Agenda

Deloitte and the University of Alberta’s access to information and protection of privacy Workshop will aid public bodies with information rights compliance and help ensure you have the necessary tools in your toolbox for full compliance. Workshop content is designed to provide participants with essential advice that will enable government and private sector organizations to establish a work environment that promotes a proactive culture of access to information and privacy protection. The Workshop will:

• Share professional and practical tips that will allow organizations to engage in “best practices,”
• Establish effective and efficient administrative processes, and
• Ensure that staff receives timely and appropriate support and training resulting in: positive interpersonal skills for engaging requestors; suggestions for developing legislative expertise; application of exceptions; achieving excellence in severing and engaging in quality control measures which enhances program delivery improvements.

Audience skill level: intermediate to advanced access and privacy professionals 

Wayne MacDonald
Government Studies Manager
Faculty of Extension, University of Alberta

Wayne MacDonald is Manager of Government Studies, at the Faculty of Extension, University of Alberta. In 2000 Wayne established the award winning Information Access and Protection of Privacy (IAPP) Certificate Program. The IAPP program is the first adult online post-secondary program providing educational support for information rights professionals in Canada and around the world. The program is nationally and internationally recognized as the educational leader delivering access to information, privacy protection, information security and records management educational support for information and privacy professionals. Graduates of the IAPP program have gone onto accept lucrative and successful positions within government, the private sector and consulting.
Wayne MacDonald is a recipient of the “2010 Builder’s Award” presented by the Office of the Information and Privacy Commissioner of Alberta. The award recognizes the contribution that Wayne has made in building capacity within the field of access to information and protection of privacy administration nationally and internationally. Wayne is currently a serving member of the Privacy Commissioner of Canada’s Advisory Committee. He also has served as an External Advisor for the 2002 Access to Information (ATI) Task Force which was charged with reviewing and making recommendations for improvements and changes to the federal ATI Act. In 2007-08 Wayne was seconded by the Office of the Information Commissioner of Canada as National Director responsible for developing the CAPA-CAPAPA Professional Standards and Competencies framework for access and privacy administrators in Canada. Wayne is currently developing Canada’s first graduate program for information rights administrators and has recently successfully piloted delivery of the IAPP program to senior civil servants in South Africa. In June 2010 Wayne was promoted as manager of the Government Studies, Faculty of Extension program. Wayne’s new role will allow him the opportunity to expand the IAPP program and other Government Studies programs on a national and international level. With over 30 years of combined management experience in government and education Wayne comes well equipped with a wealth of practical knowledge and experience to share.
Wayne lives in Edmonton, Alberta and is married to Elizabeth White-MacDonald, Professor, Grant MacEwan University. Wayne and Elizabeth have one son, Ian Alexander, who is an International Baccalaureate student at Harry Ainlay High School.

Brenda Holmes
Access Coordinator
Alberta Employment and Immigration

With over 20 year’s experience, Brenda Holmes is a seasoned professional in access and privacy. As a FOIP Coordinator with Alberta Employment and Immigration’s Information and Privacy Office (IPO), she has completed over 1000 requests, including personal and general access requests, requests for correction, privacy breach investigations and federal and provincial consults. Brenda has extensive experience interpreting and applying the legislation to the records of Public Bodies served and has received accolades for her dynamic training presentations.
The IPO currently receives and responds to official FOIP requests on behalf of Children and Youth Services – regional Child and Family Services Authorities, Child and Youth Advocate’s Office and Children’s Services Appeal Panels; Alberta Employment and Immigration – Appeal Panels, Corporate Human Resources, the Appeals Commission for Alberta Workers’ Compensation and Advanced Education and Technology. This office manages approximately half of all access requests received by the Alberta government.
Brenda’s educational background is primarily in health administration. She joined the IPO in 2003 after 15 years with the Caritas Health group and 2 years with the Alberta Mental Health Board. Brenda has consulted for the Alberta Medical Association Physician Office System Program (POSP), writing Privacy Impact Assessments and policy development. She has had an article accepted for publication in the “Journal of Workplace Learning.”

Tara Perverseff
Portfolio Officer
Office of the Information and Privacy Commissioner of Alberta

Tara Perverseff is a Portfolio Officer with the Office of the Information and Privacy Commissioner of Alberta, and formerly a Senior Consultant with the Calgary office of Deloitte & Touché. Tara’s experience in records management includes data classification reviews, records management program reviews, vital records identification, the creation of a records management program framework, and policy development. Tara’s work in the area of privacy is cross-jurisdictional including experience with Provincial and Federal legislation, standards, and guidelines across Canada. Her work on privacy includes the development of policies, procedures, and guidelines, privacy program design review, and extensive work with privacy gap and impact assessments and the identification and remediation of risk. Tara has a Master of Arts Degree in Sociology from the University of Calgary specializing in Criminology and Media.

Security practitioners often struggle to raise the profile of their security program and make it relevant to their organization and senior leadership. The key to achieving executive support is to directly link the security program to the organization's goals and business drivers, demonstrating how the program can help to mitigate risk and enable opportunities. This presentation will outline a proven approach, successfully used across a number of organizations and industries, to establish a business-driven enterprise security program and architecture.

Audience skill level: basic 

Kevin Henry
Director, Education Services and Senior Consultant
Seccuris Inc.

