How Municipal GIS Is Changing the Meaning of Privacy in Ontario
A generation ago, if a municipal official wanted to know what was behind your house, someone generally had to go there. Today, an employee sitting at a computer can potentially call up detailed aerial imagery of your property, overlay property lines and zoning, examine buildings and other features, and compare photographs taken years apart.
The technology is called GIS — Geographic Information Systems — and it has become an extraordinarily useful part of municipal government. Ontario municipalities use GIS to locate watermains, manage roads, plan development, map flooding, dispatch emergency services and maintain public infrastructure. Ontario’s own imagery program acquires aerial photography of populated areas, and much of what residents casually call “satellite imagery” is actually high-resolution orthophotography taken from aircraft and incorporated into sophisticated digital maps.¹
There is nothing inherently improper about any of that.
But a technology designed to map a culvert can also look into a backyard. A system developed for planning can potentially be used for bylaw enforcement. Historical photographs can reveal when something changed on a property. GIS can be combined with addresses, permits, complaints, assessment information and other government databases.
That raises a question municipalities across Ontario should answer before technology gets further ahead of policy:
When does mapping become monitoring — and when does monitoring become surveillance?
For property owners, the answer matters. The ability of government to see something does not necessarily mean government should be free to examine, catalogue and use it for any purpose it chooses.
GIS Is Becoming Part of Everyday Municipal Government
Prince Edward County provides a useful case study, but this is not primarily a Prince Edward County issue. GIS systems are now commonplace throughout Ontario.
PEC operates public mapping tools containing property, zoning and other geographic information. The Picton Gazette has reported on the County’s expanding use of GIS and 3-D mapping, including municipal discussions about developing a formal geospatial strategy as the technology becomes increasingly important across departments.²
Similar systems exist throughout Ontario. Counties and municipalities use aerial imagery for planning, transportation, emergency response, environmental monitoring, infrastructure management, drainage and numerous other legitimate functions.
The Municipal Property Assessment Corporation — MPAC — also uses digital imagery among the sources it may rely upon in gathering property information.³
The concern is therefore not that municipalities possess maps or photographs.
It is what happens next.
Modern GIS is no longer simply an electronic version of a paper map hanging on the wall of the planning department. Multiple datasets can be layered together. A municipal employee may be able to view a parcel boundary, address, zoning designation, aerial photograph and infrastructure information on the same screen. Depending on the system and available records, historical imagery can potentially show how a property changed over time.
Add increasingly sophisticated image-recognition technology and artificial intelligence, and it is not difficult to imagine software eventually identifying physical changes automatically.
A new shed appears.
A pool appears.
Trees disappear.
A driveway expands.
A structure changes.
Technology could potentially flag those differences across thousands of properties without anyone receiving a complaint.
That would represent a profound change in the relationship between citizen and local government.
Ontario’s Privacy Commissioner Warned About This
Concerns about GIS and privacy are not speculative inventions of people suspicious of government.
Ontario’s Information and Privacy Commissioner (IPC) examined the privacy implications of geographic information systems years ago. Its guidance recognized that GIS can combine information that was previously scattered across separate records and make that information considerably more powerful.
The IPC urged public institutions to consider whether identifiable information is necessary, whether less intrusive alternatives exist, who can access information, how it will be used and what safeguards prevent unrelated uses. Most significantly, the Commissioner warned that GIS should improve government programs and services rather than become an instrument of **“social control or surveillance.”**⁴
That warning deserves renewed attention.
GIS technology today is dramatically more capable than when many of those privacy principles were first developed.
Is Looking at Your Backyard Illegal?
Not necessarily.
That distinction is important if this debate is going to remain credible.
An aerial photograph showing a roof, driveway, barn, swimming pool or shed is not automatically “personal information” under Ontario privacy law simply because somebody owns the property. Information describing the physical characteristics of land can be information about the property rather than information about an identifiable individual.
But context matters.
If imagery reveals identifiable individuals, their activities, vehicles or other personal details, or if geographic information is combined with municipal records in a way that reveals information about an identifiable person, Ontario’s privacy legislation can become much more significant.
