--That requirement already exists, Cavoukian admitted, but it wasn’t reflected in the agency’s practices. “A policy is not enough sitting on some shelf, not understood, not translated into the day to day steps of your staff … It has to be embedded in the operations of your agency.”
--There has to be accountability “at the highest levels” at Elections Ontario, including the hiring of a privacy officer. It is “astounding” it doesn’t, Cavoukian said.
Also, the agency’s technology services department should take full responsibility for training and supporting staff to ensure the protection of personal voter information.
Cavoukian has also asked the provincial government to have the auditor-general regular privacy audits of public sector agencies, which, like Elections Ontario, don’t come under her office’s jurisdiction.Cavoukian did her investigation at the request of Elections Ontario.