John Wunderlich is an information privacy & security expert with extensive experience in information privacy and data security. He has designed, built, operated and assessed systems for operations and compliance in the private and public sectors for over 25 years. This includes working or consulting for Fortune 500 corporations, government ministries, small companies, volunteer organizations, regulators, and health systems organizations of all sizes. He adds value to organizations that need to meet multiple stakeholder expectations for the responsible information management of personal information. John works with organizations to enable them to focus on measurable performance and process improvement so that they can focus on risk management rather than crisis management.

Before launching his consulting practice, John served in a number of leadership capacities in both the public and private sector. These roles included Director of Privacy for Cancer Care Ontario, Senior Policy and Information Technology Advisor to the Information and Privacy Commissioner of Ontario (IPC), and Program Manager at Ceridian Canada.

John’s clients include Fortune 500 companies, government ministries, health information custodians, information technology service providers, and a variety of other organizations. John Wunderlich & Associates works with organizations to enable them to focus on measurable performance and process improvement which prioritizes risk management over crisis management.

In addition to his hands-on experience, John is a Certified Information Privacy Professional (CIPP/C), a Certified Information System Auditor (CISA), and a trained Six Sigma Black Belt. He has an MBA from the John Molson School of Business in Montreal. He is a lecturer on privacy and information management at Guelph University and is a frequently sought out speaker. He is a co-author of “Managing Personal Information” from Carswell Press and also a contributor to “Managing the Risk of Re-identification for Public Use Files”, a report for the Privacy Commissioner of Canada. John has a regular column on privacy issues for payroll and HR professionals in Dialogue, the bi-monthly magazine of the Canadian Payroll Association (CPA). John also writes for, a specialized journal for privacy professionals in Canada.

John’s interest in data protection, operational excellence, and continuous improvement are best represented by his commitment to the principles of Privacy By Design (PbD) – a made in Ontario pro-active approach to privacy protection that creates a win-win situation for the individual and the organizations the collect, use, and disclose their personal information. He is an advisor to Ryerson University’s Privacy By Design certification for organizations.

In a volunteer capacity, John serves as member of the SickKids Research Ethics Board in Toronto and is on the Canadian Advisory Committee of the Standards Council of Canada for SC27, which includes ISO standards for security and privacy. John was also a volunteer advisor to the CAISI project of St. Michael’s hospital, which was delivering a consent based open source integrated electronic medical record system to agencies working to end homelessness in Toronto. In addition, John is a member of the Board for Theatre Smith-Gilmour, a theatre company in Toronto.

For more details, please use the 'Contact' page.