Ontario municipalities are principally governed by the Municipal Freedom of Information and Protection of Privacy Act — MFIPPA. The federal Privacy Act generally applies to federal institutions, not municipal governments.⁵
MFIPPA establishes boundaries around the collection, use and disclosure of personal information by municipalities.
Section 28(2), for example, restricts municipal collection of personal information to circumstances where collection is expressly authorized by statute, used for law enforcement, or necessary to the proper administration of a lawfully authorized activity.⁶
Sections 31 and 32 restrict how personal information held by a municipality can subsequently be used and disclosed, while section 33 addresses what constitutes a consistent purpose.⁷
The underlying principle is straightforward.
Government does not acquire an unrestricted right to use personal information simply because it possesses it.
When Could GIS Cross the Line?
There is an important difference between a bylaw officer receiving a complaint about an allegedly illegal building and consulting municipal imagery as part of that investigation, and a municipality systematically searching thousands of residential properties hoping to discover violations.
The first involves investigating an identified issue.
The second begins to resemble surveillance.
Several practices should therefore raise legitimate privacy questions.
A municipality could encounter problems if employees systematically examined residential properties without an authorized purpose; if imagery collected for planning was repurposed for unrelated investigations involving personal information without lawful authority; if GIS information were combined with other databases to create profiles of identifiable residents; if staff accessed information for personal reasons; if inaccurate imagery were relied upon to make decisions affecting residents; or if detailed information were improperly disclosed.
The emergence of artificial intelligence makes another possibility particularly important.
Imagine software capable of comparing every aerial photograph taken in 2026 with imagery from 2021 and automatically generating a list of properties where a physical change occurred.
That technology may soon make something possible that would previously have required hundreds of inspectors.
The fact that government can do it does not answer whether government should do it.
Privacy Breaches in Government Systems Are Not Hypothetical
One response to these concerns is that municipal employees are professionals and can be trusted to use information appropriately.
The overwhelming majority undoubtedly do.
But Ontario’s experience demonstrates why privacy protection cannot depend exclusively upon trust.
Government and health databases have been accessed without authorization before. Some cases have resulted in regulatory findings, discipline, prosecution and substantial penalties.
One particularly striking Ontario case involved a master’s of social work student working with a family health team in Central Huron. She accessed the health records of 139 people without authorization, including relatives, friends, clinic employees, local politicians and other members of the community. She ultimately pleaded guilty under Ontario’s Personal Health Information Protection Act (PHIPA) to wilfully accessing the personal health information of five individuals without authorization. The court imposed a $20,000 fine plus a $5,000 victim surcharge. The IPC described it at the time as Canada’s largest fine for a health privacy breach.⁸
The case demonstrates something fundamental about electronic government records.
The institution may have every right to possess the database.
That does not give every person with technical access the right to look inside it.
Hospital Snooping Shows Why Audit Trails Matter
Ontario’s health sector provides further examples.
In 2026, the Information and Privacy Commissioner reported on unauthorized access incidents at Lakeridge Health involving several workers, including clinical and administrative personnel. Particularly concerning was the finding that in some circumstances employees retained electronic-record access during an investigation and subsequently made additional unauthorized accesses.⁹
Ontario has strengthened the consequences for health privacy violations. Individuals convicted of offences under PHIPA can potentially face fines of up to $200,000, imprisonment for up to one year, or both, while organizations can face fines of up to $1 million.¹⁰
Again, medical information and municipal GIS imagery are plainly not equivalent. Health records are among the most sensitive categories of personal information imaginable.
The relevance is the governance lesson.
If an electronic database contains information people have an incentive to look at, access should be controlled and inappropriate searches should be detectable.
That principle should apply to municipal information systems as well.
Police Databases Provide Another Warning
Ontario’s privacy regulator has encountered similar problems in policing.
In a 2022 investigation involving the Toronto Police Service, the IPC concluded that an employee had conducted unauthorized database searches relating to two complainants and verbally disclosed their personal information to another police employee. The Commissioner found that the unauthorized searches violated section 31 of MFIPPA and the disclosure violated section 32.¹¹
Significantly, the IPC also concluded that reasonable measures had not been in place to prevent unauthorized access and disclosure and recommended improvements involving auditing, verification, guidance and training.
