacy rights. This training is ideally suited to those beginning to learn about technology systems, and will provide the necessary background information to undertake privacy analysis. Topics to be covered include an overview of the different types of technology and technology services, and the information security techniques used to protect personal information, and processes to manage both.
Tracy Ann Kosa
PIA Specialist, PIA Centre of Excellence
Office of the Chief Information and Privacy Officer
Ministry of Government Services
Tracy Ann Kosa is currently a specialist with Government of Ontario Privacy Impact Assessment Centre of Excellence. She has 10 years of privacy experience across Canada working with federal and provincial legislation in the public and private sectors. As faculty at international programs on privacy, she continues to work on creating quantitative metrics for expressing privacy preferences in trust environments using utility models, as well as the creation of privacy design requirements for IT systems. Ms. Kosa holds two Masters, one with a focus on privacy ethics from York University, the other in political leadership from the University of Manitoba.
4C: Policy Basis Behind FIPPA and MFIPPA Exemptions (Williams Commission)
Don Fawcett
Senior Counsel
Ministry of Government Services
Join us for an in-depth, and plain language review of the policy reasons underlying the access to information exemptions of FIPPA and MFIPPA.
The review will also include a discussion of the 1980 Law Reform Commission Report on Freedom of Information (the Williams Commission Report) --the report that informed the legislative development of FIPPA and MFIPPA, together with a review of key portions of legislative committee debates during the development of FIPPA.
This session is designed to give participants a better understanding of why the exemptions of FIPPA and MFIPPA exist, and how the policy reasons underlying exemptions should be considered in access to information decision-making.
Don Fawcett
Senior Counsel
Ministry of Government Services
Don Fawcett is a graduate of Queen's University Law School and is currently Senior Counsel in the Legal Services Branch of the Ministry of Government Services. Don provides legal support to the Office of the Corporate Chief Information and Privacy Officer, MGS, and provides corporate legal advice on access to information and privacy law matters to Ontario government ministries and agencies.
4D: Careers/Professional Certification
Chairperson: Howard Jones
Coordinator, FOI and Privacy
Cabinet Office
Caroline Crnekovic
Senior Policy Adviser
Office of the Corporate Chief Information and Privacy Officer
Ministry of Government Services
Roxana Baciu
FOI and Records Management Coordinator
Ministry of Energy and Infrastructure
Eric Lawton
Manager Information, Privacy and Technology Corporate Access and Privacy Office
City of Toronto
You're working in the access and privacy field and considering your next move. Are you searching for ideas and opportunities that could take your career to the next level? This interactive session will describe some of the roles available to people with access and privacy experience, discuss the skills you've acquired along the way, and suggest some areas to develop in order to break into related fields and professions. We will provide you with our first-hand experience and career paths, and challenge you to share your own experiences with others in the session.
Chairperson: Howard Jones
Coordinator, FOI and Privacy
Cabinet Office
Caroline Crnekovic
Senior Policy Adviser
Office of the Corporate Chief Information and Privacy Officer
Ministry of Government Services
Caroline Crnekovic is a Senior Policy Advisor in the Access and Privacy Office, Ministry of Government and Consumer Services. Caroline has worked extensively with projects on developing and reviewing Privacy Impact Assessments. Caroline is a former Chair of the OPS Privacy Working Group and the Information Architecture Domain Working Group. Caroline has held positions human resources, IT procurement, and Treasury Board Office. Caroline holds a Master of Industrial Relations degree from Queen's University.
Roxana Baciu
FOI and Records Management Coordinator
Ministry of Energy and Infrastructure
Roxana Baciu is the Freedom of Information Coordinator at the Ministry of Energy and Infrastructure. Prior to that she worked as an Issues Coordinator with the Ministry of Labour.
Previously she was the FOI Program Advisor at Cabinet Office's FOI and Issues Unit. Roxana began her government career as a Senior Media Analyst with Cabinet Office.
Eric Lawton
Manager Information, Privacy and Technology Corporate Access and Privacy Office
City of Toronto
Eric Lawton currently serves voluntarily as the Director of Professional Certification for the non-profit Canadian Professional Association of Professional Access and Privacy Administrators (CAPAPA). His primary focus in CAPAPA is to establish certification and networking resources for access and privacy professionals across Canada. He is also leading CAPAPA's efforts to develop accreditation standards for educational institutions training programs and liaises with other professional bodies in related professions.
