Annual report to Parliament on the Administration of the Privacy Act – 2021-2022

ISSN 2816-637X

On this page

• Introduction
  • The purpose of the Privacy Act
  • About Transport Canada
• Organizational structure
• Delegation Order
• Performance 2021-2022
  • Requests under the Privacy Act
  • Completion time of requests
  • Extensions
  • Dispositions
  • Consultations received from other government institutions and organizations
  • Requests for correction of personal information and notation
  • Other services provided by the ATIP Office
  • COVID-19 impact
• Training and awareness
• Policies, guidelines, procedures and initiatives
• Summary of key issues and actions taken on complaints
• Monitoring compliance
• Material privacy breaches
• Privacy Impact Assessments
• Public interest disclosures
• Annex A: Delegation Order
• Annex B: Transport Canada’s statistical report on the Privacy Act

Introduction

The purpose of the Privacy Act

The Privacy Act protects an individual’s privacy by setting out provisions related to the collection, use, disclosure, retention and disposal of personal information. The Privacy Act also provides Canadian citizens, permanent residents as defined under subsection 2(1) of the Immigration and Refugee Protection Act, and individuals who are present in Canada, a right of access to information about themselves held by a federal government institution, subject to certain specific and limited exceptions. The Privacy Act Extension Order No. 3, which came into force on July 13, 2022 now allows all foreign nationals outside Canada the right to access their personal information.

Section 72 of the Privacy Act requires the Minister of Transport to submit an annual report to Parliament on the administration of the legislation following the close of each fiscal year. This report describes how Transport Canada (TC) fulfilled its responsibilities and obligations for the reporting period April 1, 2021 to March 31, 2022.

About Transport Canada

TC is responsible for developing and overseeing the Government of Canada’s transportation policies and programs so that Canadians can have access to a safe, secure, innovative and integrated transportation system that promotes trade, economic growth and a cleaner environment.

For more information about TC, visit our website.

Organizational structure

The Access to Information and Privacy (ATIP) Office is part of the Corporate Services Group. The Director of the ATIP Office is the ATIP Coordinator for TC. Consistent with best practices identified by the Treasury Board Secretariat (TBS), TC’s ATIP Coordinator is positioned within three levels of the Minister. The Coordinator reports to the Chief Financial Officer (CFO) and Assistant Deputy Minister (ADM), Corporate Services, who in turn reports to the Deputy Minister.

The ATIP Office was restructured during the reporting period and is comprised of five units, as follows:

• Two units dedicated to access to information operations;
• One unit responsible for access to personal information operations, internal advisory services, as well as a project to process older, late files;
• One unit responsible for access to information policy, internal advisory services including those related to proactive publication, and ATIP Office administration; and
• One unit responsible for privacy policy and internal advisory services related to the administration of the Privacy Act.

The majority of ATIP Office employees work in the National Capital Region. A satellite office was launched on April 1, 2021, based in the Quebec Region, at TC’s Dorval Regional Office. Within the ATIP Office, there were 8.5 person-years dedicated to privacy activities during the reporting period ending March 31, 2022. In addition, numerous TC employees and executives throughout the department were involved in the search, retrieval and preparation of recommendations to enable and inform the processing of requests in accordance with the Act, as well as in ensuring programs and activities are compliant with the Act.

The ATIP Office works closely with departmental liaison officers, who are the main points of contact between the ATIP Office and subject matter experts. They are responsible for ensuring requests tasked to their group or regional office are handled promptly and that relevant records are forwarded from offices of primary interest (OPIs) to the ATIP Office in accordance with established procedures and timelines.

Delegation Order

Responsibilities associated with the administration of the Privacy Act are delegated to departmental officials through a delegation order signed by the Minister of Transport (see Annex A for the signed Delegation Order).

At TC, the ATIP Coordinator has full delegated authority, with the exception of privacy disclosures in the public interest pursuant to section 8(2)(m) of the Privacy Act, which are delegated to the Deputy Minister, the Associate Deputy Minister and the CFO and ADM, Corporate Services.

Performance 2021–2022

This section highlights key information on the Department’s performance for fiscal year 2021-2022. See Annex B for the complete Statistical Report.