Kevin Henry is recognized as one of the worldwide Leaders in the field of Information Assurance. A Senior Consultant with many years experience Information Security and Audit, Risk Management and Business Continuity, Kevin also has a passion for teaching, being a dynamic and enthusiastic speaker - drawing the audience into the presentation with a wealth of real-life experience, and practical, relevant information. Kevin is employed by Seccuris Inc., a well-known Information Assurance Integrator with a strong reputation for on-time delivery for clients nationwide.
Kevin is the co-chair of the CBK committee for the CISSP and several other certifications, as well as an author with published articles in over a dozen books and magazines, Kevin has been responsible for educational systems, products and instructors for major clients such as BCI, IEEE, SCIPP International, and (ISC)2. Kevin is based in Ottawa, Canada.

This workshop is intended to provide an overview of severing basics, practice tips and interactive severing exercises, based on case file examples from health, mental health and FOIP offices.

Key Points:

• The presentation and interactive exercises will assist participants in understanding and formulating best practices and guidelines to balance an individual’s right of access to personal information versus the right to privacy of other individuals named in records.
• As organizations are migrating to electronic record keeping, the presentation will incorporate the use of redaction software.
• Participants will better understand how to balance the applicant’s right of access to the records of a Public Body (PB) against the organization’s legitimate right or need to protect information excepted from disclosure.

 Audience skill level: basic to intermediate  

Brenda Holmes
Access Coordinator
Alberta Employment and Immigration

With over 20 year’s experience, Brenda Holmes is a seasoned professional in access and privacy. As a FOIP Coordinator with Alberta Employment and Immigration’s Information and Privacy Office (IPO), she has completed over 1000 requests, including personal and general access requests, requests for correction, privacy breach investigations and federal and provincial consults. Brenda has extensive experience interpreting and applying the legislation to the records of Public Bodies served and has received accolades for her dynamic training presentations.
The IPO currently receives and responds to official FOIP requests on behalf of Children and Youth Services – regional Child and Family Services Authorities, Child and Youth Advocate’s Office and Children’s Services Appeal Panels; Alberta Employment and Immigration – Appeal Panels, Corporate Human Resources, the Appeals Commission for Alberta Workers’ Compensation and Advanced Education and Technology. This office manages approximately half of all access requests received by the Alberta government.
Brenda’s educational background is primarily in health administration. She joined the IPO in 2003 after 15 years with the Caritas Health group and 2 years with the Alberta Mental Health Board. Brenda has consulted for the Alberta Medical Association Physician Office System Program (POSP), writing Privacy Impact Assessments and policy development. She has had an article accepted for publication in the “Journal of Workplace Learning.”

The material in this presentation is meant to bring issues related to the implementation of an enterprise solution to the forefront to enable managers and designers to anticipate issues and pre-plan their implementations. Put simply the presentation provides a source of information to address the question - “What are the issues that I need to consider when implementing an EIM (Enterprise Information Management) solution?”

The presentation will include lessons learned and positive advice from dozens of implementations over the last 15 years.

Audience skill level: all 3 levels (basic, intermediate, advanced) will take away positive advice based on their current knowledge levels on the topic

Rick Stirling
President
Western Information Management Inc.

Rick Stirling is the President and CEO of Western Information Management Inc. and has over 40 years IT experience. Rick is well rounded in software, infrastructure and system integration with a specialty over the last decade in the implementation of dozens of enterprise records and content management solutions across Canada and the US. He has led many consulting engagements for needs assessment, gap analysis, policy and business case development. He has served on numerous committees and held many executive positions in both the Canadian Region and International levels of ARMA -The Association of Information Management Professionals including the international board of directors and President of the Canadian Region and is a frequent speaker in both the United States and Canada. Rick was also one of the founding members of the ARMA GARP (Generally Accepted Recordkeeping Principals) Task Force.

Honourable
Laura Ross
Minister
Saskatchewan Ministry of Government Services
MLA for Regina Qu'Appelle Valley

Laura Ross was born and raised on the family farm near Yorkton and attended the University of Regina where she obtained a Bachelor of Arts degree in Geography and Sociology. For more than twenty years, Laura has been a licensed realtor in Regina, specializing in residential properties. Prior to her success as a realtor, she operated her own catering company, and farmed with her husband Terry.

A tireless community volunteer, Laura served as a strong voice for seniors through many years as Chair of the Board of Directors for Regina Pioneer Village, the largest long-term care facility in the province. She is also an advocate for women’s rights, serving several terms as an executive on the Saskatchewan and Regina Councils of Women and the Canadian Federation of University Women, and as a role model and mentor to young women interested in professional and political lives.

Laura’s renowned community leadership is frequently called on to raise funds for charitable organizations, including Transition House, the Regina Therapeutic Riding Association, Salvation Army, and the Terry Fox Run.

She was elected as an MLA for Regina Qu’Appelle Valley in 2007.In 2007 Premier Wall appointed her as Legislative Secretary to the Minister of Health, responsible for retention and recruitment of nurses. Laura played a pivotal role in the successful recruitment of hundreds of highly skilled nurses from the Philippines. In July 2010, Premier Wall appointed Laura as the Minister of Government Services.

Laura currently resides in Regina with her husband Terry. They have one son.

Dr. Mark Vale
Chief Information and Privacy Officer
Office of the Chief Information and Privacy Officer of Ontario
Ontario Ministry of Government Services

Dr. Mark Vale was appointed the Ontario government's first Chief Information and Privacy Officer in July 2006. He leads the development and implementation of information management strategies that support sound business practices, build capacity across the government, and make access to information and privacy fundamental business considerations. Before joining the Ontario Public Service, Mark was President of Information Management & Economics, Inc. working with governments and companies across Canada to help them become more efficient by effectively managing information and knowledge resources. Mark is an information economist and has more than 25 years experience in information policy, information strategy and planning, and implementing corporate information and knowledge management programs. He is one of North America's leaders in shaping the information and knowledge management disciplines and has taught at the University of Alberta, York University, Stanford University and California State University. Born in Toronto, Mark received his MA in economics from the University of California, Berkeley and his PhD from Stanford University.