This is directly relevant to municipal GIS governance.
It demonstrates that privacy legislation regulates not simply whether government is legally entitled to possess information, but what government employees subsequently do with it.
More recently, serious allegations involving unauthorized police information have arisen in Ontario criminal investigations. Those allegations must be distinguished carefully from established privacy findings: charges are allegations until proven in court. They nevertheless demonstrate why privileged access to government information requires rigorous safeguards.
What About the OPP?
The Ontario Provincial Police operates under a different institutional framework from municipal government, and police information is governed by privacy legislation and specialized rules governing law-enforcement information.
Police legitimately have access to information ordinary citizens do not.
That access is necessary for policing.
It is precisely because the information is powerful that unauthorized searches can lead to disciplinary proceedings and, depending on the circumstances, other legal consequences.
The lesson for municipalities is not that a GIS database should be treated like a police intelligence system. It is that government databases should operate on a need-to-know basis rather than a technically-able-to-look basis.
Municipal Enforcement Powers Are Real — But They Are Not Unlimited
Property owners should also understand the context. Section 436 of Ontario’s Municipal Act, 2001 permits municipalities to enact bylaws for purposes including inspecting compliance with municipal bylaws, directions, orders and licence conditions.¹² Other legislation, including the Building Code Act, gives officials inspection and enforcement powers in appropriate circumstances.¹³
The danger comes from treating legitimate enforcement authority as permission for indiscriminate observation.
There is a reasonable privacy concern with:
“Let’s examine every property until we find something to investigate.”
Technology is making the second approach increasingly inexpensive. But municipal staff can be criminally charged and prosecuted for privacy violations.
Privacy law and municipal policy need to keep pace.
The Charter Provides Another Layer of Protection
MFIPPA is not the only relevant source of privacy rights.
Section 8 of the Canadian Charter of Rights and Freedoms protects against unreasonable search and seizure where an individual has a reasonable expectation of privacy.
The Supreme Court of Canada examined technological observation of a home in R. v. Tessling, 2004 SCC 67. Police had used an aircraft-mounted thermal-imaging device to examine heat patterns emanating from a residence.
The Supreme Court ultimately found no section 8 violation on those particular facts because the technology disclosed limited information. But Tessling established an important principle: the constitutional analysis depends in part upon what the technology reveals and the privacy interest involved.¹⁴
Ordinary aerial photography taken periodically is plainly different from continuous surveillance of a residence.
But that distinction cuts both ways.
Something does not automatically become privacy-free merely because technology allows government to observe it remotely.
As surveillance capabilities become more intrusive, persistent and capable of revealing information about people’s activities, the constitutional analysis can change.
The next Council has an Opportunity to Set the Standard
The concern is not an allegation of wrongdoing.
It is about establishing safeguards before increasingly powerful technology makes abuse possible.
For example, Prince Edward County’s discussion about developing a more formal geospatial strategy therefore presents an opportunity.
Councils across Ontario should adopt a clear GIS Privacy and Enforcement Policy applicable to every municipal department.
At minimum, residents should be entitled to know who has access to non-public GIS information, whether employee searches are logged, whether historical imagery is used for enforcement, whether GIS can initiate an investigation without a complaint, whether automated image analysis is used, what information is retained, how long it is retained and how residents can challenge inaccurate information.
Access to sensitive layers should be role-based.
Searches involving enforcement should be auditable.
Where practical, there should be a documented reason for accessing information for enforcement purposes.
And any future program involving systematic automated examination of residential properties should require explicit council approval following public debate and appropriate privacy review.
Ontario is also strengthening privacy requirements. Changes taking effect in 2027 expand privacy-impact-assessment and breach-related obligations for institutions covered by MFIPPA, making privacy-by-design increasingly important for municipal technology projects.¹⁵
What Residents Can Do
Property owners do not have to simply wonder what their municipality knows about them.
Ontario’s freedom-of-information regime allows residents to request municipal records. A resident concerned about GIS surveillance can request policies governing aerial imagery and enforcement, GIS access-control policies, privacy impact assessments, contracts with imagery or software suppliers, retention policies and records explaining whether automated property-change detection is being used.
