
Privacy and security statement
Last Updated: September 24, 2025
The Workers Compensation Act Legislative Review Committee 2025-2026 (also referred to as the “LRC”, “we”, or “us”) has been established under The Workers Compensation Act (Manitoba) (the “Act”) to conduct a comprehensive review of the Act (the “Review”). The purpose of the Review is to ensure that the Act is up-to-date and modern for today’s workplaces and the workplaces of tomorrow.
As part of the Review, the LRC is gathering input from workers, employers, and the public to identify perspectives about and concerns with the Act and the workers’ compensation system. The LRC is dedicated to protecting your privacy and safeguarding your personal information. We recognize the importance of providing you with information about how we handle the personal information you provide to us, which is why we have developed this statement (the “Privacy and Security Statement”).
The Privacy and Security Statement applies to information that we collect about you, including information collected through our website (the “Website”). Regardless of how you provide information to us, we use vigorous and effective security safeguards and adhere to privacy principles to ensure your personal and confidential information is protected. These safeguards are built upon and comply with Manitoba legislation, including The Personal Health Information Act (PHIA), The Freedom of Information and Protection of Privacy Act (FIPPA) and the Act.
The LRC reserves the right to change this Privacy and Security Statement at any time. Whenever we update this Privacy and Security Statement, we will update the date above to indicate when changes were made. Please check for changes regularly.
- Use of the LRC Website
By accessing, uploading materials to or otherwise using the Website, you (user) indicate that you have read, understood and agree to the terms of this Privacy and Security Statement and our practices regarding the collection, use, disclosure and retention of personal information.
- Collection, Use and Disclosure of Personal Information
Collection and Use
You can visit the Website without telling us who you are or revealing any information about yourself. Our web servers only collect IP addresses of visitors to the Website. We use this information to produce usage statistics such as number of visits, average time spent on the Website, pages that were viewed, type of browser, date/time visited, etc., but do not use this information to identify you. These usage statistics are used for the purpose of improving the content, navigation, and usability of the Website.
If you utilize the contact us page on the Website, send us an email or otherwise contact us to provide your input for the Review, that input may include your personal information. The LRC collects personal information pursuant to section 36(1) of FIPPA, section 13(1) of PHIA and the Act when the information relates directly to and is necessary for the Review. You may be required to provide your name, email address and/or phone number to submit your input for the purpose of verifying your identity and contacting you to discuss your input.
Personal information may be collected through the Website, email and in follow up discussions for such purposes as:
- Assessing whether the current system is fair to both workers and employers and provides adequate compensation in a sustainable, no-fault, collective liability system;
- Identifying perspectives about and concerns with the Act and the workers’ compensation system;
- Evaluating stakeholder satisfaction with the current administration of the Act;
- Comparing, to the degree possible, Manitoba’s system with other workers’ compensation systems in Canada, and identifying potential leading practices that may be adopted here.
- Examining emerging issues such as psychological injuries, technological and workforce changes (e.g., Al, “gig” work), and assessing the Workers Compensation Board of Manitoba’s (the “WCB”) readiness to respond to them.
- Examining issues facing self-insured (individually assessed) organizations such as administration costs;
- Identifying areas of ambiguity or inconsistency in the Act and opportunities to make the Act clearer and more accessible through plain language drafting;
- Making recommendations that enhance the fairness and responsiveness of the system to the changing needs of Manitoba workers and employers;
- Examining legislative provisions related to coverage specifically related to psychological injuries;
- Evaluating the threshold for causation in occupational disease claims;
- Reviewing legislative provisions governing wage loss benefits, pensions, and death benefits to assess whether the legislation adequately protects the financial security of injured workers and their families;
- Reviewing the Act’s provisions relating to the role of WCB health care advisors in the context of workers’ right to select their own health care providers; and
- Examining the current structure supporting the WCB’s injury prevention efforts with the aim of maximizing effectiveness to reduce workplace injuries and illness.
The LRC limits the amount and type of information collected to only the personal information that is required for the above purposes. The LRC will not be reviewing individual compensation claims, employer accounts, or other WCB operational issues. Please refer questions about claims or assessment to your Claim Owner or appropriate WCB contact.
The LRC will not use personal information for any purpose other than that identified at or before the time of collection unless otherwise permitted by law.
The LRC will prepare and provide a final report with recommendations to the Manitoba government based on its findings with respect to the above (the “Report”). Any personal information provided to us will be aggregated and/or anonymized before being included in the report. The Report will not include any individual’s personal information, unless that individual has provided their express consent.
