Annual report to Parliament on the Administration of the Privacy Act – 2021-2022

ISSN 2816-637X

On this page

Introduction

The purpose of the Privacy Act

The Privacy Act protects an individual’s privacy by setting out provisions related to the collection, use, disclosure, retention and disposal of personal information. The Privacy Act also provides Canadian citizens, permanent residents as defined under subsection 2(1) of the Immigration and Refugee Protection Act, and individuals who are present in Canada, a right of access to information about themselves held by a federal government institution, subject to certain specific and limited exceptions. The Privacy Act Extension Order No. 3, which came into force on July 13, 2022 now allows all foreign nationals outside Canada the right to access their personal information.

Section 72 of the Privacy Act requires the Minister of Transport to submit an annual report to Parliament on the administration of the legislation following the close of each fiscal year. This report describes how Transport Canada (TC) fulfilled its responsibilities and obligations for the reporting period April 1, 2021 to March 31, 2022.

About Transport Canada

TC is responsible for developing and overseeing the Government of Canada’s transportation policies and programs so that Canadians can have access to a safe, secure, innovative and integrated transportation system that promotes trade, economic growth and a cleaner environment.

For more information about TC, visit our website.

Organizational structure

The Access to Information and Privacy (ATIP) Office is part of the Corporate Services Group. The Director of the ATIP Office is the ATIP Coordinator for TC. Consistent with best practices identified by the Treasury Board Secretariat (TBS), TC’s ATIP Coordinator is positioned within three levels of the Minister. The Coordinator reports to the Chief Financial Officer (CFO) and Assistant Deputy Minister (ADM), Corporate Services, who in turn reports to the Deputy Minister.

The ATIP Office was restructured during the reporting period and is comprised of five units, as follows:

  • Two units dedicated to access to information operations;
  • One unit responsible for access to personal information operations, internal advisory services, as well as a project to process older, late files;
  • One unit responsible for access to information policy, internal advisory services including those related to proactive publication, and ATIP Office administration; and
  • One unit responsible for privacy policy and internal advisory services related to the administration of the Privacy Act.

The majority of ATIP Office employees work in the National Capital Region. A satellite office was launched on April 1, 2021, based in the Quebec Region, at TC’s Dorval Regional Office. Within the ATIP Office, there were 8.5 person-years dedicated to privacy activities during the reporting period ending March 31, 2022. In addition, numerous TC employees and executives throughout the department were involved in the search, retrieval and preparation of recommendations to enable and inform the processing of requests in accordance with the Act, as well as in ensuring programs and activities are compliant with the Act.

The ATIP Office works closely with departmental liaison officers, who are the main points of contact between the ATIP Office and subject matter experts. They are responsible for ensuring requests tasked to their group or regional office are handled promptly and that relevant records are forwarded from offices of primary interest (OPIs) to the ATIP Office in accordance with established procedures and timelines.

Delegation Order

Responsibilities associated with the administration of the Privacy Act are delegated to departmental officials through a delegation order signed by the Minister of Transport (see Annex A for the signed Delegation Order).

At TC, the ATIP Coordinator has full delegated authority, with the exception of privacy disclosures in the public interest pursuant to section 8(2)(m) of the Privacy Act, which are delegated to the Deputy Minister, the Associate Deputy Minister and the CFO and ADM, Corporate Services.

Performance 2021–2022

This section highlights key information on the Department’s performance for fiscal year 2021-2022. See Annex B for the complete Statistical Report.

Requests under the Privacy Act

During the 2021-2022 fiscal year, TC received 168 requests for personal information, an increase from 141 requests the previous year. In addition, 24 requests were carried over from previous years for a total of 192 open requests. Of the 192 requests, 143 were completed during the reporting period. As of March 31, 2022, the ATIP Office was carrying over 49 requests to the 2022-2023 fiscal year.

Year-over-year trends

  2018-2019 2019-2020 2020-2021 2021-2022

Requests received

322

139

141

168

Requests closed

372

136

135

143

Responded within legislated deadline

87%

89%

81%

90%

During the reporting period, 90% of requests were completed within legislated deadlines, representing a marked improvement on the previous fiscal year’s results, thanks to diminishing impacts of the COVID-19 pandemic, a strengthened management team and a focus on training and development of a growing number of analysts.