Eric's full-time job is Manager of Corporate Access and Privacy, City Clerk's Office, City of Toronto. Eric's unit conducts Privacy Impact Assessments and provides support and advice to City staff. He also does training on Privacy Impact Assessments and develops policy. Eric joined the City in September 2006.
For 16 years prior to that, Eric worked in the Government of Ontario in various roles, most recently as a senior policy advisor in the Ministry of Government Services's Corporate Access and Privacy Office.
4E: Legislative Labyrinth
Rafael Eskenazi
Director, Access and Privacy Office
University of Toronto
Access and privacy legislation, such as M/FIPPA are implemented and institutional operations in a broader legislative and regulatory context, interacting with many factors, including other legislation and processes, subpoenas, orders, consents, and emergency disclosure obligations.
This session will sort through some of these complexities, including attendees questions on the topic.
Rafael Eskenazi
Director, Access and Privacy Office
University of Toronto
12:05pm – 1:00pm
Lunch
1:00pm – 2:00pm
Breakout Session 5
5B: Building a Privacy Culture
Rob Candy
Manager Training and Compliance - Corporate Access and Privacy
Corporate Access and Privacy Office
City of Toronto
John Searle
Senior Policy Analyst - Corporate Access and Privacy
City of Toronto
This session will focus on practical methods and examples of introducing privacy into a municipal institution, ie. privacy training, privacy breach and complaint investigation, compliance reviews and audits, and privacy consultations.
Rob Candy
Manager Training and Compliance - Corporate Access and Privacy
Corporate Access and Privacy Office
City of Toronto
Rob Candy is the Manager Training and Compliance - Corporate Access and Privacy for the City of Toronto's Corporate Access and Privacy Office. His training workshops for the City of Toronto and other municipal and provincial governments and agencies are consistently rated very high.
John Searle
Senior Policy Analyst - Corporate Access and Privacy
City of Toronto
5C: Building Public Trust: Transparency and Integrity at the Municipal Level
Suzanne Craig
Integrity Commissioner
City of Vaughan
Building public trust requires effective stewardship, ensuring that government organizations carry out their work according to high standards of accountability, transparency, integrity, prudence and fairness. Current privacy and FOI policies are a perfect example of this relationship.
At any level of government, the public's perception of the ethics behind government decision-making is critical to the reputation of the government organization and to the level of public trust and engagement. This perception shapes the public's opinion about government officials' personal integrity, honesty and ultimately, the government's performance. It can overshadow all other values of a government organization, including competence, experience and expertise.
Across Ontario, there has been a growing trend to act on the powers conferred by the /Municipal Act/, 2001 and create accountability officers to provide oversight and ensure high standards of integrity, accountability and prudence in government decision-making. Come here how one Ontario municipality is tackling this thorny issue on the eve of another municipal election.
Suzanne Craig
Integrity Commissioner
City of Vaughan
5D: Access and Privacy Maturity Framework
Eric Lawton
Manager Information, Privacy and Technology Corporate Access and Privacy Office
City of Toronto
ACCESS AND PRIVACY MATURITY FRAMEWORK A work planning tool for Access to information and Privacy Managers
Access and privacy managers constantly get this question: "how can we improve our compliance?" There are lots of things an organization can do, but which ones should be done first, second, etc.? C-level executives also want to know, "Is there an end in sight?" and "When will the resources I've given you finally be 'enough'?"
Capability Maturity Models (CMMs) have been used in many industries to analyze strengths and weaknesses in business processes. This workshop will introduce you to the new concept of an Access and Privacy Capability Maturity Model (AP-CMM) and how to apply the model in an Access and Privacy setting to achieve the maximum impact. You can also use your self-assessed CMM rating to demonstrate to senior management why you need more resources now and why you'll need more in the future!
Join Eric Lawton, Manager, Corporate Access and Privacy with the City of Toronto as he:
-outlines the 5 standard levels of a CMM
-describes the reasons for CMM mapping, including assessing organizational practices, goals and process improvements.
