Government of New Brunswick

The Right to Information and Protection of Privacy Act reflects a continuing commitment to the privacy principles set out in the CSA Standard CAN/CSA-Q830, Model Code for the Protection of Personal Information.

RTIPPA details the manner in which personal information is collected, corrected, retained, protected, used, and disclosed by a public body. 

Why do public bodies collect personal information?

In the course of doing its regular business, it is necessary for some public bodies to collect, manage, use and disclose a certain amount of personal information about individual people.  The Right to Information and Protection of Privacy Act stipulates that no personal information may be collected by or for a public body unless:

  • the collection of the information is authorized or required by or under an Act of the Legislature or an Act of the Parliament of Canada;
  • the information relates directly to and is necessary for an existing program or activity of the public body; or
  • the information is collected for law enforcement purposes.

A public body can collect only as much personal information about an individual as is reasonably necessary to accomplish the purpose for which it is being collected.

How do public bodies collect, retain, and protect your personal information?

A public body that collects personal information is required to:

  • provide information about why the information is being collected and what legal authority they have to collect it;
  • make sure that the information collected is accurate and complete;
  • keep and eventually dispose of the information in accordance with a written policy;
  • make sure that the information is safeguarded so as to prevent unauthorised access, use, disclosure, and destruction; and
  • provide contact information of an employee who can answer questions about the collection.

When and how can public bodies disclose your personal information?

Generally speaking, personal information is to be used and disclosed only for purposes consistent with the purpose for which it was collected. Details regarding how personal information can be used or disclosed are set out in detail in section 46 of the Act. 

Every use and disclosure of personal information by a public body is limited to the minimal amount of information and to the minimum number of officers, directors, employees or agents necessary to accomplish the purpose for which it is being used. 

How to correct your personal information

If an individual believes there is an error or omission in any of the personal information being held by a public body about him or herself, that person may request that the information be corrected. This is done by sending a request for correction (by letter or by form) to the head of the public body holding the information. There is no fee for a request for correction of personal information.

Within 30 business days of receiving your request, the head of the public body will send you a notice indicating either that the requested correction has been made or that the public body does not agree with the requested correction. If the head of the public body determines that a correction is not warranted, the head must:

  • explain the reason(s) for the refusal;
  • attach your request for a correction to the record; and
  • inform you of your right to have the decision reviewed by the Office of the Ombud (see Review Process).   

Whatever the decision, the head must notify any other public body or third party with whom the information has been recently shared that a request for correction has been made and, if applicable, of the correction itself.