PPIA Report - Overview - Introduction

Consider completing a PPIA if:

• The program initiative is at an early stage.
• Information is unknown.
• You are having difficulty ascertaining whether or not a full PIA is required.
• A PPIA is also useful to provide a justification or proof as to when a PIA is not required

PPIAs typically involve the following activities:

• Identifying the types and volumes of personal information that are to be collected, used and disclosed.
• Verifying the legislative and policy authorities for the proposed program or services.
• Clarifying the roles, responsibilities, legal status and policy requirements of the primary stakeholders, including those of other jurisdictions and the private sector.
• Determining which aspects of the program or service are likely to involve privacy risks
• Initiating the consultation process with the Office of the Privacy Commissioner.
• Defining the scope and the schedule for the final assessment.

PPIAs are not as comprehensive as PIAs, and a PPIA Report will be shorter than a complete PIA.

When completing a PPIA don't expect to have all the answers. The intent of a PPIA is to provide an overview of possible privacy issues. Many of the questions raised in a PPIA Report will be answered if a full PIA is conducted at a later date.

The Table of Contents provided in the Assistant outlines suggested topics for consideration. The Table of Contents can be adapted and changed to meet your specific needs.

Determine the requirement

Cover Page