Requests under the Privacy Act

During the 2021-2022 fiscal year, TC received 168 requests for personal information, an increase from 141 requests the previous year. In addition, 24 requests were carried over from previous years for a total of 192 open requests. Of the 192 requests, 143 were completed during the reporting period. As of March 31, 2022, the ATIP Office was carrying over 49 requests to the 2022-2023 fiscal year.

Year-over-year trends

	2018-2019	2019-2020	2020-2021	2021-2022
Requests received	322	139	141	168
Requests closed	372	136	135	143
Responded within legislated deadline	87%	89%	81%	90%

During the reporting period, 90% of requests were completed within legislated deadlines, representing a marked improvement on the previous fiscal year’s results, thanks to diminishing impacts of the COVID-19 pandemic, a strengthened management team and a focus on training and development of a growing number of analysts.

Completion time of requests

TC endeavours to complete every request for personal information in a timely manner. Of the 143 requests completed in 2021-2022, 76% were completed within 30 days. The amount of time it takes to close requests can be an indication of the volume of records and complexity of requests requiring an extended legislated deadline.

Completion time of requests

1 to 30 days	31 to 60 days	61 to 120 days	121 to 180 days	181 to 365 days	More than 365 days
109	22	7	4	1	0

TC seeks to minimize the number of new requests that go beyond legislated timelines while continuing to reduce the number of late and older requests. Of the 49 requests carried over to fiscal year 2022-23, 16 were beyond legislated timelines. Completion of these files remains a priority.

Open requests that are outstanding from previous reporting periods

Fiscal year open requests were received	Open requests that are within legislated timelines as of March 31, 2022	Open requests that are beyond legislated timelines as of March 31, 2022	Total
Received in 2021-2022	31	12	43
Received in 2020-2021	2	3	5
Received in 2019-2020	0	1	1
Received in 2018-2019	0	0	0
Received in 2017-2018	0	0	0
Received in 2016-2017	0	0	0
Received in 2015-2016 or earlier	0	0	0
Total	33	16	49

Several factors continued to affect completion times in 2021-2022, most notably persistent recruitment and retention challenges, as well as adjustments through a changing pandemic context.

Extensions

Under specific circumstances, the Act contains provisions for departments to extend the legislated deadline if the request cannot be completed within the 30-day time limit. Of the 18 extensions cited during the reporting year, six were taken due to large volumes of responsive records and 12 were for necessary consultations.

Dispositions

TC makes every effort to disclose as much information as possible and uphold the spirit of the Act. Of the 143 requests closed during the reporting period, 21% were released in full and 38% were released in part (none were withheld in their entirety). For the remainder, there were no responsive records for 12% and 29% were abandoned.

Sections 18 through 28 of the Privacy Act set out the exemptions that can be applied in order to protect information pertaining to particular public or private interests. Of the exemptions applied to requests for personal information processed during the reporting period, the majority of exemptions invoked by TC (85%) fell under Section 26 of the Privacy Act, which protects the personal information of another individual.

Consultations received from other government institutions and organizations

TC received one consultation from another federal institution during the reporting period.

Requests for correction of personal information and notation

There were no requests for the correction of personal information or notation in the reporting period.

Other services provided by the ATIP Office

In addition to request processing and other disclosures, the ATIP Office processed 11 internal administrative reports for review under the spirit of the Privacy Act, many of which were complex and required multiple versions adapted to the target audience (e.g., harassment reports).

COVID-19 impact

TC’s ATIP Office employees continued to work predominantly from home throughout 2021-2022, having successfully embedded operational changes following the start of the COVID-19 pandemic.

Refer to the Supplemental Statistical Report at Annex B for details on TC’s capacity to process records in 2021-2022.

Training and awareness

The goal of training and awareness is to familiarize or further educate TC employees on the principles and procedures of ATIP, responsibilities and expectations regarding the retrieval and reviewing of records, the provision of recommendations, and the overall importance of ATIP as it pertains to TC’s daily operations.

Training is delivered by experienced ATIP practitioners through a number of different channels, depending on the circumstances:

• Monthly digital training sessions are delivered to TC staff members, who continue to attend in high numbers (776 registered participants over the course of 2021-2022).
• Ad-hoc training provided to various programs on specific areas that regularly affect subject matter experts and record holders.
• Analysts joining the ATIP Office benefited from both in-house and external training.

