Who has the power to issue binding orders concerning privacy issues?

The Provincial or Territorial Privacy Commissioner has the authority to issue binding orders regarding privacy issues specifically within their jurisdiction. Each province and territory in Canada has its own privacy legislation, such as the Freedom of Information and Protection of Privacy Act (FIPPA) or the Personal Health Information Protection Act (PHIPA), which empowers the local Privacy Commissioners to oversee compliance and address violations.

These commissioners can investigate complaints about breaches of privacy and have the power to issue orders that mandate organizations to comply with privacy laws. Their binding decisions can include directives for organizations to change their practices or to take specific actions to protect personal information.

While the Federal Privacy Commissioner plays a significant role in overseeing the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and can make recommendations, they do not have the authority to issue binding orders that compel compliance across provinces. Therefore, the responsibility for binding orders resides with the Provincial/Territorial Privacy Commissioners, making them the correct choice in this context.