Completion time of requests

TC endeavours to complete every request for personal information in a timely manner. Of the 143 requests completed in 2021-2022, 76% were completed within 30 days. The amount of time it takes to close requests can be an indication of the volume of records and complexity of requests requiring an extended legislated deadline.

Completion time of requests

1 to 30 days

31 to 60 days

61 to 120 days

121 to 180 days

181 to 365 days

More than 365 days

109 22 7 4 1 0

TC seeks to minimize the number of new requests that go beyond legislated timelines while continuing to reduce the number of late and older requests. Of the 49 requests carried over to fiscal year 2022-23, 16 were beyond legislated timelines. Completion of these files remains a priority.

Open requests that are outstanding from previous reporting periods

Fiscal year open requests were received

Open requests that are within legislated timelines as of March 31, 2022

Open requests that are beyond legislated timelines as of March 31, 2022

Total

Received in 2021-2022

31

12

43

Received in 2020-2021

2

3

5

Received in 2019-2020

0

1

1

Received in 2018-2019

0

0

0

Received in 2017-2018

0

0

0

Received in 2016-2017

0

0

0

Received in 2015-2016 or earlier

0

0

0

Total

33

16

49

Several factors continued to affect completion times in 2021-2022, most notably persistent recruitment and retention challenges, as well as adjustments through a changing pandemic context.

Extensions

Under specific circumstances, the Act contains provisions for departments to extend the legislated deadline if the request cannot be completed within the 30-day time limit. Of the 18 extensions cited during the reporting year, six were taken due to large volumes of responsive records and 12 were for necessary consultations.

Dispositions

TC makes every effort to disclose as much information as possible and uphold the spirit of the Act. Of the 143 requests closed during the reporting period, 21% were released in full and 38% were released in part (none were withheld in their entirety). For the remainder, there were no responsive records for 12% and 29% were abandoned.

Sections 18 through 28 of the Privacy Act set out the exemptions that can be applied in order to protect information pertaining to particular public or private interests. Of the exemptions applied to requests for personal information processed during the reporting period, the majority of exemptions invoked by TC (85%) fell under Section 26 of the Privacy Act, which protects the personal information of another individual.

Consultations received from other government institutions and organizations

TC received one consultation from another federal institution during the reporting period.

Requests for correction of personal information and notation

There were no requests for the correction of personal information or notation in the reporting period.

Other services provided by the ATIP Office

In addition to request processing and other disclosures, the ATIP Office processed 11 internal administrative reports for review under the spirit of the Privacy Act, many of which were complex and required multiple versions adapted to the target audience (e.g., harassment reports).

COVID-19 impact

TC’s ATIP Office employees continued to work predominantly from home throughout 2021-2022, having successfully embedded operational changes following the start of the COVID-19 pandemic.

Refer to the Supplemental Statistical Report at Annex B for details on TC’s capacity to process records in 2021-2022.

Training and awareness

The goal of training and awareness is to familiarize or further educate TC employees on the principles and procedures of ATIP, responsibilities and expectations regarding the retrieval and reviewing of records, the provision of recommendations, and the overall importance of ATIP as it pertains to TC’s daily operations.

Training is delivered by experienced ATIP practitioners through a number of different channels, depending on the circumstances:

  • Monthly digital training sessions are delivered to TC staff members, who continue to attend in high numbers (776 registered participants over the course of 2021-2022).
  • Ad-hoc training provided to various programs on specific areas that regularly affect subject matter experts and record holders.
  • Analysts joining the ATIP Office benefited from both in-house and external training.

As part of its Engagement Strategy, the ATIP Office worked to sustain high levels of visibility and transparency within the 2021-2022 reporting period:

  • A monthly ATIP bulletin featuring news, updates, latest developments and information regarding access to information and privacy is shared with all partners across the department.
  • Meetings between ATIP Office management and liaison officers are held to share details of latest initiatives and gain a better understanding of each party’s challenges.
  • TC’s CFO and ADM, Corporate Services, regularly raised ATIP matters with colleagues.
  • The ATIP Director shared information and provided updates and advice at the Director General Horizontal Committee (DGH) and various other TC committees.
  • To mark Data Privacy Day on January 28, 2022, the ATIP Office published an internal article to promote the importance of sound privacy management practices and raise awareness to privacy breaches.
  • Through a departmental quiz, the ATIP Office identified areas for targeted development and improvement of privacy training.

