Law: Access to Information and Protection of Privacy Act, SNWT (Nu) 1994 c 20 ('the Act'). Please note that the Act applies to public bodies only. Private organisations are regulated at the federal level by the Personal Information Protection and Electronic Documents Act 2000 ('PIPEDA').

Regulator: The Office of the Nunavut Information and Privacy Commissioner ('OIPC')

Summary: According to the Act, individuals may ask for access to any record, including their own personal information, in the custody or under the control of a public body. In addition, individuals may request the OIPC to investigate incidents where they think that personal information might have been collected, used, or disclosed in contravention of the Act. In its 2018-2019 Annual Report, the OIPC noted that although breach notifications from public bodies had increased significantly from 3 to 10, this was still far below what was expected and outlined measures to increase public sector breach notifications.