De-identification of personal information and the new IPC Ontario guidelines
Under Canadian privacy law, “de-identified” data can be used for research, product development and other such “secondary purposes” without individual consent and without the normal protections that apply to personal information. On October 15, 2025, the Information and Privacy Commissioner/Ontario updated its guidance on the de-identification of personal information. The new guidance is set out in a 96-page document entitled De-Identification Guidelines for Structured Data; Updated and Expanded. This new…