Disclosure
The LRC will treat all personal information received or accessed as confidential and will not disclose it in any manner except as authorized under the Act, FIPPA, or PHIA or otherwise permitted or required by law, or when consent for disclosure has been provided. The LRC may disclose personal information it has collected, for example to its lawyers, without the individual’s knowledge or consent where permitted or required by law to disclose the information.
The LRC does not sell or trade any personal information with third parties. Information may be transferred to third parties where information processing is outsourced by the LRC during the Review. Where personal information is transferred to a service provider for processing, the LRC has measures in place, including contractual measures, to ensure that personal information is subject to appropriate safeguards in accordance with the LRC’s obligations under FIPPA and PHIA. Service providers are restricted from using or disclosing personal information transferred to them for any purpose other than the provision of services to the LRC.
- Consent
If you submit personal information to us related to the Review, you consent to the collection and use of that information for the purposes of conducting the Review, including anonymizing or aggregating that personal information for inclusion in the Report. If the LRC wants to include your personal information in the report, for example, a quote attributable to you, the LRC will seek that consent from you prior to disclosing the personal information. If you have provided personal information after consent has been provided for particular uses and disclosures, this will be interpreted as your consent to those uses and disclosures of the new information unless you expressly state otherwise.
When consent is required, the LRC will not use or disclose personal information for any purpose other than that for which consent has been provided or as otherwise permitted by law. Should the LRC need to use or disclose personal information for a new purpose, consent will be sought for that new purpose to the extent required by law.
- Accuracy of and Access to Personal Information Collected
The LRC makes every effort to keep personal information as accurate, complete, current and relevant as necessary for the identified purposes.
You are entitled to access your personal information, subject to certain exceptions. Upon request, and to the extent required by law, we will provide you with access to your personal information (subject to the below) to review its accuracy within a reasonable time. You can use the contact information below to request access to your personal information.
Sometimes we may be prevented from providing you with access to some or all of your personal information. FIPPA and PHIA set out circumstances where we may or are required to deny access, for example if giving you access to your personal information could reveal personal information about another individual that can’t be severed. If an exception to access applies, we’ll explain our reasoning.
- Safeguarding Personal Information
The Internet has revolutionized the way we do business. It allows us to interact with you in a personal way to offer information, to add additional value, to listen to your opinions, and to provide services that you can access from the convenience of your home, office or mobile device. At the same time, the Internet also brings legitimate concerns about privacy and security. The LRC is dedicated to protecting your privacy and safeguarding your information. By explaining our position on security to you we hope you will better understand how we will keep your information private and secure while using it to serve you better.
Protection of Information in Transit
When you use the contact us page on the Website, the information communicated between your web browser and our web server is protected by encrypting the data using Secure Socket Layer (SSL) encryption.
Protection of Stored Information
Unfortunately, no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while the LRC strives to protect personal information, it cannot ensure or warrant the security of any information transmitted to it or received from it electronically. This is especially true for information transmitted via e-mail.
Once received, access to personal information is restricted to the members of the LRC, which is a four-person committee. These individuals are knowledgeable about and committed to the LRC’s privacy obligations. In addition, persons who are supporting members of the LRC in conducting their duties may be given personal information to the minimum amount required to complete a particular task.
The LRC retains personal information based on legal reporting and/or retention requirements. Any personal information that the LRC retains is kept in such a manner as to ensure its security and confidentiality at all times. Security measures include technical and procedural measures consistent with best practices in information security to protect stored information.
These measures include:
- Utilizing a series of firewalls to protect the information and computing resources,
- Virus protection of all computing resources,
- Monitoring system and application logs to identify any unusual activity from authorized or unauthorized individuals accessing our systems,
- Providing access to information and system functions only to those who have a need and a right,
- Physically securing the facilities where the computing resources are located, and
- Conducting periodic third party vulnerability assessments.
- Cookies on the Website
Cookies are small text files stored on your device browser such as Chrome or Edge when you visit websites. This Website uses cookies to enhance your browsing experience. These cookies may gather information about your general internet use to help the Website work properly.
Some cookies are required for technical reasons for the Website to operate, while other cookies are used to collect information that is used either in aggregate form to help us understand how the Website is being used.
If you prefer to avoid the use of cookies on our website, you can disable their use in your browser’s settings. You can also delete cookies in your browser’s settings. However, if you delete cookies or refuse to accept them, you might not be able to use all of the features we offer and some of our pages might not display properly.
- Questions
Any questions about the LRC’s handling of personal information should be directed to the Access and Privacy Officer, who can be reached by using our contact form or at:
Mail: The Workers Compensation Act Legislative Review 2025-2026
Attention: Access and Privacy Officer
PO Box 309, Station Main, Winnipeg, MB R3C 2H6