These initiatives ensured awareness of ATIP matters at all levels of management, allowed for their proactive consideration and helped effectively address issues and sensitive matters.

Policies, guidelines, procedures and initiatives

The ATIP Office has mostly maintained and refined processes and procedures that were deployed successfully in 2020-2021 to enable staff to work from home.

TC is looking at various options to further modernize its ATIP processes:

  • Exploring the use of robotic process automation technology to reduce the time spent on performing repetitive tasks. One such automation script was successfully implemented this year for the entry of new requests in the ATIP case management system.
  • Working with other departments to share knowledge and leverage from existing software solutions.
  • Planning for future request processing software to replace TC’s current software.

Summary of key issues and actions taken on complaints

TC strives to provide timely access to requested records and to apply, when necessary, specific and limited redactions as prescribed under the Privacy Act. Nonetheless, applicants have the right to file a complaint with the Office of the Privacy Commissioner (OPC) regarding any matter relating to the processing of their requests. In 2021-2022, five new complaints were submitted to the OPC regarding TC’s processing of requests. Issues identified in complaints included time delays and alleged improper application of exemptions.

No complaints filed by applicants were resolved during the reporting fiscal year.

Open complaints outstanding from previous reporting periods

Fiscal year open complaints were received by institution

Number of open complaints

Received in 2021-2022

5

Received in 2020-2021

1

Received in 2019-2020

0

Received in 2018-2019

0

Received in 2017-2018

0

Received in 2016-2017

0

Received in 2015-2016 or earlier

0

Total

6

The OPC is also mandated to conduct investigations into complaints on the personal information handling practices of federal institutions subject to the Privacy Act. During the reporting period, the department received six such complaints initiated by the OPC.

Monitoring compliance

The ATIP Office engaged departmental officials at various levels in order to ensure that privacy requests are processed in a timely and efficient manner.

The ATIP Director met regularly with managers and supervisors to review on-time performance. Analysts were trained to leverage the specialized ATIP processing software to track timelines for requests under their responsibility. This was supplemented with regular bilateral meetings between analysts and their supervisor to receive guidance and ensure compliance with legislation.

Throughout the reporting period, monitoring and tracking reports were discussed by the CFO and ADM of Corporate Services with colleagues to raise awareness and foster collaboration. The ATIP Director reached out to executives through various committees to raise awareness and considerations for efficient administration of the Act (e.g., to discuss the design of new programs and the importance of information management practices, such as the retention and disposal of information).

Throughout the year, members of the ATIP management team were paired with OPI liaison officers in each group and regional office to maintain regular communications and address questions and concerns proactively. This approach continues to contribute to a greater understanding between the ATIP Office and OPIs, as well as enhanced collaboration.

Material privacy breaches

During the reporting period, two material privacy breaches occurred at TC. Both were reported to the OPC and to TBS. An additional ten non-material privacy breaches occurred during the same period.

The majority of the privacy breaches that occur at TC are due to human error. To mitigate and reduce the occurrence of future breaches, the TC ATIP Office consistently provides targeted privacy awareness training to the program areas where a breach occurred.

TC utilizes an internal Privacy Incident Report to facilitate the Department's handling and assessment of privacy breaches. A privacy breach tracking system is used to ensure that all privacy breaches are recorded and actioned in a timely matter.

Privacy Impact Assessments

The ATIP Office plays a vital role in providing guidance and advice to program areas in the drafting of Privacy Impact Assessments (PIAs) to ensure the safe handling of personal information in accordance with the Privacy Act.

During the reporting period, several PIAs were drafted but none were completed. TC ATIP team members met with TC officials responsible for various programs, discussed the activities and/or initiatives they were planning, confirmed the need for PIAs and reviewed draft PIAs to ensure they considered all privacy implications and mitigation measures throughout the development and implementation of their processes. Much progress has been made in advancing several PIAs, expected to be completed in the next reporting period.

