Services

Privacy

  • Governance and Direction

  • Foundational Privacy Officer 

  • Privacy Impact Assessments
  • Breach Management (Investigation, Response and Remediation)
  • Privacy Compliance Gap Analysis and Cost-Benefit Analysis
  • Privacy Reviews and Audits
  • Policy, Procedures, Protocols and Guidelines
  • Program Development and Implementation
  • Program Analysis, Compliance Assessment and Remediation
  • Information Sharing Agreements
  • Specialized digital, information management and technology-based Privacy documentation (e.g. AI, emerging technology, facial recognition, surveillances systems, CCTV, etc.)
  • Data Inventory Assessments and Recommendations
  • Action Plans, Management Strategies and Target Operating Models
  • Privacy Service Plans, Risk Management and Business Cases
  • Data Governance, Protection, Lifecycles and Safeguards

  • Third Party Privacy Provisions

  • Principles and Best Practices (e.g. pertaining to consent, discovery process, classification, access requests and vendor assessment)
  • Data Flow and Business Mapping
  • Privacy Product Development and Expansion
  • Training and Awareness

Freedom of Information

  • Governance and Direction

  • Foundational FOI Officer

  • Processing of complex and voluminous Access requests
  • Seamless support and management of requests from intake to disclosure
  • Legislative timeline and Compliance Management
  • Policy, Procedures, Protocols and Guidelines
  • Program Development and Implementation
  • Delegation of Authority
  • Program Assessment and Continuous Improvement
  • Office of the Information and Privacy Commissioner liaison and mediation
  • Access to Routinely Releasable Information
  • Experienced, scalable resources and support
  • Training and Awareness

records management

  • Governance and Direction

  • Foundational Records Management Officer

  • Policies, Protocols, Procedures and Processes
  • Legislative Obligations and Requirements
  • Small to large scale Records projects
  • Management, Security and Protection of Sensitive, Confidential and Personal information
  • Administrative, Operational, Executive and Transitory Information Management

  • Program Development and Implementation 

  • Program Assessment, Roadmapping, Gap Analysis and Remediation
  • Provincial and Industry Standards and Compliance
  • Program Review, Auditing and Monitoring
  • Records Classification and Retention Schedule Development
  • Document Discovery
  • Electronic Records Management and Systems
  • Records Conversion and Digitization 
  • Records Inventory and Appraisal
  • Training and Awareness
  •  Ongoing experienced, scalable resources and support

“The Privacy Group’s attention to detail and commitment to quality truly stood out. We’ve already recommended them to others.”