Governance, risk & compliance

Prince Edward Island Freedom of Information and Protection of Privacy Act (FOIPP) RSPEI 1988, c F-15.01 (unofficial consolidation read)

Read 24 Oct 2026.

The Freedom of Information and Protection of Privacy Act, chapter F-15. 01, was read in the unofficial consolidation; the text I could retrieve stopped after s.

52, so ss. 53 to 79 (including inquiry powers, the order section s.

66, and the offence section s. 75, which appears only in the table of contents) were not read.

Part 2 protects privacy. A public body (s.

1(k): government departments and offices, designated agencies and boards, the Executive Council Office, legislative officers’ offices and local public bodies) may collect personal information only if a law authorizes it, it is for law enforcement, or it relates directly to and is necessary for an operating program or activity (s. 31); it must tell the person the purpose, the legal authority and who to contact (s.

32(2)), keep information used for a decision accurate and complete and keep it for the records schedule period or at least one year after use (s. 33), annotate refused corrections (s.

34), make reasonable security arrangements (s. 35), and use and disclose only as ss.

36 to 40 allow, including a consistent-purpose test (s. 38).

"Employee" includes a person who performs services under a contract with the public body (s. 1(c)).

The Act as read contains no mandatory breach notification and no privacy impact assessment duty; the Commissioner’s April 2024 Privacy Breach Reporting Guidelines say breach reporting under the FOIPP Act is voluntary but encouraged, using the same process as under the HIA. The Commissioner investigates and resolves complaints (s.

50) and gives advice and recommendations on request (s. 51); orders after a review are made under s.

66, whose text was not read. Private-sector note: no substantially similar private-sector law is listed for Prince Edward Island on the OPC page, so PIPEDA applies to commercial activity; contractors to public bodies are bound through the Act’s employee definition and their contracts.

General information, not legal advice.

Assessment tiers & levels Lavawall supports

Lavawall assesses Prince Edward Island Freedom of Information and Protection of Privacy Act (FOIPP) at every level below, so you can start where you are and step up as your program matures.

How Lavawall® helps you get to Prince Edward Island Freedom of Information and Protection of Privacy Act (FOIPP) compliance

Most of Prince Edward Island Freedom of Information and Protection of Privacy Act (FOIPP) comes down to technical controls you have to run and prove: keeping systems patched, hardening configuration, detecting breaches early, backing up what matters, controlling access, and keeping evidence that all of it actually happened. Lavawall® runs those controls across Windows, macOS, Linux, and Microsoft 365 / Google Workspace from one console, maps them to Prince Edward Island Freedom of Information and Protection of Privacy Act (FOIPP), and tracks your posture continuously instead of once a year at audit time.

• Assess your current state against Prince Edward Island Freedom of Information and Protection of Privacy Act (FOIPP) in the Lavawall GRC module, with the questionnaire and control set built in.
• Remediate the gaps with the same platform — automated patching, configuration fixes, backups, and access review — not a separate project.
• Evidence everything with timestamped, exportable records auditors, insurers, and clients accept.

Related

Lavawall® supports Prince Edward Island Freedom of Information and Protection of Privacy Act (FOIPP) as part of a built-in catalogue of compliance frameworks. Framework requirements are summarized for planning purposes; always confirm the current official text before certifying.