Home › Municipal AI Track › Manitoba Municipalities
Manitoba — FIPPA

Manitoba municipalities: your staff are already using AI.
An Ombudsman investigation
is the wrong way to find out.

Manitoba's Freedom of Information and Protection of Privacy Act places clear information practice obligations on local public bodies — including municipalities. And unlike other provinces, AI governance complaints in Manitoba go to the Ombudsman, not a quiet privacy regulator. Spencer Morley Consulting helps Manitoba municipalities build the governance program FIPPA requires, before a complaint forces their hand.

Check Your FIPPA Position See All Municipal Services
Manitoba's Unique Enforcement Risk — The Ombudsman, Not an IPC

Manitoba is the only province where AI governance complaints go to the Ombudsman rather than a dedicated Information and Privacy Commissioner. This changes the character of enforcement: Ombudsman investigations are public-facing. A complaint about how your municipality handles citizen data through AI tools can become a formal Ombudsman investigation — one with a published report. A municipality without documented information practices for AI has limited ability to defend itself. The question is not whether FIPPA applies. It already does.

FIPPA
The Freedom of Information and Protection of Privacy Act (Manitoba)
Governs access to records and protection of personal information held by Manitoba public bodies. Part 2 covers local public bodies including municipalities, school divisions, and local authorities. Requires documented information practices, staff accountability, and appropriate controls on how personal information is collected, used, and disclosed.
Manitoba Ombudsman
Oversight Body — Not a Dedicated Privacy Commissioner
The Manitoba Ombudsman investigates FIPPA complaints for local public bodies. Unlike most other provinces, Manitoba does not have a dedicated Information and Privacy Commissioner. Ombudsman investigations are public processes — a key distinction that raises the reputational stakes of any AI governance complaint against your municipality.
AMM
Association of Manitoba Municipalities
The AMM is the primary association for Manitoba municipal governments. It has increasingly flagged digital governance and data privacy as operational priorities as AI adoption accelerates across Canadian local governments. Spencer Morley Consulting's Municipal AI Framework addresses the governance gap that AMM guidance points to.
Information Practices
FIPPA Documentation Requirement for Local Public Bodies
FIPPA requires local public bodies to document how they collect, use, and disclose personal information. Most Manitoba municipalities have not extended this documentation to cover AI tools — creating a gap that applies right now, with no deadline required to make it actionable. Shadow AI use by staff may already represent undocumented information practices.
The Problem in Manitoba

Shadow AI is already in your municipality.
FIPPA makes it a compliance issue.

National research on Canadian public sector AI use applies directly to Manitoba local governments. The numbers are not hypothetical — they describe what is almost certainly already happening in your organization right now.

48%
of Canadian public servants are already using AI tools on the job — without formal authorization or training
22%
of organizations have a formal AI adoption policy in place — the other 78% have an unmanaged risk
50%
of AI users rely on publicly available tools — ChatGPT, Gemini, Copilot — tools with no guaranteed Canadian data handling
85%
of Canadians lack confidence in how the public service uses AI — making an Ombudsman complaint politically and reputationally costly

Source: KPMG Canada, 2025

What We Do for Manitoba Municipalities

Five services. One framework.
Built around FIPPA.

Every engagement is adapted to Manitoba's specific legislative requirements — not a copy-paste Alberta template. Delivered remotely, available to any Manitoba municipality regardless of size or location.

