A White Color Camera Privacy Cover. Slide Webcam. Cover for an electronic device with a keyboard on a wooden table

Certificate in Information Privacy

Certificate in Information Privacy

Contribute to a world that values privacy protection

Next Enrolment

September 19th, January 23rd




COVID-19 Updates and changes to program delivery. More information >

Improve your privacy awareness, the practices of organizations and gain fundamental knowledge in information principles in the digital age.

What is Information Privacy?

Information privacy is a vital profession that encompasses how an entity collects, stores, shares and uses personal data. Data-driven organizations need to consider how factors like customer data, domestic and global privacy regulations and emerging technologies can impact their operations, information management and customer marketing practices. Information privacy professionals help recommend, implement, manage and scale security and privacy solutions for individuals and organizations.

What you will learn

You will gain fundamental knowledge in information principles, operational methods and emerging technologies that define privacy practice today. In only six months of online or blended study, you will also:

  • Learn essential tools and methods for safeguarding personal information
  • Comprehend global legal and regulatory requirements for information privacy
  • Interpret the privacy ramifications of new technologies, applications, products and services
  • Learn to identify potential risks, vulnerabilities, harms or misuses of data
  • Identify and coordinate privacy breaches/risk assessments
  • Contribute to the development of an organization’s privacy program
Program Benefits

This program offers an accelerated format that allows you to graduate in only six months. Look forward to participating in experiential education opportunities, such as analyzing real-world privacy breaches. Industry-expert instructors will also instruct you on using practical, privacy-enabling tools and methods such as a Privacy Impact Assessment (PIA) and Privacy by Design (PbD). And, since privacy protection is a collaborative effort that involves multiple stakeholders, you will gain cross-functional professional skills such as communication, team building and critical thinking.

Part-Time Program:
Part-Time, blended
Delivery: Online coursework + 6 live online sessions
Live Session Schedule: 3 weekends total (Sat & Sun )
Program Length: 6 months
Term Starts: Fall, Winter


Introducing Live Online Learning

To make our programming even more accessible, and to ensure the safety of students and instructors, we are now offering the in-class course components for professional programs completely online.

Career Potential

In this program you will gain the essential knowledge to analyze and improve your privacy best practices in a rapidly evolving world. It will also help you acquire a holistic understanding of the organizational value of privacy and data protection. Now is the time to upgrade your skill set to improve the privacy practices in your organization or to embark on a new career as an information privacy practitioner.

Industry Information

Information privacy is one of the most important public policy issues of our digital age and an issue of vital importance to Canadians and Canadian organizations. Over a five-year period, GTA job postings in information privacy have increased by 142%.

Employers are searching for proactive and knowledgeable information privacy professionals to help recommend, implement, manage and scale solutions on an organization’s privacy needs. Now, more than ever, institutions and individuals need to ensure that their personal data are used appropriately and according to ethical and  legal best practices.

Get hired for jobs like:

Privacy Analyst
Compliance Officer
Privacy Program Administrator
Privacy Coordinator

Gain these skills:

Analytical & Critical Thinking
Relationship & Team Building

Who should take this program?

The Certificate in Information Privacy is for any individual who seeks a potential career path toward information privacy as a discipline. Additionally, it serves individuals who simply want to better understand privacy as a public policy issue.
This program can also enhance the careers of people with an educational background or work experience in information management, information technology, human resources, marketing, and other related fields.

Enrolment Requirements

The Certificate in Information Privacy is a direct registration program. No application process is required; simply enrol in the session of your choice to get started.

Learning Outcomes
    By the end of the certificate, successful graduates will be able to:

  • Explain the importance of information privacy
  • Consider the risks and benefits of information privacy from organizational and consumer perspectives
  • Comprehend major Canadian and global privacy laws, regulations and standards
  • Grasp the privacy implications of new technologies and services
  • Understand information security tools, methods, and principles used to safeguard information privacy
  • Conduct and write a Privacy Impact Assessment
  • Recognize privacy incidents and breaches and understand how to address them
  • Identify the essentials of stakeholder management (members, employees and other third parties)
  • Support the development and the enhancement of an organization’s privacy program
How Can a Certificate in Information Privacy Help Your Career?

Steven Sone – Certificate in Information Privacy Graduate

Delivery Format

Part-Time – Blended

Courses combine in-person learning, on campus at York (or Live Online via Zoom during COVID-19) plus online learning. The live components are typically held at a scheduled day and time (e.g. Saturday and Sunday, 9am-4pm), on campus at York (or Live Online via Zoom during COVID-19) where students and instructors gather to participate in active learning activities, share their learnings in an interactive format and hear from guest speakers. The online delivery is asynchronous, which means that while students have set deadlines to complete their work each week, they do not have any required “live” components (e.g. class at 7pm on Tuesdays). There may be optional, live sessions, via Zoom, throughout the course for the instructor to provide additional coaching and support. These optional sessions may be recorded and shared with students who cannot attend.

