15.2 Issue Spotting, Research & Privacy-Compliant Investigation

Key Takeaways

  • Issue spotting means separating raw facts from the legal categories (causes of action, defences, offences) they might support — a single fact pattern can raise several distinct issues
  • FIPPA governs Ontario provincial government ministries and agencies; MFIPPA (a related but separate act) governs municipalities; neither applies to private businesses
  • PHIPA governs health information custodians (hospitals, physicians, clinics) in Ontario and generally requires consent before health records are disclosed outside the client's 'circle of care'
  • PIPEDA is a federal statute governing personal information handled by private-sector organizations in the course of commercial activity, including many employers, insurers, and credit agencies
  • The P1 exam tests recognizing which privacy statute applies to a given investigative scenario, not detailed compliance analysis
Last updated: July 2026

A chronology and a document index (Section 15.1) are raw material. Issue spotting is the process of turning that raw material into a list of legal questions the file actually raises — and a single fact pattern can raise more issues than a client initially describes.

From Facts to Legal Issues

A useful discipline is to work through each cluster of facts and ask: what legal category could this support, and what would the other side argue in response? A tenant who withheld rent because of a maintenance problem, for example, is not simply "a landlord-tenant dispute" — it may raise a rent abatement argument, a maintenance obligation under the Residential Tenancies Act, a potential counter-application by the landlord, and a question about proper notice. Competent issue spotting means:

  1. Listing every arguable issue, even ones the client did not mention, before narrowing.
  2. Naming each issue in legal terms (e.g., "breach of the landlord's maintenance obligations," not just "the heat didn't work").
  3. Noting the elements or test for each issue — what would need to be proven or established.
  4. Flagging issues that belong to a different forum (a related employment issue that belongs at the Ontario Labour Relations Board rather than Small Claims Court, for instance) so nothing gets litigated in the wrong place.
  5. Distinguishing strong issues from weak ones early, so time is not spent researching a theory that cannot realistically succeed — this connects directly to the Rules of Conduct duty to discourage useless proceedings (Section 15.4).

Efficient Research With Open-Book Materials

Because the P1 exam is open-book, research speed is itself a tested skill. Efficient candidates:

  • Build a personal index cross-referencing competency areas to specific pages or tabs in the LSO materials, organized by the same categories used in the entry-level competencies.
  • Use statute-first research: identify the governing act, then the specific section, before searching for interpretive commentary.
  • Keep a running issues list per file in practice, and a running "where do I look this up" list while studying, so the exam-day search pattern is already automatic.
  • Practise the discipline of confirming a rule against the actual text of the material rather than relying on memory — the materials exist precisely because memorized approximations create errors.

Privacy-Compliant Investigation: Three Statutes to Recognize

Investigating a file — requesting records, interviewing witnesses, pulling background information — happens inside a privacy-law framework. The P1 exam expects recognition-level awareness of three regimes, not deep compliance expertise:

StatuteApplies ToWhat It Generally Requires
FIPPA (Freedom of Information and Protection of Privacy Act)Ontario provincial government ministries and most provincial agenciesGoverns how these institutions collect, use, and disclose personal information, and provides a public right to request records, subject to exemptions
PHIPA (Personal Health Information Protection Act)Health information custodians in Ontario — hospitals, physicians, clinics, and similar providersGenerally requires consent before personal health information is used or disclosed outside a client's "circle of care," with specific exceptions (e.g., certain legal proceedings, public health)
PIPEDA (Personal Information Protection and Electronic Documents Act)Federally — private-sector organizations collecting, using, or disclosing personal information in the course of commercial activity (many employers, insurers, landlords, credit bureaus)Generally requires knowledge and consent for collection/use/disclosure, subject to defined exceptions

A closely related statute worth distinguishing on sight is MFIPPA (the Municipal Freedom of Information and Protection of Privacy Act), which mirrors FIPPA but applies to municipalities rather than the provincial government — a frequent point of confusion because the names are so similar.

Applying Privacy Rules During Investigation

Recognizing which statute governs a given investigative step changes how that step should be carried out:

  • Requesting a client's own medical records for a personal injury or WSIB-adjacent matter: obtain a signed authorization citing PHIPA and directed to the specific custodian; do not assume a general retainer covers this.
  • Requesting a witness's employment or account records from a private company: this is a PIPEDA context — consent from the individual, or reliance on a defined statutory exception, is generally required before the organization will (or lawfully can) disclose.
  • Requesting records from a municipal or provincial body (e.g., a building permit file, an LTB filing): this is a FIPPA/MFIPPA freedom-of-information request, with its own timelines and exemptions, distinct from a subpoena or discovery request in active litigation.
  • Using social media or public-source evidence: publicly posted content raises fewer statutory barriers than records held by a custodian or organization, but professional obligations around how the information was obtained and verified still apply.

Confidentiality Duties vs. Privacy Legislation

Do not conflate two related but distinct obligations. The paralegal's duty of confidentiality under the Rules of Conduct governs what the paralegal may do with information learned from or about the client. Privacy legislation (FIPPA, PHIPA, PIPEDA, MFIPPA) governs how third-party record-holders — governments, health custodians, private businesses — may collect, use, and disclose personal information, including in response to the paralegal's own investigative requests. A paralegal can fully honour client confidentiality while still needing a PHIPA-compliant authorization to obtain a hospital's records.

Common Exam Traps

  • Assuming FIPPA applies to a municipality (that is MFIPPA) or to a private clinic (that is PHIPA).
  • Assuming any employer or business must simply hand over records on request — PIPEDA generally requires consent or a specific exception.
  • Treating "issue spotting" as identifying one legal problem per file, when fact patterns commonly raise several.
  • Skipping straight to research before writing down what issues are actually being researched.

Key Takeaways

  • Issue spotting means generating and naming every arguable legal issue in a fact pattern before narrowing to the strongest ones.
  • FIPPA (provincial), MFIPPA (municipal), PHIPA (health custodians), and PIPEDA (federal, private-sector commercial activity) each govern a different category of record-holder.
  • Investigative requests should be matched to the correct statute and, where required, supported by a specific signed authorization or consent.
  • The exam tests recognizing which privacy regime applies to a scenario, not performing a full compliance analysis.
  • Confidentiality to the client and privacy obligations owed by third-party record-holders are related but separate concepts.
Test Your Knowledge

Which Ontario statute governs the collection, use, and disclosure of personal health information by health information custodians such as hospitals and physicians?

A
B
C
D
Test Your Knowledge

A paralegal wants to request a witness's employment records from a private-sector employer to support a Small Claims case. Which statute primarily governs that employer's handling of the requested personal information?

A
B
C
D
Test Your Knowledge

Which type of institution's records are governed by Ontario's Freedom of Information and Protection of Privacy Act (FIPPA)?

A
B
C
D