Residents can ask the municipal Clerk or privacy coordinator a series of very simple questions: Does the municipality use aerial imagery for bylaw enforcement? Can GIS searches initiate investigations? Who can search historical property imagery? Are searches logged? Is artificial intelligence or automated change detection being used?
If a resident believes personal information has been collected, used or disclosed contrary to MFIPPA, a privacy complaint can be made to Ontario’s Information and Privacy Commissioner.¹⁶
And where municipal imagery is being used as evidence in an enforcement proceeding, property owners should ask to see it. They should establish when the image was captured, what it actually depicts, how accurately parcel boundaries have been overlaid, what other evidence supports the allegation and what statutory or bylaw authority is being relied upon.
An aerial photograph is not automatically proof of a violation.
The Government May Own the Database. It Does Not Own Your Privacy.
GIS is extraordinarily valuable technology.
Nobody should want firefighters navigating rural roads without accurate mapping. Engineers need to know where pipes are buried. Planners need geographic information. Conservation and emergency officials need to understand watersheds, flooding and environmental hazards.
But every increase in government’s ability to observe citizens should be accompanied by an equally serious discussion about limits.
Ontario’s experience with health and police databases demonstrates why.
The vast majority of public employees use information properly. Yet Ontario has nevertheless experienced unauthorized searches, privacy investigations, prosecutions and substantial penalties. The answer has never been to eliminate useful databases. It has been to strengthen access controls, auditing, accountability and consequences for misuse.
Municipal GIS should be treated the same way.
A municipality should be able to explain who can look at your property, why they can look, what they can do with what they see, how long information is retained and whether anyone is checking that those powers are not being abused.
The ability to look does not answer the question of when government should look.
The ability to collect does not create a right to collect everything.
And the ability to examine every backyard in a municipality does not mean government should do so merely because technology has made it possible.
A mapping tool should remain a mapping tool. When it becomes an enforcement tool, residents deserve to know. When it becomes a surveillance tool, elected councils should have to justify it publicly.
The government may own the database.
It does not own your privacy.
Footnotes and Sources
1. Ontario Ministry of Natural Resources, Geospatial Ontario and Ontario Imagery Program — provincial aerial and satellite imagery programs.
2. The Picton Gazette, coverage of Prince Edward County GIS and 3-D mapping.
3. Municipal Property Assessment Corporation, property inspections and sources of property information, including digital imagery.
4. Information and Privacy Commissioner of Ontario, guidance concerning Geographic Information Systems and privacy, including consideration of surveillance, collection, data matching and safeguards.
5. Information and Privacy Commissioner of Ontario, privacy obligations of organizations governed by FIPPA and MFIPPA.
6. Municipal Freedom of Information and Protection of Privacy Act, R.S.O. 1990, c. M.56, s. 28.
7. MFIPPA, ss. 31–33, governing use and disclosure of personal information and consistent purposes.
8. Information and Privacy Commissioner of Ontario, Health Record Snooping Case Prosecuted in Goderich, March 16, 2017. The offender admitted accessing 139 records without authorization and pleaded guilty in relation to five individuals; $20,000 fine plus $5,000 victim surcharge.
9. Information and Privacy Commissioner of Ontario, PHIPA Decision 335, April 24, 2026, concerning unauthorized access incidents at Lakeridge Health.
10. Information and Privacy Commissioner of Ontario, explanation of potential consequences for PHIPA breaches, including maximum offence penalties.
11. Information and Privacy Commissioner of Ontario, Privacy Complaint Reports MC19-00058 and MC19-00059, Toronto Police Services Board, September 16, 2022 — unauthorized database searches and disclosure.
12. Municipal Act, 2001, including municipal inspection/entry provisions.
13. Ontario guidance concerning building permits and municipal inspection responsibilities under the Building Code Act.
14. R. v. Tessling, 2004 SCC 67, Supreme Court of Canada — section 8 analysis of aircraft-mounted thermal imaging directed at a private residence.
15. IPC information concerning Ontario’s strengthened MFIPPA privacy requirements, including changes taking effect January 1, 2027.
16. Information and Privacy Commissioner of Ontario, information for individuals concerning privacy rights and complaints under MFIPPA.