Kimberly Nunes

• Respond to, monitor, resolve and decide cases using the established Expedited Appeals policies and procedures for cases selected and assigned for expedited inquiry/review under the Freedom of Information and Protection of Privacy Act (FIPPA) and the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), the Personal Health Information Protection Act (PHIPA) and the Child, Youth and Family Services Act (CYFSA) (collectively, the Acts).

• Manage a caseload, working within established timelines in a procedurally fair and expeditious manner.

• Interpret a broad range of legislation and relevant case law to analyze and determine applicability to access rights under the Acts.

• Communicate the workings of the Acts to appellants and complainants.

• Conduct research, analyze past precedents, and where possible, provide parties with a preliminary view on the issues of the cases and on the likely outcome of the cases.

• Efficiently review and assess cases and conduct further investigation and analysis as required, including guiding the possible settlement of matters in dispute, and preparing a final written report or order/decision where required.

• Assist with the creation of templates for use in Expedited Appeals

• Explained the operation of FIPPA, MFIPPA, PHIPA and CYFSA to complainants, and articulated the purpose and process of the Early Resolution stage;
• Investigated the circumstances and gathering facts surrounding complaints and self-reported breaches, including cybersecurity incidents;
• Attempted to resolve privacy complaints through the use of early resolution tactics;
• Interpreted a broad range of legislation to analyze and determine applicability to access and privacy rights under the Acts;
• Conducted research, analyzed past precedents, and where possible, provided parties with a preliminary view on the issues of the case and on the likely outcome of the privacy complaint;
• Reviewed and assessed privacy breach reports and conducted further investigation and analysis as required, including the preparation of final written reports;
• Acted as a delegated decision maker under the statutes governed by the IPC by: Dismissing cases that should not proceed further through the appeals/complaints processes; and soliciting written representations from the parties, conducting research, analyzing past precedents, and issuing final written decisions with reasons.
  

• Received and responded to requests pursuant to MFIPPA and the Youth Criminal Justice Act, adhering to legislated timelines and making informed decisions about the release of sensitive information
• Provided training to colleagues and senior leadership on matters relating to access and privacy
• Completed privacy consults and privacy impact assessments for any new technology or program that collected, used, and/or disclosed personal information in new or substantially altered ways
• Responded to privacy breaches and complaints according to established protocols
• Responsibility for files appealed to the Office of the Information and Privacy Commissioner, from Intake to Adjudication