John Boufford, I.S.P., ITCP, is the principal consultant at e-Privacy Management Systems Inc.

John is an experienced freedom of information, privacy, and systems professional who specializes in providing consulting services related to privacy protection within information technology projects.

John has more than 17 years experience applying Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA), its municipal counterpart (MFIPPA), and the Personal Health Information Protection Act (PHIPA).

He has also worked with the Privacy Act, and the Personal Information Protection and Electronic Documents Act (PIPEDA), the Access to Information Act (ATIA) and selected aspects of program legislation (e.g., the Health Protection and Promotion Act).

John has extensive experience developing privacy impact assessments (PIA's) in accordance with the federal and Ontario PIA guidelines.

John is a former national president (2006-2007) of the Canadian Information Processing Society (CIPS) – a professional association representing the interests of information technology professionals. He has led the development of several position papers on information technology and public policy issues. He is the 2004 recipient of CIPS’ GALA (Got A Lot Accomplished) award.

Currently, John is a director on the board of the Information and Communications Technology Council (ICTC - www.ictc-ctic.ca/en/Default.aspx).

John has also held various positions in computer operations and management, and systems planning and coordination. He has been a regular speaker, writer (columnist for Computer World Canada) and interviewee on privacy and information technology issues.

John has consulted alone, and as a sub-contracted member of larger teams provided by other consulting firms. Prior to becoming a consultant, he was an Information and Privacy Coordinator in the Ontario Ministry of Natural Resources for six years where he also held various positions throughout a long career.
Assignments

The details of John’s extensive experience can be provided on request. The assignments he has completed in the last ten years can be classified as follows:

• Preparing privacy impact assessments in the federal and provincial governments and the private sector.

• Analyzing and reporting on best practices and operational and staffing issues.

• Preparing statements of sensitivity for specific information assets.

• Preparing privacy-related user requirements.

• Preparing comprehensive privacy strategies and plans.

• Processing access to information (freedom of information) requests.

• Conducting publicly advertised and in-house FIPPA training.

• Speaking on privacy and professionalism issues at universities and conferences.

• Facilitating at international conferences (Integrated Justice Privacy Impact Assessment Workshop).

• Writing articles, reports, columns and position papers on privacy.