Students can expect to write exams/quizzes, prepare assignments (individual and group), and participate in online discussions with their peers.

In addition to any live components, students should expect to dedicate approximately 8-10 hours of effort per course each week for readings, discussions boards, practice opportunities, assignments, and so on.


CSIP1010 Fundamentals of Information Privacy

The Fundamentals course establishes a foundation in information privacy terminology, requirements, and approaches. You will understand the role that privacy serves in data governance and risk management for an organization. You will learn how privacy developed as a practice and as a profession. Current Canadian privacy laws are explained as well as the structure and powers of the Canadian information and privacy commissioners. The course contrasts Canada's regulatory model, both culturally and practically, to other data protection regimes around the world and elaborates on how the issue of privacy will evolve globally in the years to come. Domains covered: Definitions and concepts of privacy; Founding principles of privacy; Privacy safeguards; Privacy law essentials; Private sector privacy laws; Public sector privacy laws; The mechanics of privacy; and The future of privacy. Skills developed: Interpreting national and cultural privacy behaviours and expectations; Implementing best practices for personal information protection; Analyzing common marketing and research uses of personal data; Disseminating a privacy policy; Conducting a personal information access request; Interfacing with the information and privacy commissioners of Canada; Complying with Canadian private-sector and public-sector privacy laws; and, Assessing emerging policy approaches to privacy protection.

2 Classes

36 Hours

CSIP1020 Privacy in Technology

Privacy in Technology addresses personal information in today's IT systems from collection, processing, and sharing to storage and erasure. The course explains the purpose and value of engineering privacy features into IT products and services including consumer-facing privacy interfaces and controls. You will learn best practices for managing and protecting your organization's sensitive data assets. You will understand common varieties of information threats and vulnerabilities and how to apply security controls that address these risks. Lastly, you will interpret the privacy impacts of emerging technologies, mobile technologies, online media, and digital health as well as understand the significant influence of data and technology on public life. Domains covered: Privacy in information systems; Information security; Privacy in IT development; Online privacy; Privacy and emerging technologies; Privacy, technology, and civic life; Privacy and digital health; and Mobile privacy. Skills developed: Conducing a personal data inventory; Applying methods of identity and access management such as authentication and authorization; Identifying and mitigating common information threats such as phishing, ransomware and malware; Leveraging outcomes from known data breaches to improve information privacy and security; Coordinating privacy needs with colleagues in IT security, development, and engineering; Advocating for techniques of personal data minimization, de-identification, and anonymization in common IT tasks; Implementing Privacy by Design (PbD) principles to products, services and business processes; and, Negotiating a resolution to a privacy incident.

2 Classes

36 Hours

CSIP1030 Privacy Operations

Privacy Operations is the third and final course of the three-part information privacy certificate program. This course leverages the key legal and technical concepts of the two prior courses and synthesizes these into best practices that can be applied to everyday operational environments. You will learn the utility of privacy impact assessments (PIAs); data subject access requests (DSARs); vendor evaluations and partner relations; incident mitigation; and, stakeholder training, policy communications and privacy awareness. These are the practical tools and methods for operationalizing privacy in any size of organization across Canada and around the world today. Domains covered: Privacy program management; Global privacy compliance; Assessing privacy risk; Incident planning and response; Access and consent management; Vendor and contract management; Onward transfers of data; and Privacy training and communications." Skills developed: Creating a privacy team and operation; Interpreting the basic requirements of global privacy laws and regulations; Writing and conducting a Privacy Impact Assessment (PIA); Handling data subject access requests (DSARs); Responding to information incidents such as breaches and hacks; Evaluating and vetting data vendors; Implementing protections to permit cross-border data flows; and Drafting and presenting a comprehensive privacy training and awareness plan.

2 Classes

36 Hours


Cristina Onose Information Privacy Instructor

Cristina Onosé

Peter Kosmala Information Privacy Instructor

Peter Kosmala

Advisory Council

Anick Fortin-Cousens Information Privacy Advisory Council

Anick Fortin-Cousens

Cristina Onose Information Privacy Instructor

Cristina Onosé

Information Privacy Program Advisory Council - Deborah Evans

Deborah Evans

Hassan Jaferi Information Privacy Advisory Council

Hassan Jaferi

Maria Koslunova Information Privacy Advisory Council

Maria Koslunova

Peter Kosmala Information Privacy Instructor

Peter Kosmala

Karl Larson Information Privacy Advisory Council

Karl Larson

Vance Lockton Information Privacy Advisory Council

Vance Lockton

Laura Stevenson Information Privacy Advisory Council

Laura Stevenson

Video & Media

Events & Webinars

Certificate in Information Privacy

Fall 2022

(Online + Live Online Classes)

Course Details +


Winter 2023

(Online + Live Online Classes)

Course Details +


Policies & More Information

Technology Requirements for Remote/Online Courses

Please review the technology and software requirements you will need to access our courses remotely.

Contact Us

Ask us anything about this program and we’ll get back to you within 2 business days.