A major area of focus was providing privacy advice in relation to COVID-19 vaccination mandates in the air, rail and marine transportation sectors. The ATIP Office played a critical role in ensuring that the mandates were implemented according to privacy by design and in compliance with the Privacy Act. The ATIP Office proactively engaged TC officials responsible for program areas that were to collect and handle personal information, or that were to direct the collection by other parties, in order to provide guidance and recommendations in line with privacy principles on the implementation of the mandates, such as limiting collection of personal information and the necessity for a Privacy Notice Statement. Additionally, TC’s ATIP Office created a Privacy Considerations one-pager, annexed to engagement papers developed for the purpose of engaging stakeholders, that outlined high-level guidance for air, marine and rail operators to consider. This document enabled the promotion of privacy with the private sector entities and stakeholders who would be implementing vaccination policies based on the vaccine mandate. The ATIP Office also consulted with the OPC and its Government Advisory Directorate (OPC-GA) on the development of vaccination-related activities and their implementation with various stakeholders, as well as on privacy considerations.

Public interest disclosures

Paragraph 8(2)(m) of the Privacy Act allows for the head of the institution to disclose personal information without the consent of the affected individual in cases where, in the opinion of the head, the public interest outweighs any invasion of privacy that could result from the disclosure, or when it is clearly in the best interest of the individual. During the reporting period, no disclosures were made under paragraph 8(2)(m).

Annex A: Delegation Order

Access to Information Act and Privacy Act delegation

The Minister of Transport, pursuant to subsection 95(1) of the Access to Information Act and subsection 73(1) of the Privacy Act, delegates the persons holding the positions set out in the attached schedule, including persons designated to act in their absence, to exercise the powers, duties and functions of the Minister of Transport as the head of the Department of Transport, under the provisions of these Acts and related RegulationsFootnote 1, set out in the attached schedule opposite each position.

This delegation replaces all previous designations.

Dated at the City of Ottawa, in the Province of Ontario, this 30th day of March, 2021.

Omar Alghabra
Minister of Transport

Schedule

Position

Access to Information Act and regulations

Privacy Act and regulations

Deputy Minister Full authority Full authority
Associate Deputy Minister Full authority Full authority
Assistant Deputy Minister, Corporate Services, and Chief Financial Officer Full authority Full authority
Director, ATIP Full authority

Full authority except:

PA: 8(2)(m)

Managers, ATIP

Full authority except:

ATIA: 6.1(1)

Full authority except:

PA: 8(2)(j) and 8(2)(m)

Senior ATIP Advisors (PM-05) ATIA: 7(a), 8(1), 9, 19, 27(1), 33, and 43(1) PA: 14(a), 15, and 26

Annex B: Transport Canada’s Statistical Report on the Privacy Act

Statistical Report on the Privacy Act

Name of institution: Transport Canada

Reporting period: April 1, 2021 to March 31, 2022

Section 1: Requests Under the Privacy Act

1.1 Number of requests
 

Number of requests

Received during reporting period

 

168

Outstanding from previous reporting periods  

24

Outstanding from previous reporting period

23

 

Outstanding from more than one reporting period

1

 
Total  

192

Closed during reporting period  

143

Carried over to next reporting period  

49

Carried over within legislated timeline

28

 

Carried over beyond legislated timeline

21

 
1.2 Channels of requests

Source

Number of requests

Online 134
E-mail 23
Mail 8
In person 0
Phone 0
Fax 3
Total 168

Section 2: Informal requests

2.1 Number of informal requests
 

Number of requests

Received during reporting period

0

Outstanding from previous reporting periods

0

Outstanding from previous reporting period

0

Outstanding from more than one reporting period

0

Total

0

Closed during reporting period

0

Carried over to next reporting period

0

2.2 Channels of informal requests

Source

Number of requests

Online 0
E-mail 0
Mail 0
In person 0
Phone 0
Fax 0
Total 0
2.3 Completion time of informal requests

