The OIPC is undertaking a review of its resources. If there is a resource from the previous website that is no longer available, please contact the office.
This advisory was published in response to an increase in reported breaches involving cloud storage containers, or "web buckets", that are unintentionally exposed publicly online, typically through misconfigured properties or settings. The advisory is for organizations in the public, health and private sectors, and outlines what web buckets are, how web buckets are exposed, and privacy and security considerations for protecting personal or health information stored in web buckets. Published in October 2020.
On November 21, 2014, the Commissioner, in partnership with international privacy regulators, expressed concern to the operators of Insecam about its streaming of unsecured webcams.
Public bodies and organizations are required under law to take reasonable steps to safeguard the personal information in their custody or control from such risks as unauthorized access, collection, use, disclosure, copying, modification, disposal or destruction. This tool is designed to help public bodies and organizations determine how well they are protecting personal information. Updated in October 2020.
Copyright 2021 OIPC. All rights reserved.