Join Saskatchewan's Information and Privacy Commissioner, Gary Dickson as he welcomes his counterparts from Alberta (Frank Work, Commissioner) and Manitoba (Irene Hamilton, Ombudsman) in an interactive discussion that will highlight and address the following statements/questions:

• The differences/similarities in the way these three offices operate as access and privacy oversight officers. Collectively they represent two different models: Ombudsman or administrative tribunal with order making power. Does it make any difference at all?
• The foundation of the access and privacy regimes in all three provinces is our legislation. To what extent is our legislation suitable to address the challenges posed by "the speed of technological change". How well equipped are our public bodies to address that challenge?
• What is the future for proactive disclosure? Comment on the open government resolution endorsed by Canada's oversight agencies at the Annual Conference at the end of August.
• How can public bodies’ best use the resources available through the oversight agencies?
   

Frank Work, Q.C.
Information and Privacy Commissioner for Alberta
Office of the Information and Privacy Commissioner for Alberta

Gary Dickson
Information and Privacy Commissioner
Office of the Saskatchewan Information and Privacy Commissioner

Gary Dickson, Q.C. was appointed Saskatchewan’s first full-time Information and Privacy Commissioner effective November 1, 2003. He was re-appointed by the Legislative Assembly in March 2009 for a further five year term.

Mr. Dickson was elected as the M.L.A. for Calgary Buffalo in a 1992 by-election. He was re-elected in 1993 and 1997. In the Legislature he served as the critic for Freedom of Information and the Protection of Privacy, Health, Human Rights, Consumer Affairs and Justice. He was House Leader for the Official Opposition. During his legislative period, he was directly involved in the development, enactment and implementation of the Alberta Freedom of Information and Protection of Privacy Act and the Health Information Act. He participated as the senior Opposition member of Premier Klein’s Access to Information Panel that conducted 3 months of public hearings in 1993 and authored the report that led to Alberta’s current FOIP Act. He was a member of the Select Special Committee of the Alberta Assembly that undertook a comprehensive review of the FOIP Act in 1998. He was a member of the Health Minister’s Health Information Task Force that undertook some 8 months of consultation and study of health information issues. From 1992 to 2001, he was the member of the Legislative Offices Standing Committee that oversaw the office of the Information and Privacy Commissioner.

He was founding Co-Chair of the Canadian Bar Association Freedom of Information and Privacy Law Section (Southern Alberta) and an Executive Member of the CBA National Privacy Law Section. He was also chair of the Calgary Chamber of Commerce Health Information Committee. In 2002 and 2003 Mr. Dickson co-chaired a Private Sector Privacy Law Working Group of Alberta lawyers advising the government of Alberta in the creation of the Personal Information Protection Act.

He was a contributor to the Privacy Handbook for Canadians: Your Right and Remedies published in 2002. He also was author of the Advanced Access to Information and Privacy Module for the Local Government course offered by the University of Alberta and Dalhousie University.

Mr. Dickson has spoken and written extensively on access, privacy and health information issues including stints as a columnist for the Calgary Herald and the Human Rights columnist for LawNow.

Mr. Dickson was a sessional lecturer on human rights for the University of Calgary and received both the Alberta Human Rights Award from the Human Rights and Citizenship Commission and the Civil Liberties Award from the Alberta Civil Liberties Association.

He is a member of the Law Societies of Saskatchewan and Alberta.

Irene Hamilton
Ombudsman
Manitoba Ombudsman Office

Irene Hamilton was appointed Ombudsman for Manitoba March 31, 2005. She has a Bachelor of Arts, University of Winnipeg and a Bachelor of Law, University of Manitoba. She was called to the Manitoba Bar in 1980. Prior to becoming Ombudsman, Irene was the Assistant Deputy Minister of Justice, Courts Division from January 2000. From 1991 to 2000 she was the Public Trustee of Manitoba. She had previously been the Vice President, Licensing and Corporate Counsel and Secretary for the Liquor Control Commission. Irene has been actively involved in the voluntary sector as well serving on the Board and as the Chair of the United Way of Winnipeg, Manitoba Theatre for Young People and the Deer Lodge Hospital Ethics Committee. She is currently a Bencher of the Law Society of Manitoba.

The potential of social networking for organizations and professionals as tools for learning and reputation management is not always evident to many. Much like fire, social media can be used for powerful things, both good and bad. This session will explore the use of social media for organizations and professionals. From both a personal perspective as well as from an organization, learn some simple concepts and beliefs around using these tools as well as some practical guidelines and tips. Come with both an open mind and your skepticism as we explore how social media can be used to develop and enhance your reputation and your learning potential as an individual and organization.

We will specifically consider:

• Changing nature of identity
• Tools and websites that facilitate community
• Challenges and pitfalls

 Audience skill level: general 

Dean Shareski
Digital Learning Consultant
Prairie South School Division

Dean Shareski is a Digital Learning Consultant with the Prairie South School Division in Moose Jaw, SK, who specializes in the use of technology in the classroom. He is also a sessional lecturer for the University of Regina. For the past several years, Dean has been immersed in understanding what the Read/Write Web is all about and how the new shape of knowledge changes how we all learn. He uses social media as learning and sharing places. He was awarded the 2010 International Society for Technology in Education Award for Outstanding Leadership in Technology and Education.

Intended outcomes:

• Explanation of the scope and concept of information governance and its relationship to privacy management.
• Some key directions on developing and implementing information governance in your organization.

