Compliance frameworks and training for Ontario

Lavawall® maps 5 compliance frameworks specific to Ontario and offers 1 staff training course written for it. Open a framework for its requirements and assessment tiers; the courses are listed below.

This is general information to help you find the right material, not legal advice. Which rules apply to you depends on your organization.

Compliance frameworks for Ontario

Ontario Cyber Security Framework 2024

Ontario government cybersecurity framework for public sector organizations.

Region: Ontario, Canada

Ontario MFIPPA - Municipal Freedom of Information and Protection of Privacy Act (as amended by Bill 194) 2024 amendments

The Municipal Freedom of Information and Protection of Privacy Act, as amended by Bill 194, the Strengthening Cyber Security and Building Trust in the Public Sector Act, 2024.

Region: Ontario, Canada

Ontario Personal Health Information Protection Act (PHIPA) 2004, as amended

Ontario's health privacy statute, the Personal Health Information Protection Act, 2004.

Region: Ontario, Canada

Ontario AODA - Integrated Accessibility Standards (O. Reg. 191/11) O. Reg. 191/11, consolidated 30 March 2026

Ontario's accessibility standards for every organization with at least one employee in Ontario, with obligations that scale with size.

Region: Ontario, Canada

Ontario public sector AI rules (EDSTA and the OPS AI Directive) EDSTA Sch. 1 ss. 1 to 16 in force 29 Jan 2025; Directive 1 Dec 2024

Two instruments.

Region: Ontario, Canada

Staff training for Ontario

Courses your team can take in the browser, with a short quiz and a completion record. See all Lavawall training.

Ontario Health Privacy: PHIPA (about 25 minutes)
Required compliance and HR training. Course code: ON-HEALTH-PRIVACY. Contact your training administrator for questions.

Also relevant across Canada

All Canada frameworks and training

Frameworks that apply anywhere, such as ISO 27001, SOC 2, and NIST, are on the full framework list.

Common questions

Which compliance frameworks does Lavawall cover for Ontario?

Lavawall maps 5 frameworks specific to Ontario, including Ontario Cyber Security Framework, Ontario MFIPPA, Ontario PHIPA, Ontario AODA accessibility, Ontario public sector AI rules (EDSTA. Each has assessment tiers, questionnaires, and policy templates, and its requirements map to a shared control set so evidence collected once counts everywhere it applies.

Does Lavawall offer security and privacy training for Ontario?

Yes. Lavawall Training has 1 course written for Ontario, each with a short quiz and a completion record you can show an auditor.

Is this legal advice?

No. The frameworks and courses are general information built from the official law and regulator text, to help you find and organize the right material. Ask a lawyer how the rules apply to your organization.

Find the frameworks that apply to you See Lavawall Training