Yukon, Northwest Territories and Nunavut: federal law, and what changes from one territory to the next

Yukon: one office, three roles

In Yukon a single office holds three roles: ombudsman, information and privacy commissioner, and public interest disclosure commissioner. No province has an equivalent of that combination.

It presents publicly under the Yukon Accountability banner, and also uses ombudsman addresses. Its jurisdiction covers the access statute, so public bodies, and the health statute, so custodians. It does not cover ordinary commerce.

We invent no French name for it: we found none, and Yukon does not sit under the same bilingual enactment regime as the Northwest Territories, Nunavut or Manitoba.

Yukon: the health statute, and what we decline to cite from it

We could not read the Yukon statute texts directly: the territory's official legislation site refused the connection on every attempt we made, on 15 September 2026.

The consequence is deliberate: you will find on this page no section number from the Yukon health statute, and no description of its breach notice mechanism. Summaries in circulation give one; we do not repeat it without having read the provision.

What we do know holds: the health statute exists, it has been in force since 2016, it covers custodians, and no federal order has declared it substantially similar to federal law. A shorter page that is true beats a longer page that is approximate.

Northwest Territories: a health statute enacted in French as well

The territorial health statute — the Health Information Act, S.N.W.T. 2014, c. 2 — has been in force since 1 October 2015. We read the official bilingual English-French consolidation published by the Northwest Territories Department of Justice, current to a 2026 amendment.

The Northwest Territories enacts its statutes in a parallel French version, which neither Yukon nor the three anglophone Atlantic provinces do. For a French-speaking reader in the north, that means an official text exists in their language, not merely a courtesy translation.

The statute uses the word « custodian », as Ontario, Alberta and the Atlantic provinces do, rather than « trustee » as in Manitoba and Saskatchewan.

Northwest Territories: section 87, notice with no harm threshold in the text

Section 87 reads: « Subject to any prescribed exceptions, a health information custodian shall give notice to an individual and, if applicable, to a prescribed person or organization, as soon as reasonably possible if personal health information about the individual is (a) used or disclosed other than as permitted by this Act; (b) lost or stolen; or (c) altered, destroyed or otherwise disposed of without authorization. »

That is a real, codified duty to notify. The section text itself sets no harm threshold: on its face it is broader than the « real risk of significant harm » thresholds used federally, in Alberta and in Manitoba.

One caveat belongs here rather than a suggestion of an absolute rule: the section opens on prescribed exceptions, and the statute's regulation-making power allows for them. We have not consulted those regulations. So we assert neither that exceptions exist nor that none do.

This section reaches health information custodians. It does not reach an ordinary business: a garage, a salon or a haulage firm is not a custodian.

Northwest Territories: where a complaint goes

For ordinary commercial activity, a customer complaint about the use of their information goes to the Office of the Privacy Commissioner of Canada.

In the territory, oversight of the access statute and the health statute rests with the territorial information and privacy commissioner. We could not load that office's site — an anti-bot challenge blocked every attempt — so we publish neither its exact name, nor its complaint address, nor the name of the current office-holder.

That is a gap we name rather than fill with an approximate address. A wrong address on a page about law sends someone nowhere at the worst possible moment.

Nunavut: no health statute, one regime

Elsewhere a page like this has to untangle two or three overlapping texts. In Nunavut there is one, and it is federal. That makes Nunavut the simplest of the thirteen jurisdictions.

Health information held by the Government of Nunavut falls under the territorial access statute, which covers the public sector, and under scattered provisions of the Public Health Act. There is no Nunavut counterpart to the health statutes of Saskatchewan, Manitoba, Yukon or the Northwest Territories.

The territory is reported to be working on such a statute. We found no adopted text, so we will not present a hypothetical law as a deadline. When a text exists, this page will change and will carry its date.

Why federal law applies, and how to say it properly

Your business falls under federal law because the territory has not enacted a statute declared substantially similar to Part 1 of that act. It is not because a northern small business would be a federally regulated undertaking: such an undertaking, in the meaning of the act, is a bank, a telecommunications carrier, an interprovincial transport company.

The distinction is not cosmetic. It explains why the conclusion is identical across the three territories, Manitoba, Saskatchewan, Ontario, Prince Edward Island and the Atlantic provinces: none of those jurisdictions has a general private-sector statute in force.

We owe one caveat: that statement rests on an absence observed across every source we were able to read, including the Canada Gazette consolidated index, and not on a reading of the authoritative federal list — that page was unreachable to us.

Nunavut: the commissioner's office, and what it covers

Nunavut has its own information and privacy commissioner's office, with an online complaint form. We read its home page on 15 September 2026, and it is that page which confirms the absence of a territorial health statute.

Its jurisdiction runs to the access statute, so to public bodies. A customer complaint about your business's use of their information goes to the Office of the Privacy Commissioner of Canada.

We name no current office-holder: the Northwest Territories and Nunavut shared a single commissioner until her retirement, around the turn of 2020 and 2021, and the two territories have had separate commissioners since. The names we came across date from that period and were not rechecked.

Recording a call: what the law actually asks

Section 184 of the Criminal Code makes it an offence to intercept a private communication, but its exception in section 184(2)(a), read with section 183.1, is satisfied by the consent of one party. A business that is a party to a call can therefore record it without committing that offence. Privacy law is a separate and cumulative regime.

That a recording is no offence says nothing about whether it is lawful under privacy law. This second regime asks you to tell the caller at the start of the call that it is recorded, state the purpose clearly, refrain from using it afterwards for a different purpose, offer an alternative to someone who declines, give access to the recording on request, and limit retention.

At Zenvox the disclosure is spoken before the microphone opens, on every call, and it cannot be switched off. What the receptionist asks after that comes from your instructions: you set what is necessary, and you stay responsible for it.

The federal breach rule, and what leaves the territory

Since 1 November 2018 you must report to the federal commissioner and notify affected individuals of any breach of security safeguards creating a real risk of significant harm, and keep a record of every breach for 24 months from the day you conclude it occurred.

The split holds in the north too: territorial law, where it exists, governs what happens in the territory; federal law governs information moving out of the territory or out of the country. With no general territorial private-sector statute, federal law already covers, in all three territories, commercial activity inside the territory and beyond its borders. What leaves in our case, and for how long, is written at the foot of this page; we do not rewrite it here.

Federally, nothing new is in force: Bill C-27 died on the Order Paper on 6 January 2025, and Bill C-36, tabled on 15 June 2026, stood at second reading on 23 October 2026, without royal assent.