 Points to cover:

• Working definition: the specification of decision rights and an accountability framework to encourage desirable behavior in the valuation, creation, storage, use, archiving and deletion of information (Gartner Group, 2010).
• Origin of the Information Governance concept:

1. Corporate Governance
2. IT
3. E-health
4. Integration of information management problems and solutions
5. Information Governance as a product

• Convergence of privacy management and information governance
• Methods and strategies for implementing an information governance approach

1. Value and alignment v, compliance
2. Information function v. information tools
3. Tools, policies, and behavior

Rick Klumpenhouwer
Manager, Consulting Services
Cenera

Rick Klumpenhouer, Manager Consulting Services, Cenera. Rick has over 20 years experience in various aspects of information management, archives, and privacy. He holds a Masters degree in history from the University of Western Ontario and a Masters in Archival Studies from the University of British Columbia. He was Executive Director of the Legal Archives Society of Alberta from its founding in 1990 to 1997. He was Coordinator, Records Management later Information Management and Privacy at the Calgary Health Region between 1997 and 2002, when he joined Denham and Associates as a privacy consultant. He has been with Cenera since September 2003.

Recent events in Canada and abroad have shone a spotlight on the data handling practices at Facebook, Google, and governments across Canada and abroad. The attention has heightened the awareness among Canadians about the value and importance of exercising their right to access information held by governments and corporations alike.

Is your organization ready to meet an increased number of Access to Information requests in an effective way? Will the programs, processes and systems in your organization help or hinder as you wade through the Access to Information requests? Do you wish for a more efficient way to be able to respond to access requests?

Attendees will come away with a solid understanding of:

• How to build the business case for conducting Access Impact Assessments as a routine part of any new program, process, or system implementation.
• The essential elements of conducting successful Access Impact Assessments
• How AIAs can be used to increase data protection, reduce risk, and improve productivity
• The connections between data management strategies and AIAs
• The value of Access Impact Assessments in minimizing cyber-risks and cyber-liabilities

Sharon Polsky
President
AMINA Consulting Corp.
& National Chair, CAPAPA

Sharon Polsky is President of AMINA Consulting Corp. and has specialized in data protection and information risk management for more than 25 years. Since 2007, she has served as the elected
National Chair of the Canadian Association of Professional Access and Privacy Administrators
(CAPAPA), and as the Editor in Chief of The Winston Report, the quarterly journal devoted to the access and privacy profession in Canada. She is an Executive Member of the Canadian Bar Association - Alberta Privacy and Access Law Section, and one of few civilian members of the Society for the Policing of Cyberspace.

Ms. Polsky has spoken before the Canadian Senate Standing Committee on Legal and Constitutional Affairs about privacy implications of proposed federal legislation; was invited to submit recommendations to the Information Commissioner of Canada addressing the modernization of federal access laws; and has been a frequent conference presenter.
Ms. Polsky has been an adjunct instructor at SAIT Polytechnic and the University of Calgary, and led data protection workshops for Insurance Institutes across Canada since 2001. She was a key contributor to the Canadian Professional Insurance Broker national certification program. She was also instrumental in developing the Canadian National Competency Standards and the Professional Certification Program for Information Access and Privacy Professionals in Canada.

You have invested hundreds of hours and a pile of money to keep your data private with technology and policies.  Good for you, but are you sure that you are not part of the problem?  You are probably leaking private information without even knowing it.

In this session, professional hacker Brad "RenderMan" Haines will show how easy it is to steal personal information through devices we all use every day.

Brad "RenderMan" Haines
Hacker/Security Consultant
RenderLab.net

Brad 'RenderMan' Haines is one of the more visible and vocal members of the wardriving community, appearing in various media outlets and speaking at conferences several times a year. Render is usually nearby on any wardriving and wireless security news, often causing it himself. His skills have been learned in the trenches working for various IT companies as well as his involvement through the years with the hacking community. He is also the author of several security books, most recently '7 Deadliest wireless technologies attacks' from Syngress.

A firm believer in the hacker ethos and promoting responsible hacking and sharing of ideas, he wrote the 'Stumbler ethic' for beginning wardrivers and greatly enjoys speaking at corporate conferences to dissuade the negative image of hackers and wardrivers and to educate the public.

The use of social media has become so pervasive and the types of service so widespread that simply blocking it from the workplace is no longer an option. In addition organizations are finding that there are advantages in embracing the technologies and having a presence in social media. As these technologies become a fact of life what are the risks to the organization is terms of privacy and security and how do we manage them? This session will

• examine the opportunities and privacy and security risks to the organization
• explore the options, strategies, that can be used to mitigate risks, and
• consider technologies that can be usefully employed.

Audience skill level: intermediate

Tara Perverseff
Portfolio Officer
Office of the Information and Privacy Commissioner of Alberta

Tara Perverseff is a Portfolio Officer with the Office of the Information and Privacy Commissioner of Alberta, and formerly a Senior Consultant with the Calgary office of Deloitte & Touché. Tara’s experience in records management includes data classification reviews, records management program reviews, vital records identification, the creation of a records management program framework, and policy development. Tara’s work in the area of privacy is cross-jurisdictional including experience with Provincial and Federal legislation, standards, and guidelines across Canada. Her work on privacy includes the development of policies, procedures, and guidelines, privacy program design review, and extensive work with privacy gap and impact assessments and the identification and remediation of risk. Tara has a Master of Arts Degree in Sociology from the University of Calgary specializing in Criminology and Media.

Organizations large and small alike ask the same question “How do I set up a proper records management program?”

This presentation will speak to the process and procedures required to get to a corporately acceptable records management program in place and offer practical advice associated with the overall job as well as the standards that should be used.

Audience skill level – all 3 levels (basic, intermediate, advanced) will take away positive advice based on their current knowledge levels on the topic

Rick Stirling
President
Western Information Management Inc.

