Law: Access to Information and Protection of Privacy Act, RSY 2002 c 1 (the Act). Please note that the Act applies to public bodies only. Private organisations are regulated at the federal level by the Personal Information Protection and Electronic Documents Act 2000 (PIPEDA).

Regulator: Yukon Information and Privacy Commissioner (IPC)

Summary:  The Access to Information and Protection of Privacy Act, RSY 2002 c 1 (the Act) applies to public bodies only as private organizations are regulated at the federal level by the Personal Information Protection and Electronic Documents Act 2000 (PIPEDA). The Act applies to all records in the custody or under the control of a public body and seeks to enable public bodies to become more accountable and to protect personal privacy by granting the public a right of access and correction of personal information, and by preventing the unauthorized collection, use, or disclosure of personal information by public bodies.

In addition to the Act, the Health Information Privacy and Management Act 2016 (HIPMA) provides for rules in relation to the collection, use, and disclosure of, and access to, personal health information (PHI). Since it entered into force in 2016, HIPMA has since been amended to strengthen security requirements when sharing PHI, specifically requiring health custodians to demonstrate that they have sufficient technical and physical safeguards in place for PHI in order be eligible to use the Yukon Health Information Network.