Completion time

1 to 15 days

16 to 30 days

31 to 60 days

61 to 120 days

121 to 180 days

181 to 365 days

More than 365 days

Total

0

0

0

0

0

0

0

0

2.4 Pages released informally

Less than 100 pages released

100-500 pages released

501-1000 pages released

1001-5000 pages released

More than 5000 pages released

Number of requests

Pages released

Number of requests

Pages released

Number of requests

Pages released

Number of requests

Pages released

Number of requests

Pages released

0

0

0

0

0

0

0

0

0

0

Section 3: Requests closed during the reporting period

3.1 Disposition and completion time

Disposition of requests

Completion time

1 to 15 days

16 to 30 days

31 to 60 days

61 to 120 days

121 to 180 days

181 to 365 days

More than 365 days

Total

All disclosed

1 22 7 0 0 0 0

30

Disclosed in part

5 25 13 7 3 1 0

54

All exempted

0 0 0 0 0 0 0

0

All excluded

0 0 0 0 0 0 0

0

No records exist

6 10 1 0 0 0 0

17

Request abandoned

37 3 1 1 0 1 0

42

Neither confirmed nor denied

0 0 0 0 0 0 0

0

Total

49 60 22 7 4 1 0

143

3.2 Exemptions

Section

Number of requests

18(2) 0
19(1)(a) 1
19(1)(b) 0
19(1)(c) 0
19(1)(d) 1
19(1)(e) 0
19(1)(f) 0
20 0
21 0
22(1)(a)(i) 0
22(1)(a)(ii) 0
22(1)(a)(iii) 0
22(1)(b) 2
22(1)(c) 0
22(2) 0
22.1 0
22.2 0
22.3 0
22.4 0
23(a) 1
23(b) 1
24(a) 0
24(b) 0
25 0
26 56
27 4
27.1 0
28 0
3.3 Exclusions

Section

Number of requests

69(1)(a) 0
69(1)(b) 0
69.1 0
70(1) 0
70(1)(a) 0
70(1)(b) 0
70(1)(c) 0
70(1)(d) 0
70(1)(e) 0
70(1)(f) 0
70.1 0
3.4 Format of information released

Paper

Electronic

Other

E-record

Data set

Video

Audio

2 82 0 2 0 0
3.5 Complexity
3.5.1 Relevant pages processed and disclosed for paper and e-record formats

Number of pages processed

Number of pages disclosed

Number of requests

17797 7111 126
3.5.2 Relevant pages processed by request disposition for paper and e-record formats by size of requests

Disposition

Less than 100 pages processed

100-500 pages processed

501-1000 pages processed

1001-5000 pages processed

More Than 5000 pages processed

Number of requests

Pages processed

Number of requests

Pages processed

Number of requests

Pages processed

Number of requests

Pages processed

Number of requests

Pages processed

All disclosed 28 776 2 266 0 0 0 0 0 0
Disclosed in part 33 1396 16 3548 3 2114 1 1318 1 7702
All exempted 0 0 0 0 0 0 0 0 0 0
All excluded 0 0 0 0 0 0 0 0 0 0
Request abandoned 40 63 2 614 0 0 0 0 0 0
Neither confirmed nor denied 0 0 0 0 0 0 0 0 0 0
Total 101 2235 20 4428 3 2114 1 1318 1 7702
3.5.3 Relevant minutes processed and disclosed for audio formats

Number of minutes processed

Number of minutes disclosed

Number of requests

0 0 0
3.5.4 Relevant minutes processed per request disposition for audio formats by size of requests

Disposition

Less than 60 minutes processed

60-120 minutes processed

More than 120 minutes processed

Number of requests

Minutes processed

Number of requests

Minutes processed

Number of requests

Minutes processed

All disclosed 0 0 0 0 0 0
Disclosed in part 0 0 0 0 0 0
All exempted 0 0 0 0 0 0
All excluded 0 0 0 0 0 0
Request abandoned 0 0 0 0 0 0
Neither confirmed nor denied 0 0 0 0 0 0
Total 0 0 0 0 0 0
3.5.5 Relevant minutes processed and disclosed for video formats

Number of minutes processed

Number of minutes disclosed

Number of requests

2 2 2
3.5.6 Relevant minutes processed per request disposition for video formats by size of requests