Rick Stirling is the President and CEO of Western Information Management Inc. and has over 40 years IT experience. Rick is well rounded in software, infrastructure and system integration with a specialty over the last decade in the implementation of dozens of enterprise records and content management solutions across Canada and the US. He has led many consulting engagements for needs assessment, gap analysis, policy and business case development. He has served on numerous committees and held many executive positions in both the Canadian Region and International levels of ARMA -The Association of Information Management Professionals including the international board of directors and President of the Canadian Region and is a frequent speaker in both the United States and Canada. Rick was also one of the founding members of the ARMA GARP (Generally Accepted Recordkeeping Principals) Task Force.

There are few areas of information protection more misunderstood and neglected than data disposal, even though it may be the point at which information is most at risk. Organizations, otherwise conscientious about data protection, often give little or no unified direction to employees about acceptable methods of information destruction, leaving them to devices and processes that result in regulatory non-compliance, competitive espionage and embarrassing headlines. There have been several such incidents in Saskatchewan in recent memory. In this session, a globally recognized expert in data destruction legislation and policy development will walk attendees through a streamlined process for creating data destruction policies that provide the direction employees need.
The presentation will review the persistent problem of organizations failing to take safe information destruction into account, using examples drawn from headlines in Saskatchewan, elsewhere in Canada and around the world, and will provide advice on the following:

• How to avoid falling victim to senseless privacy or security breaches resulting from unsafe information destruction;
• How to cope with new information destruction challenges in an era when many documents only ever exist in electronic form;
• How to ensure employee compliance with information destruction requirements.

 Audience skill level: intermediate

Joseph Bozic
Chair
NAID-Canada

Joseph is the Chair of NAID-Canada, the national association representing companies that specialize in secure information and document destruction. NAID's mission is to raise awareness and understanding of the importance of secure information and document destruction. In doing so, NAID wants to ensure that private personal and business information is not used for purposes other than originally intended. NAID also plays an active role in the development and implementation of industry standards and certification and provides a range of member services which include advocacy, communication, education and professional development.
In addition to his duties with NAID-Canada, Joseph is the founder and president of dataXile Corporation, one of Canada’s premier electronic data destruction companies. Joseph was an innovator in this field, realizing the importance of secure data disposal and that few options existed. He took it upon himself to create a truly viable solution and built a full service data disposal company that organizations can trust to securely dispose electronic data.
A seasoned professional with over a decade of experience in information security, Joseph is frequently sought as a media resource and a guest speaker at conferences. In March of 2006 Joseph was elected to the board of directors for NAID-Canada and became Chair in 2008. In this capacity Joseph has been involved with initiatives to increase consumer awareness about safe information destruction, as well as government outreach efforts for improved legislation pertaining to information destruction.

The Ministry of the Environment rebuilt its Freedom of Information (FOI) program through systematic business process review, implementing a far reaching technology solution and investing in human resource capacity. This multi year modernization initiative included components as diverse as reducing paper consumption by 90%, improving request turnaround times to 14 working days and using technology to support web enabled FOI self service and access to information.

The Modernizing FOI initiative has changed in how the Ministry considers its records management program. This has lead to an “end to end” Ministry information access strategy. This paper will provide an understanding of how this transformation initiative evolved and planning and implementation lessons learned.

The overall goal is to prompt broader FOI modernization discussion. A key theme is that FOI service delivery needs to better serve government, the public, non government organizations and business. “Making Connections” between technology, information management and access and privacy communities is essential to this transformation. 

This presentation will cover three main areas:

• Developing business processes, implementing technology solutions and generating consensus for changing the way FOI and information access services are delivered.
• Moving FOI activities and priorities from a “FOI 1.0”, internal services perspective to the new world of FOI 2.0, open government and enterprise – wide information management.
• Detailing strategies for employing technology to support FOI and information access but ensuring these initiatives are not solely driven or defined by technology.

Audience skill level: intermediate and advanced

Jim Lewis
Director, Information Management and Access Branch
Ontario Ministry of Environment

Jim Lewis is Director of the Information Management and Access Branch, Ontario Ministry of the Environment. He has over twenty years experience working with access and privacy legislation gained at the Archives of Ontario, Management Board Secretariat and the Ministries of Environment, Energy and Health.
The programs Jim leads manage and deliver environmental information to the public and Ministry staff. This includes managing the Environmental Registry, an on-line site for citizen engagement on environmental issues, and the Information Resource Centre, which provides information and library services to staff. Jim is also responsible for leading the records and information management program including an enterprise information management pilot focusing on managing environmental approvals process documents.
The Ministry FOI program is the largest in the Ontario government receiving approximately 5500 requests a year. Jim lead the successful “Modernizing FOI” initiative that used business process redesign, technology and staff skills upgrades to change access and privacy services delivery.
The Branch is also preparing a Ministry environmental information access and dissemination strategy with objectives that include increasing public accessibility to environmental data and developing audience specific information resources. The current research focus is on understanding and documenting the effectiveness of other environmental information disclosure programs.

• Primer on legal employment issues (eg. just cause, terms of employment)
• Distinction between inscope and out of scope employees
• Investigation issues
• Role of policies and professional codes of conduct
• Proving breaches in the appropriate forum
• Disciplinary responses to breaches, the factors and the realities
• Case examples from the real world
• Employees and social network: the debate
• Question and Answer section

Evert van Olst
Legal Counsel
Saskatoon Regional Health Authority

Evert Van Olst graduated from the College of Law, University of Saskatchewan in 1982 and was called to the Saskatchewan Bar in 1983. He is presently legal counsel for the Saskatoon Regional Health Authority providing all legal services. These duties include advising the Board, senior administration and the Practitioners Advisory Committee, conducting the defence of civil and other claims, representing management in labour arbitration and judicial review, contract review and provision of legal advise to the corporation as a whole.

