Access logs should collect enough information to support the property’s access purpose without becoming an unnecessary store of personal information.
At a glance
- Privacy principles support limiting collection to information needed for the identified purpose.
- Ontario training recognizes that guards handle personal information and must know how it is stored, used and destroyed.
- Access-control procedures vary by property; there is no universal need to collect every possible identifier.
What this means in practice
The official rules establish a baseline, but a workable security assignment still needs property-specific decisions. The client and provider should turn general requirements into clear instructions about what is checked, who can authorize exceptions, what must be documented and when another authority takes over.
Questions to confirm
- Why is each field in the log needed?
- Who can view the log?
- How long is it retained?
Picture this at your property
A reception desk asks every visitor for a home address even though the only need is to confirm the visitor’s name, host and time of entry. The organization should review whether the extra information is necessary.
The value of the example is the decision process: identify what is known, what remains uncertain, who has authority, and what information should be preserved for follow-up.
Practical takeaway
The strongest security process is usually the one that makes responsibilities, observations and escalation clear. That creates a service that can be understood and reviewed without overstating what security can guarantee.
Official sources & verification
1. Privacy Guide for Businesses — Office of the Privacy Commissioner of Canada
2. Section 8: Legal authorities — Government of Ontario
3. Section 3: Basic security procedures — Government of Ontario
Last reviewed: 2026-08-08. This resource provides general Ontario information and is not legal advice. Legal authority and obligations depend on the facts, the property, the applicable law and current official guidance. Confirm current requirements with the responsible government authority or qualified legal counsel when a decision has legal consequences.