Disposition

Less than 60 minutes processed

60-120 minutes processed

More than 120 minutes processed

Number of requests

Minutes processed

Number of requests

Minutes processed

Number of requests

Minutes processed

All disclosed 0 0 0 0 0 0
Disclosed in part 2 2 0 0 0 0
All exempted 0 0 0 0 0 0
All excluded 0 0 0 0 0 0
Request abandoned 0 0 0 0 0 0
Neither confirmed nor denied 0 0 0 0 0 0
Total 0 0 0 0 0 0
3.5.7 Other complexities

Disposition

Consultation required

Legal advice sought

Interwoven information

Other

Total

All disclosed 0 0 0 0

0

Disclosed in part 13 0 39 2

54

All exempted 0 0 0 0

0

All excluded 0 0 0 0

0

Request abandoned 1 0 0 0

1

Neither confirmed nor denied 0 0 0 0

0

Total 14 0 39 2 55
3.6 Closed requests
3.6.1 Number of requests closed within legislated timelines
Number of requests closed within legislated timelines 129
Percentage of requests closed within legislated timelines (%) 90.21
3.7 Deemed refusals
3.7.1 Reasons for not meeting legislated timelines

Number of requests closed past the legislated timelines

Principal reason

Interference with operations / workload

External consultation

Internal consultation

Other

14 0 0 0 14
3.7.2 Request closed beyond legislated timelines (including any extension taken)

Number of days past legislated timelines

Number of requests past legislated timeline where no extension was taken

Number of requests past legislated timeline where an extension was taken

Total

1 to 15 days 4 0

4

16 to 30 days 3 0

3

31 to 60 days 2 0

2

61 to 120 days 3 0

3

121 to 180 days 1 0

1

181 to 365 days 1 0

1

More than 365 days 0 0

0

Total 14 0 14
3.8 Requests for translation

Translation requests

Accepted

Refused

Total

English to French 0 0

0

French to English 0 0

0

Total 0 0

0

Section 4: Disclosures under Subsections 8(2) and 8(5)

Paragraph 8(2)(e)

Paragraph 8(2)(m)

Subsection 8(5)

Total

0 0 0 0

Section 5: Requests for correction of personal information and notations

Disposition for correction requests received

Number

Notations attached 0
Requests for correction accepted 0
Total 0  

Section 6: Extensions

6.1 Reasons for extensions

Number of requests where an extension was taken

15(a)(i) Interference with operations

15 (a)(ii) Consultation

15(b) Translation purposes or conversion

Further review required to determine exemptions

Large volume of pages

Large volume of requests

Documents are difficult to obtain

Cabinet Confidence Section
(Section 70)

External

Internal

18 0 6 0 0 0 12 0 0
6.2 Length of extensions

Length of Extensions

15(a)(i) Interference with operations

15(a)(ii) Consultation

15(b) Translation purposes or conversion

Further review required to determine exemptions

Large volume of pages

Large volume of requests

Documents are difficult to obtain

Cabinet Confidence Section (Section 70)

External

Internal

1 to 15 days 0 0 0 0 0 0 0 0
16 to 30 days 0 6 0 0 0 12 0 0
31 days or greater - - - - - - - 0
Total 0 6 0 0 0 12 0 0

Section 7: Consultations received from other institutions and organizations

7.1 Consultations received from other Government of Canada institutions and other organizations

Consultations

Other Government of Canada institutions

Number of pages to review

Other organizations

Number of pages to review

Received during the reporting period 1 15 0 0
Outstanding from the previous reporting period 0 0 0 0
Total 1 15 0 0
Closed during the reporting period 1 15 0 0
Carried over within negotiated timelines 0 0 0 0
Carried over beyond negotiated timelines 0 0 0 0
7.2 Recommendations and completion time for consultations received from other Government of Canada institutions

Recommendation

Number of days Required to Complete Consultation Requests

1 to 15 days

16 to 30 days

31 to 60 days

61 to 120 days

121 to 180 days

181 to 365 days

More Than 365 days

Total

Disclose entirely 0 1 0 0 0 0 0 1
Disclose in part 0 0 0 0 0 0 0 0
Exempt entirely 0 0 0 0 0 0 0 0
Exclude entirely 0 0 0 0 0 0 0 0
Consult other institution 0 0 0 0 0 0 0 0
Other 0 0 0 0 0 0 0 0
Total 0 1 0 0 0 0 0 1
7.3 Recommendations and completion time for consultations received from other organizations outside the Government of Canada