Mr. Van Olst is a member of the Law Society of Saskatchewan, Canadian Bar Association and is past President of the Saskatoon Bar Association. He is currently an elected Bencher of the Law Society of Saskatchewan. He was an appointed Public Member of the Council of the College of Physicians and Surgeons of Saskatchewan. He has provided presentations for the Canadian Bar Association, the Canadian College of Health Service Executives, Continuing Medical Education, University of Saskatchewan, and the Bar Admissions Course, among many other organizations.

For many years we have designed and implemented security systems to protect electronic information. Content monitoring, content filtering and data loss prevention solutions are now at the forefront of securing your data. Past experience has allowed us to redesign our approach when looking at data access security. Simply securing access to the data is no longer enough. We must secure what users, who are authorized to access the data, are able to do with the information.

Find out what organizations, whether in the public and private sector, need to consider in protecting themselves from data leaks. Are inspection techniques and classification just catch phrases? Is data at rest or data in motion a concern for your organization? Are you vulnerable for a data loss?

Audience skill level: intermediate

Rob Wilson
Senior Principal Consultant
CA

Rob Wilson has worked in the field of information technology for 15 years. He specializes in Identity and Access Management technologies, and is a trusted advisor for numerous Canadian Government, Financial, Telecommunication, and Retail organizations. In previous positions at the Ontario Government and CIBC, Rob was responsible for architecting and implementing security and infrastructure solutions.

Rob holds a Bachelor of Technology from Memorial University of Newfoundland, and a Master of Science in Information Technology from the University of Liverpool focusing on cloud-based identity systems.

Verney Conference Management, and the Organizing Committee would like to thank Deloitte for their generous support of the "Saskatchewan Access, Privacy, Security and Records Management Forum - Making Connections", and this year's Networking Reception.

Join your colleagues and fellow participants for a relaxing break, and some light discussion after a great day of insightful and interesting sessions!

A highlight of the reception will be the planned presentation of the Chief Justice E.M. Culliton Right to Know Award. The Saskatchewan Right to Know Committee presents the award annually to recognize leadership in promoting open and accountable government. Details can be found at http://www.oipc.sk.ca/RighttoKnow.htm
 

Jennifer Stoddart
Privacy Commissioner of Canada

Privacy Commissioner of Canada Jennifer Stoddart was appointed Canada's Privacy Commissioner by the Governor in Council, effective December 1, 2003, on unanimous resolutions adopted by both Houses of Parliament for a seven-year term.

Ms. Stoddart was previously President of the Commission d'accès à l'information du Québec, an organization responsible for both access to information and the protection of personal information, to which she was appointed upon resolution by the Quebec National Assembly in 2000.

Ms. Stoddart has held several positions in public administration for the Governments of Québec and Canada, including at the Canadian and the Quebec Human Rights Commissions.
She has been active in the Canadian Bar Association and is currently a member of the Board of Directors of the Canadian Institute for the Administration of Justice.

She has taught history and legal sciences at the Université du Québec à Montréal and McGill University. She has published for both professional journals and the wider public on questions ranging from Quebec social history to the administration of justice and human rights.

Ms. Stoddart received a licence in civil law from McGill University and was admitted to the Quebec Bar in 1981. She also obtained an M.A. in History from the Université du Québec à Montréal, and pursued doctoral studies at the Université de Paris VII.

Is your organization subject to either The Freedom of Information and Protection of Privacy Act or The Local Authority Freedom of Information and Protection of Privacy Act? Do you wear the hat of ensuring your organization is compliant with the relevant access and privacy legislation and do you ever wonder where you can find tools to help you in your work or to help raise awareness of access and privacy in your workplace? If you answered yes, this session will be perfect for you. It will introduce you to some of the tools of the trade and where they can be found – online training tools, checklists, template letters and other tools to help achieve compliance with FOIP or LAFOIP.

Duane Mombourquette
Executive Director, Access & Privacy Branch
Saskatchewan Ministry of Justice and Attorney General

Duane Mombourquette has spent much of his civil service career working in the areas related to access, privacy, and records management. For six plus years, he has been the Executive Director of the Access and Privacy Branch, Ministry of Justice and Attorney General. Prior to that, Duane spent almost a decade at the Ministry of Health where he was the Privacy Officer and Director of Strategic Planning and Information Policy, among other things. Duane also spent more than nine years with the Saskatchewan Archives Board and was involved in the creation of records management tools for government.

Sherri Fowler
Senior Access and Privacy Consultant
Ministry of Justice and Attorney General

Senior Access and Privacy Consultant, Access and Privacy Branch, Ministry of Justice and Attorney General - Sherri has worked in the Access and Privacy field for more than 10 years, first as a FOIP Co-ordinator for the Ministries of Justice and Corrections and Public Safety and since 2006 at the Access and Privacy Branch with the Ministry of Justice and Attorney General. Sherri also worked at the Office of the Information and Privacy Commissioner as a Portfolio Officer in a term position in 2009.

Web 2.0 technologies such as wikis and social networking sites are challenging traditional legal and IM concepts. How do we recast the stages of the information lifecycle when clear lines can't be drawn between creation and use? How are legal issues like ownership and copyright applied to folksonomies and mash-ups?

This session discusses a number of legal and IM issues raised by Web 2.0, and looks at approaches for resolving them.

