Leaders in privacy, compliance & information governance solutions

Welcome. Log in or create an account for AccessPrivacy.com

Steven Morgan, CIPP/C

Managing Consultant

(613) 787-1123


Steven manages the AccessPrivacy consulting arm of Osler’s privacy and data management practice. He provides a broad range of privacy and risk-management advice to the private sector. He conducts privacy reviews and audits; designs privacy and CASL compliance monitoring programs; advises on privacy and outsourcing governance and accountability programs; advises on records-management programs; designs and assesses privacy control frameworks; drafts policies, procedures and training materials; assists with data incidents, responses, investigations and remediations.

Prior to joining Osler, Steven was the Director General of the Audit and Review Branch at the Office of the Privacy Commissioner of Canada from 2009 to 2017. In this capacity, he oversaw hundreds of privacy reviews, audits and privacy impact assessments to verify whether public and private sector organizations were adequately managing the personal information of Canadians.

Prior to joining the Office of the Privacy Commissioner, Steven was a Director with the Office of the Auditor General where he was in charge of undertaking various audits. Steven graduated in 1992 as a civil engineer from the University of Waterloo.


•      International Association of Privacy Professionals

•      Professional Engineers of Ontario

Pro Bono/Community Work

Streetsmarts Outreach, volunteer

Jewish Family Services, Board Member


Previous Speaking Engagements

•     IAPP KnowledgeNet, Speaker, Stepping out of the breach:  Preparing for WHEN the time comes, Toronto, April 19, 2018

•    2017 AccessPrivacy Annual Privacy Conference,  Speaker, Anatomy of an OPC Audit, Toronto, June 21, 2017


•    Author, "Preparing for the Canadian Data Breach Reporting Requirements", published in IDPP International Journal for the Data Protection Officer, Privacy Officer, Privacy Counsel, 2018 Volume 2, Issue 7

•    Author, "Private Sector Privacy Audits", published in IDPP International Journal for the Data Protection Officer, Privacy Officer, Privacy Counsel, 2017 Volume 1, Issue 1