Recommendation

Number of days Required to Complete Consultation Requests

1 to 15 days

16 to 30 days

31 to 60 days

61 to 120 days

121 to 180 days

181 to 365 days

More Than 365 days

Total

Disclose entirely 0 0 0 0 0 0 0 0
Disclose in part 0 0 0 0 0 0 0 0
Exempt entirely 0 0 0 0 0 0 0 0
Exclude entirely 0 0 0 0 0 0 0 0
Consult other institution 0 0 0 0 0 0 0 0
Other 0 0 0 0 0 0 0 0
Total 0 0 0 0 0 0 0 0

Section 8: Completion time of consultations on cabinet confidences

8.1 Requests with Legal Services

Number of days

Fewer than 100 pages processed

100-500 pages processed

501-1000 pages processed

1001-5000 pages processed

More than 5000 pages processed

Number of requests

Pages disclosed

Number of requests

Pages disclosed

Number of requests

Pages disclosed

Number of requests

Pages disclosed

Number of requests

Pages disclosed

1 to 15 0 0 0 0 0 0 0 0 0 0
16 to 30 0 0 0 0 0 0 0 0 0 0
31 to 60 0 0 0 0 0 0 0 0 0 0
61 to 120 0 0 0 0 0 0 0 0 0 0
121 to 180 0 0 0 0 0 0 0 0 0 0
181 to 365 0 0 0 0 0 0 0 0 0 0
More than 365 0 0 0 0 0 0 0 0 0 0
Total 0 0 0 0 0 0 0 0 0 0
8.2 Requests with Privy Council Office

Number of days

Fewer than 100 pages processed

100-500 pages processed

501-1000 pages processed

1001-5000 pages processed

More than 5000 pages processed

Number of requests

Pages disclosed

Number of requests

Pages disclosed

Number of requests

Pages disclosed

Number of requests

Pages disclosed

Number of requests

Pages disclosed

1 to 15 0 0 0 0 0 0 0 0 0 0
16 to 30 0 0 0 0 0 0 0 0 0 0
31 to 60 0 0 0 0 0 0 0 0 0 0
61 to 120 0 0 0 0 0 0 0 0 0 0
121 to 180 0 0 0 0 0 0 0 0 0 0
181 to 365 0 0 0 0 0 0 0 0 0 0
More than 365 0 0 0 0 0 0 0 0 0 0
Total 0 0 0 0 0 0 0 0 0 0

Section 9: Complaints and investigations notices received

Section 31 Section 33 Section 35 Court action Total
11 6 1 0 18

Section 10: Privacy Impact Assessments (PIAs) and Personal Information Banks (PIBs)

10.1 Privacy Impact Assessments
Number of PIAs completed 0
Number of PIAs modified 0
10.2 Institution-specific and central Personal Information Banks

Personal Information Banks

Active

Created

Terminated

Modified

Institution-specific 24 0 0 0
Central 49 0 0 0
Total 73 0 0 0

Note: Previous Annual Reports only reported the number of institution-specific Personal Information Banks (PIBs). This year, institutions were required to also include the number of centralized PIBs.

Section 11: Privacy breaches

11.1 Material privacy breaches reported
Number of material privacy breaches reported to TBS 2
Number of material privacy breaches reported to OPC 2
11.2 Non-material privacy breaches
Number of non-material privacy breaches 10

Section 12: Resources related to the Privacy Act

12.1 Allocated costs

Expenditures

Amount

Salaries $587,855
Overtime $10,207
Goods and services $146,508
  • Professional services contracts: $113,905
  • Other: $32,603
Total $744,570
12.2 Human Resources

Resources

Person years dedicated to privacy activities

Full-time employees 7.5
Part-time and casual employees 0.0
Regional staff 0.0
Consultants and agency personnel 1.0
Students 0.0
Total 8.5