• looks at collaboration, social networking and authoring tools
• looks at law in the Canadian context
• looks at strategies for overcoming deficiencies with business rules

Audience skill level: intermediate 

Lewis Eisen
Acting Director, Corporate Integrated Records Services
Information Management Branch
Industry Canada

Lewis Eisen -- lawyer, consultant and author -- has been working with information technology for 25 years. He brings experience from both private industry and government to the analysis of the impact of technology on traditional business processes. He currently works in Ottawa at Industry Canada as Manager, Records Services, and he sits on the Information Management Committee of GCPedia, the Government of Canada's inter-departmental wiki.

The Canadian Organization of Applied Computing in Healthcare (COACH) has developed a set of guidelines to assist healthcare professionals working with personal health information. In 2010 a special edition was release specifically focused implementing electronic medical records in an office or clinic environment. COACH recognizes the challenges that community healthcare providers have in making better and more informed decisions as it pertains to privacy and security best practices implementation in their offices

This session will talk about the technology evolution, adoption, supporting legislation and regulation, and the basic requirements that an office or clinic would require. This session in combination with the 2010 special edition is intended to enhance awareness and assist healthcare providers with the complex decision making associated with the selection, implementation, maintenance, and support of an electronic record system.
The session will be broken in to four (4) primary sections:

• Selecting an Electronic Record System
• Setting up an Electronic Record System
• Running your system
• Solving Problems

 Audience skill level: basic

Nick Giesinger
A/Director Strategic Services
Saskatchewan Ministry of Health

Nicholas is currently the Director of Strategic services which includes the role of Chief Security Officer for the Ministry of Health. He has been involved in the Privacy and Security of health information for 15 years including system design, validation audits, inter-provincial standards, national initiatives. He is an active member of the COACH Guidelines for the protection of health Information as both a steering committee and expert group member. Nicholas has been in the I.T. industry for 27 years, of which the last 17 years have been specifically in health I.T.

Roy Robb
Director, Information Technology
Saskatchewan Medical Association

Roy is responsible for delivery of the Saskatchewan Electronic Medical Records Program. The EMR Program is a joint initiative of the SMA and the Saskatchewan Ministry of Health to promote electronic medical record adoption by physicians in the province. Roy has been in the I.T. industry for over 35 years including senior management positions in the financial services sector here in Canada and property development in Australia. He joined the SMA in 2007 to help move the EMR project forward in Saskatchewan

Dr. Keith Clark
Family Physician
Saskatoon Health Region

Dr. Clark has worked in a variety of roles in the Saskatoon Health Region over the last 20 years from emergency room work to academic faculty. Currently he divides his time between community based family medicine, and his work with the SMA peer program as well as medical informatics with the health region. His interest in e-health was sparked by participation in conformance testing EMR solutions several years ago and continues to develop.

Dr. Ryan Sander
Family Physician
Saskatoon Health Region

Dr. Sander has been using EMR and other e-health technologies in his daily clinical practice for the past three years. His interest in e-health is what motivated him to join the Saskatchewan EMR Peer Network. Since joining, he has helped several medical offices convert to EMR systems, including his own clinic. His hope is that all health care providers will come to understand and enjoy the benefits of e-health, and use these technologies to provide a higher quality of patient care.

The Office of the Saskatchewan Information and Privacy Commissioner undertakes reviews of access decisions and investigates breach of privacy complaints involving government institutions, local authorities, and/or health information trustees. In this session, Diane will explain what to expect and how to respond accordingly when in a review situation or when engaged in a breach investigation. Some of the specific topics of interest to be covered include section 7 defects, frivolous/vexatious requests, third party notification, providing representations and when to provide breach notification and how.

Diane Aldridge
Director of Compliance
Office of the Saskatchewan Information and Privacy Commissioner

Diane has been a mentor, coach, advocate, mediator, educator, board member, and manager. Diane has been an active volunteer in Saskatchewan, coaching many different sports teams and has held various board positions including with a Family Services Bureau Board, the Saskatchewan Coalition on Tobacco Reduction, and the Saskatchewan Labour Force Development Board. She also has chaired many community working groups on a variety of development projects.

Diane graduated from the University of Regina with a Bachelor of Education. Diane also completed the IAPP Certificate Course from the University of Alberta with Distinction.

She has spent the last seventeen years working for different organizations including two health regions, WCB and most recently, the Office of the Saskatchewan Information and Privacy Commissioner (OIPC). She started with the OIPC in March of 2004 as a Portfolio Officer. She became the Director of Compliance in April 2007. She is involved with all aspects of the OIPC’s mandate and manages the office’s investigative team.

She is also presently a member of Canadian Institute of Access and Privacy Professionals (CIAPP) National Certification Working Group.

The audience will benefit from an understanding of the importance of collecting and preserving digital evidence, or electronically stored information (ESI) in a manner that satisfies current court standards. The audience will learn the potential sources of digital evidence as well as the unique challenges associated with preserving, collecting and analyzing digital evidence from each of these sources.

Francis will use real world examples from his firm’s experience providing digital forensics and eDiscovery professional services to government organizations, police departments and corporations. These case examples will illustrate current best practices and provide strategies for mitigating the risk of losing or overlooking critical evidence in a variety of cases, from human resources computer misuse allegations to privacy breaches and criminal cases.  This presentation will focus on:

• Distinguishing Digital Forensics from eDiscovery – how do you know which you need?
• Digital Forensic Best Practices- practical applications
• eDiscovery Best Practices – practical applications
• Identifying potential sources of digital evidence and Electronically Stored Information (ESI)
• Identifying the potential “land-mines” of digital evidence preservation collection and analysis?
• Practical strategies for managing the digital evidence collected

 Audience skill level: basic

Francis Graf
President & CEO
FDR Forensic Data Recovery Inc.