-outlines a preliminary Access and Privacy CMM
-describes the process characteristics in each level of maturity in the initial AP-CMM, and finally
-leads you through the example of applying the AP-CMM in the City of Toronto
Eric Lawton
Manager Information, Privacy and Technology Corporate Access and Privacy Office
City of Toronto
Eric Lawton currently serves voluntarily as the Director of Professional Certification for the non-profit Canadian Professional Association of Professional Access and Privacy Administrators (CAPAPA). His primary focus in CAPAPA is to establish certification and networking resources for access and privacy professionals across Canada. He is also leading CAPAPA's efforts to develop accreditation standards for educational institutions training programs and liaises with other professional bodies in related professions.
Eric's full-time job is Manager of Corporate Access and Privacy, City Clerk's Office, City of Toronto. Eric's unit conducts Privacy Impact Assessments and provides support and advice to City staff. He also does training on Privacy Impact Assessments and develops policy. Eric joined the City in September 2006.
For 16 years prior to that, Eric worked in the Government of Ontario in various roles, most recently as a senior policy advisor in the Ministry of Government Services's Corporate Access and Privacy Office.
5E: Meaningful Data, Meaningful Access
Jim Lewis
Director
Information Management and Access Branch
Ministry of Environment
Donna Currie
FOI Coordinator, Special Projects Adviser
Ministry of the Environment
Michael Maddock
Project Lead
Modernizing Property Information
Ministry of the Environment
Marusia Borodacz
Team Leader, Information Resource Centre
Ministry of the Environment
The Ministry of the Environment’s Information Management and Access Branch is reinventing its access strategy to meet public information needs and improve scientific and enforcement staff’s access to Ministry information. Hear how this multi-stage, multi-faceted approach is paying off for the Ministry, FOI requesters and stakeholder groups.
Key Points:
- Improving business processes and technology to facilitate FOI request management
- Using digitization to unlock public access to MOE’s historic scientific and technical data
- Developing and employing best practices to deliver information about the environmental history of properties
Jim Lewis
Director
Information Management and Access Branch
Ministry of Environment
Donna Currie
FOI Coordinator, Special Projects Adviser
Ministry of the Environment
Michael Maddock
Project Lead
Modernizing Property Information
Ministry of the Environment
Michael Maddock joined the Information Management and Access Branch (IMAB) at the Ministry of Environment (MOE) in February 2008 as the Project Lead for Modernizing Property Information.
Michael began his Public Service career in 1995 with the federal government as an environmental officer with Public Works and Government Services Canada and subsequently with Environment Canada. Michael joined the MOE in 2001 as a Learning and Development Consultant in the Human Resources Branch. Since then Michael has worked in successively demanding roles as a Team Lead, HR manager, and Deputy Minister's Executive Assistant prior to joining IMAB.
Michael has an Honours Degree in Environmental Studies from the University of Waterloo.
Marusia Borodacz
Team Leader, Information Resource Centre
Ministry of the Environment
2:05pm – 2:30pm
Networking and Refreshment Break
2:30pm – 3:15am
The Privacy Perception of University Students
Dr. Avner Levin
Director
Privacy and Cyber Crime Institute
Ryerson University
Research conducted by the Privacy Institute at Ryerson University suggests that young users of social media have a unique sense of privacy when they socialize online. This notion, called "online social network privacy", appears somewhat counter-intuitive to professors, university administrators - and generally anyone over the age of 35. This presentation will discuss the findings of the Privacy Institute's research project that appear to support this notion, what the idea of "online social network privacy" actually means, and how university staff should take this notion of privacy into account as they evaluate, react and protect the conduct of students online.
Dr. Avner Levin
Director
Privacy and Cyber Crime Institute
Ryerson University
Dr. Avner Levin (S.J.D., Toronto), is the Director of the Privacy and Cyber Crime Institute and the Chair of the Law & Business Department at the Ted Rogers School of Management. Dr. Levin's research interests include the legal regulation and protection of privacy and personal information in various sectors and across jurisdictions, both within Canada and internationally. His research on workplace privacy and online social network privacy has been funded by the Privacy Commissioner of Canada's Contributions Program. Dr. Levin has presented his work on numerous occasions to private and public sector organizations and is a frequent media commentator on privacy related issues.