01
AI Readiness Assessment
A structured diagnostic of your municipality's current AI exposure, shadow AI risk, and FIPPA compliance gaps — including whether your current tools have documented information practices as FIPPA requires. Delivers a plain-language roadmap your council can approve. The right starting point before any other investment — and the right evidence to have on file if an Ombudsman complaint ever arrives.
Start HereFIPPA Aligned
02
Staff AI Training & Prompt Engineering
Practical training on what Manitoba municipal staff can and cannot use AI for under FIPPA — specifically covering personal information handling, unauthorized disclosure risks, and the accountability obligations that apply to local public bodies. Staff learn both the compliance framework and how to use sanctioned AI tools effectively. Available remotely or on-site anywhere in Manitoba.
FIPPA ComplianceRemote or On-Site
03
AI Policy Development
A formal AI Acceptable Use Policy grounded in FIPPA and designed for Manitoba council adoption. Covers sanctioned tools, prohibited uses involving citizen personal information, information practice documentation as FIPPA requires, and staff expectations. Written so that a CAO without legal background can implement it — and that the Manitoba Ombudsman would recognize as a genuine, good-faith governance program.
FIPPA-GroundedCouncil-Ready
04
Private LLM Deployment
A private AI instance hosted within Canadian infrastructure — keeping citizen data within your systems, under your control. Your staff get a capable AI tool. No US server exposure. No IT department required to maintain it. Because FIPPA's information practice documentation requirements extend to any AI tool your municipality uses, a private deployment with clear data governance is the cleanest compliance path available.
Canadian InfrastructureFIPPA-Compliant
05
Agentic Workflows
Municipal administrative automation — meeting minutes, council agendas, bylaw drafting, permit correspondence, report generation, ratepayer communications — built privacy-by-design and with explicit human oversight. Every workflow is scoped to comply with FIPPA's information practice requirements for Manitoba local public bodies, so your documentation is complete before any complaint could arise.
Privacy-by-DesignFIPPA-Compliant
Manitoba Municipality FAQ

Questions from Manitoba CAOs and municipal administrators

We don't have an IPC in Manitoba — does that mean less enforcement risk?

Not at all — and in some ways the opposite is true. Manitoba is the only province where AI governance complaints go to the Ombudsman rather than a dedicated privacy commissioner. Ombudsman investigations are public-facing processes. Unlike a privacy commissioner's order, an Ombudsman investigation and published report can become a headline. A municipality that cannot show it has documented information practices and an AI governance program faces reputational risk that goes beyond a regulatory fine. The absence of a dedicated IPC does not reduce your exposure — it changes its character.

We're a small Manitoba municipality with limited staff. Is this service right for us?

Yes — small municipalities are exactly who this service is built for. Large organizations have legal counsel and dedicated privacy officers. Small Manitoba municipalities, rural municipalities (RMs), towns, and villages typically don't — and generic enterprise-level compliance templates don't work for a small team. Spencer Morley Consulting's Municipal AI Framework is designed for small teams, delivered remotely, and sized appropriately for the reality of Manitoba local government.

Does FIPPA apply to AI tools our staff use on the job?

Yes. FIPPA's obligations apply to how your municipality handles personal information, regardless of the tool used. When a staff member uses a public AI tool to process, summarize, or draft content involving citizen personal information, FIPPA's requirements around collection, use, and disclosure apply. FIPPA also requires local public bodies to document their information practices — a standard most Manitoba municipalities have not yet extended to AI tools. That documentation gap is the core of what Spencer Morley Consulting helps close.

What is the AMM's position on AI governance for Manitoba municipalities?

The Association of Manitoba Municipalities has increasingly flagged digital governance and data privacy as operational priorities for Manitoba local governments as AI adoption accelerates. AMM guidance consistently points toward the need for formal policy, staff training, and documented accountability structures — which aligns directly with what Spencer Morley Consulting's Municipal AI Framework delivers.

Further Reading
Risk ManagementWhat Is Shadow AI in Municipalities? The Risk Your Policy Hasn't Addressed.48% of Canadian public servants already use AI. Most municipalities have no governance. Under FIPPA, that's a problem. → How-To GuideHow to Build an AI Policy for Your Municipality — A Plain-Language Framework7 steps to a policy that satisfies your province's legislation and that staff will actually follow. → Framework OverviewThe Municipal AI Framework — What It Is and Why Canadian Municipalities Need ItAn overview of the five-service framework Spencer Morley Consulting delivers to Canadian local governments. →
Manitoba Municipalities

FIPPA compliance isn't optional.
Proactive is better than reactive.

Your staff are using AI today. FIPPA's information practice documentation requirements apply now — no deadline required. And if a complaint is filed, the Ombudsman process is public. Let's talk about where your municipality stands.

Book a Consultation