Governance, risk & compliance

Yukon Access to Information and Protection of Privacy Act (ATIPP Act) SY 2018, c 9 (statute text not read)

UNVERIFIED AGAINST THE STATUTE.

Read 24 Oct 2026. The Yukon statute site could not be retrieved, so the Access to Information and Protection of Privacy Act, SY 2018, c 9, was not read.

This framework rests on the Government of Yukon ATIPP Office information note and pamphlet, and on Yukon University’s Privacy Breach Procedures IT 11. 1 (March 2025), which quotes the Act’s definitions and several sections.

From those: a privacy breach is the theft or loss of, or unauthorized use, disclosure or disposal of, personal information (Act s. 1); public body employees, including service providers such as volunteers and contractors, must report suspected unauthorized collection, use or disclosure to their Designated Privacy Officer; the head is responsible for protecting personal information (s.

30); notice to the affected individual is required where there is a risk of significant harm, judged on factors that include sensitivity, probability of misuse, time elapsed, number of people and relationship (s. 32(6)); the notice contents are set by the ATIPP Regulations, s.

10(7); the Commissioner is notified of significant breaches, ministerial public bodies must complete privacy impact assessments, a person who knowingly fails to secure personal information commits an offence, and a person may complain to the Commissioner (s. 37) within 30 business days (s.

90). Section numbers come from those secondary sources and must be checked against the Act.

Not read: penalty amounts, Commissioner powers (whether orders or recommendations), and the commencement date (the 2018 Act replaced the earlier ATIPP Act; the date it took effect is not asserted here). Private-sector note: PIPEDA applies to commercial activity in Yukon, which the OPC treats as federally regulated.

General information, not legal advice.

Assessment tiers & levels Lavawall supports

Lavawall assesses Yukon Access to Information and Protection of Privacy Act (ATIPP Act) at every level below, so you can start where you are and step up as your program matures.

How Lavawall® helps you get to Yukon Access to Information and Protection of Privacy Act (ATIPP Act) compliance

Most of Yukon Access to Information and Protection of Privacy Act (ATIPP Act) comes down to technical controls you have to run and prove: keeping systems patched, hardening configuration, detecting breaches early, backing up what matters, controlling access, and keeping evidence that all of it actually happened. Lavawall® runs those controls across Windows, macOS, Linux, and Microsoft 365 / Google Workspace from one console, maps them to Yukon Access to Information and Protection of Privacy Act (ATIPP Act), and tracks your posture continuously instead of once a year at audit time.

• Assess your current state against Yukon Access to Information and Protection of Privacy Act (ATIPP Act) in the Lavawall GRC module, with the questionnaire and control set built in.
• Remediate the gaps with the same platform — automated patching, configuration fixes, backups, and access review — not a separate project.
• Evidence everything with timestamped, exportable records auditors, insurers, and clients accept.

Related

Lavawall® supports Yukon Access to Information and Protection of Privacy Act (ATIPP Act) as part of a built-in catalogue of compliance frameworks. Framework requirements are summarized for planning purposes; always confirm the current official text before certifying.