3:15pm – 3:30pm
Closing Remarks
Wednesday, October 28, 2009
9:00am – 4:00pm
W1: Request Processing Bootcamp
Dave Douglas
Policy Adviser
Office of the Chief Information & Privacy Officer of Ontario
Ministry of Government Services
Mary Macdonald
Senior Policy Adviser
Office of the Chief Information & Privacy Officer of Ontario
Ministry of Government Services
Have you recently been given the job of responding to freedom of information requests? Or do you feel you need a "refresher" on processing tips and techniques? If so, this practical day will give you the confidence, know-how and tools to manage a request from the day you receive the request until the day you issue your decision.
During the session best practices designed to help you be effective in delivering a customer service oriented access to information program will be reviewed. Legal requirements associated with processing requests will also be discussed along with relevant Information and Privacy Commissioner case law.
There will also be plenty of time for interaction and "hands-on" learning.
The following are topics which will be covered:
-FOI Request Receipt and Clarification
-Identity of Requesters
-Forwarding/Transferring Requests
-Frivolous and Vexatious Requests
-Record Search
-Continuing Access
-Time Extensions
-Index of Records
-Third Party Notice
-Fee Estimates/Interim Decisions/Fee waivers
-Preparing Effective Decision Letters
Dave Douglas
Policy Adviser
Office of the Chief Information & Privacy Officer of Ontario
Ministry of Government Services
Mary Macdonald
Senior Policy Adviser
Office of the Chief Information & Privacy Officer of Ontario
Ministry of Government Services
9:00am – 12:00pm
W2: A Primer on Privacy Impact Assessments
Tracy Ann Kosa
PIA Specialist, PIA Centre of Excellence
Office of the Chief Information and Privacy Officer
Ministry of Government Services
Governments are stewards of individual privacy.
One way they maintain trust is by enabling the privacy of personal information in program and service delivery. Public sector organizations need an effective method to assess potential impacts to privacy for any existing or proposed initiative involving personal information. Privacy Impact Assessments (PIA) are the best way to provide efficient compliant services and incorporate information technology into business processes.
Ontario has mandated the PIA process through policy, requiring ministries to implement new programs or information systems while balancing the need to protect personal information.
This workshop will give participants an introduction to PIAs and will be suitable to those who have never conducted a PIA before, or who want a refresher.
Topics covered:
- Understanding the PIA process and methodology
- Phases of PIAs:
- Scoping
- Information Gathering
- Report Writing
- Review / Approvals Process
- Using a PIA for risk analysis and mitigation strategies
- PIA challenges
Tracy Ann Kosa
PIA Specialist, PIA Centre of Excellence
Office of the Chief Information and Privacy Officer
Ministry of Government Services
Tracy Ann Kosa is currently a specialist with Government of Ontario Privacy Impact Assessment Centre of Excellence. She has 10 years of privacy experience across Canada working with federal and provincial legislation in the public and private sectors. As faculty at international programs on privacy, she continues to work on creating quantitative metrics for expressing privacy preferences in trust environments using utility models, as well as the creation of privacy design requirements for IT systems. Ms. Kosa holds two Masters, one with a focus on privacy ethics from York University, the other in political leadership from the University of Manitoba.
1:00pm – 4:00pm
W3: Advanced Privacy Impact Assessments
Tracy Ann Kosa
PIA Specialist, PIA Centre of Excellence
Office of the Chief Information and Privacy Officer
Ministry of Government Services
For those who are comfortable with the PIA process, this workshop will walk through some of the more challenging issues that come up before, during and after the assessment process.
Participants will work in small groups and participate in discussions to develop solutions to the following issues:
- Before the PIA Starts
- The critical exercise of scoping
- During the PIA
- Finding statutory authority
- Assessing privacy risks
- The Aftermath
- Tracking mitigation strategies
- Auditing PIAs
Tracy Ann Kosa
PIA Specialist, PIA Centre of Excellence
Office of the Chief Information and Privacy Officer
Ministry of Government Services
Tracy Ann Kosa is currently a specialist with Government of Ontario Privacy Impact Assessment Centre of Excellence. She has 10 years of privacy experience across Canada working with federal and provincial legislation in the public and private sectors. As faculty at international programs on privacy, she continues to work on creating quantitative metrics for expressing privacy preferences in trust environments using utility models, as well as the creation of privacy design requirements for IT systems. Ms. Kosa holds two Masters, one with a focus on privacy ethics from York University, the other in political leadership from the University of Manitoba.

