Share on LinkedInShare on LinkedIn

ARTICLE · 27 AUGUST 2026

Bill 97 Explained: Key Access And Privacy Changes For Ontario’s FIPPA And MFIPPA Institutions

Ontario's Bill 97 introduces sweeping reforms to freedom of information and privacy laws, fundamentally reshaping how public institutions handle access requests and protect personal data. The amendments establish new timelines, breach reporting requirements, and privacy impact assessment obligations that will require significant operational changes.

CanadaGovernment, Public Sector

Introduction

On April 24, 2026, Bill 97, the Plan to Protect Ontario Act (Budget Measures), 2026, received Royal Assent. Schedules 7 and 11 amend the Freedom of Information and Protection of Privacy Act (“FIPPA”) and the Municipal Freedom of Information and Protection of Privacy Act (“MFIPPA”), respectively.

This article summarizes the key changes and outlines compliance steps. The amendments take effect on a staggered basis. Most of the access to information amendments under both statutes come into force on July 1, 2026, while key MFIPPA privacy provisions come into force on January 1, 2027.

Access-to-Information Changes (Both Statutes)

Business Days

  • Institutions now have more time to respond to access requests: the basic response period under both FIPPA and MFIPPA increases from 30 calendar days to 45 business days. Various other provisions are also amended to require that certain time limits be calculated using business days instead of calendar days (e.g. 15 business days

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from