Francis Graf is President and CEO of Forensic Data Recovery Inc., a leading-edge Canadian forensic computer investigation and eDiscovery firm based in Victoria, BC with offices in Markham and Ottawa Ontario and Gatineau, Quebec. FDR’s team of internationally recognized computer forensic experts have many years of experience investigating computer misuse in criminal and civil matters of all types. Their expert testimony has been accepted in all levels of criminal and civil court in Canada, the USA and Great Britain.

Francis is also actively involved in training computer forensics practitioners from law enforcement agencies and public and private sector clients across Canada, the USA and internationally, as well as developing best practices in computer forensics and eDiscovery for public and private sector organizations across the country.

In 2003, Francis was sworn in as a Special Constable with the Victoria City Police Department in a unique partnership to support their computer forensics capability.

To improve healthcare services and outcomes for the First Nations communities it supports, the Northern Inter-Tribal Health Authority (NITHA) identified the potential value of accessing provincial health information systems and services such as the Saskatchewan Immunization Management System (SIMS) and other ehealth systems. In order to prepare the NITHA Partnership (Prince Albert Grand Council, Meadow Lake Tribal Council, Lac La Ronge Indian Band and Peter Ballantyne Cree Nation) to be ready to access these various systems, Seccuris was engaged to assist in developing a Privacy and Security Management Plan (PSMP). This plan was intended to align the legislative requirements of provincial partners and stakeholders with the goals and objectives of the NITHA Partnership and assist in training and awareness. Promoting learning and building trust was seen as critical for the NITHA Partnership to move forward.

Independence and self-determination are cornerstone principles for First Nations. The importance of privacy and security development must be connected to the overall health benefit for First Nations community members. Principles articulated through OCAP (reflecting Ownership, Control, Access and Possession) are critically important to moving forward in a relationship of trust between First Nations and the Provincial Government as represented by the Ministry of Health. As such, we must recognize that the First Nations Privacy and Security Awareness program needs to be adapted to link with First Nations measures of success. Traditional awareness programming methods should be adapted appropriately to reach and engage First Nations stakeholders.
 

David Violago
Information Security Consultant
Seccuris Inc.

David Violago is an information security consultant with Seccuris Inc., a Canadian information security consultancy and solution provider. He has performed engagements for numerous clients throughout Canada, involving threat and risk assessment, enterprise security architecture, process implementation, and compliance with legislation, regulations, and policy.

Before entering the IT field, David practiced law for over 9 years as a barrister and solicitor. He holds a BA, MA, LLB, and ITIL Foundation certification, and is a SABSA Chartered Security Architect, CISSP, and CISM.

As you know, Canada hosted world in June 2010 for the G20 Summit, but it also provided all participating country governments with a secure, mobile social media platform (Virtual G20). It also provided academia, business, youth and other interested groups with a similar platform (G20net.org).

What transpired is the world's largest social media project ever undertaken, and it was Canadian led and required collaboration throughout public and private sectors.  From information management technology to access to information and privacy, to policy and program development, everything changed by using these platforms.

This session will outline the project, the players, lessons learned on how to successfully implement social media in both a public and private sector domain, but more importantly how Canada has changed the social media space forever.

It will also include how participants can become a part of the Korean experience coming in November and be a part of global policy dialogues right from their own home.

Dan Larocque
Vice President, Canadian Public Sector
Open Text Corporation

Dan Larocque is Vice-President, Canadian Public Sector for Open Text Corporation, the largest independent provider of Enterprise Content Management (ECM) software and solutions. Open Text supports approximately 46,000 customers and millions of users in many of the world’s largest companies, government agencies and professional service firms.

Mr. Larocque is currently responsible for managing sales, service and support for the Canadian Public Sector line of business, including Federal, Provincial and local level governments representing the numerous Open Text products and solutions. With 18 years’ experience managing projects including 15 years within the Canadian Federal Government, and extensive experience implementing Enterprise Content Management solutions, Daniel has a special interest in the challenges facing knowledge workers in the increasingly electronic work environment. Mr. Larocque also plays an active role in key Open Text projects such the partnership with between Canadiana.org/Library & Archives Canada/Open Text initiative, “Canada Project”; an initiative to digitalize and distribute Canada’s culture and history online.

Before joining Open Text Mr. Larocque was Director, Business Development & Research for the Canadian Government. He was responsible for the management, promotion and deployment of the Government of Canada’s Records, Document and Information Management Solution (RDIMS) and content management business solutions. He provided strong leadership in promoting information management practices and skillfully positioned RDIMS as the foundation for unstructured or document-based information processes. Daniel was awarded Hummingbird’s “Outstanding Innovation Award” for three consecutive years as well as a GTEC Gold Medal for a National E-Government Award in the category of Strategic Information Management. He also received an industry sponsored Canadian Information Productivity Award for innovative business solutions, the Executive Correspondence Management Solution, Issue Management System, and Forward Agenda Report & Planning which also received an International Innovation Award.

Gerald Tegart
Deputy Minister
Saskatchewan Ministry of Justice and Attorney General

Gerald Tegart was appointed Saskatchewan’s Deputy Minister of Justice and Deputy Attorney General on June 1, 2009. Mr. Tegart has spent his entire professional career in the Saskatchewan Public Service. He was the Executive Director of the Civil Law Division of the Ministry of Justice and Attorney General prior to his appointment as deputy minister. Over a period spanning more than 30 years, he has been a Crown prosecutor, has provided legal services to virtually every agency in the provincial government and has been a senior legal manager. He is a graduate of the University of Saskatchewan (Bachelor of Civil Engineering 1973; Bachelor of Laws 1976). He was appointed Queen’s Counsel in 1993.