As part of its Engagement Strategy, the ATIP Office worked to sustain high levels of visibility and transparency within the 2021-2022 reporting period:

• A monthly ATIP bulletin featuring news, updates, latest developments and information regarding access to information and privacy is shared with all partners across the department.
• Meetings between ATIP Office management and liaison officers are held to share details of latest initiatives and gain a better understanding of each party’s challenges.
• TC’s CFO and ADM, Corporate Services, regularly raised ATIP matters with colleagues.
• The ATIP Director shared information and provided updates and advice at the Director General Horizontal Committee (DGH) and various other TC committees.
• To mark Data Privacy Day on January 28, 2022, the ATIP Office published an internal article to promote the importance of sound privacy management practices and raise awareness to privacy breaches.
• Through a departmental quiz, the ATIP Office identified areas for targeted development and improvement of privacy training.

These initiatives ensured awareness of ATIP matters at all levels of management, allowed for their proactive consideration and helped effectively address issues and sensitive matters.

Policies, guidelines, procedures and initiatives

The ATIP Office has mostly maintained and refined processes and procedures that were deployed successfully in 2020-2021 to enable staff to work from home.

TC is looking at various options to further modernize its ATIP processes:

• Exploring the use of robotic process automation technology to reduce the time spent on performing repetitive tasks. One such automation script was successfully implemented this year for the entry of new requests in the ATIP case management system.
• Working with other departments to share knowledge and leverage from existing software solutions.
• Planning for future request processing software to replace TC’s current software.

Summary of key issues and actions taken on complaints

TC strives to provide timely access to requested records and to apply, when necessary, specific and limited redactions as prescribed under the Privacy Act. Nonetheless, applicants have the right to file a complaint with the Office of the Privacy Commissioner (OPC) regarding any matter relating to the processing of their requests. In 2021-2022, five new complaints were submitted to the OPC regarding TC’s processing of requests. Issues identified in complaints included time delays and alleged improper application of exemptions.

No complaints filed by applicants were resolved during the reporting fiscal year.

Open complaints outstanding from previous reporting periods

Fiscal year open complaints were received by institution	Number of open complaints
Received in 2021-2022	5
Received in 2020-2021	1
Received in 2019-2020	0
Received in 2018-2019	0
Received in 2017-2018	0
Received in 2016-2017	0
Received in 2015-2016 or earlier	0
Total	6

The OPC is also mandated to conduct investigations into complaints on the personal information handling practices of federal institutions subject to the Privacy Act. During the reporting period, the department received six such complaints initiated by the OPC.

Monitoring compliance

The ATIP Office engaged departmental officials at various levels in order to ensure that privacy requests are processed in a timely and efficient manner.

The ATIP Director met regularly with managers and supervisors to review on-time performance. Analysts were trained to leverage the specialized ATIP processing software to track timelines for requests under their responsibility. This was supplemented with regular bilateral meetings between analysts and their supervisor to receive guidance and ensure compliance with legislation.

Throughout the reporting period, monitoring and tracking reports were discussed by the CFO and ADM of Corporate Services with colleagues to raise awareness and foster collaboration. The ATIP Director reached out to executives through various committees to raise awareness and considerations for efficient administration of the Act (e.g., to discuss the design of new programs and the importance of information management practices, such as the retention and disposal of information).

Throughout the year, members of the ATIP management team were paired with OPI liaison officers in each group and regional office to maintain regular communications and address questions and concerns proactively. This approach continues to contribute to a greater understanding between the ATIP Office and OPIs, as well as enhanced collaboration.

Material privacy breaches

During the reporting period, two material privacy breaches occurred at TC. Both were reported to the OPC and to TBS. An additional ten non-material privacy breaches occurred during the same period.

The majority of the privacy breaches that occur at TC are due to human error. To mitigate and reduce the occurrence of future breaches, the TC ATIP Office consistently provides targeted privacy awareness training to the program areas where a breach occurred.

TC utilizes an internal Privacy Incident Report to facilitate the Department's handling and assessment of privacy breaches. A privacy breach tracking system is used to ensure that all privacy breaches are recorded and actioned in a timely matter.

Privacy Impact Assessments

The ATIP Office plays a vital role in providing guidance and advice to program areas in the drafting of Privacy Impact Assessments (PIAs) to ensure the safe handling of personal information in accordance with the Privacy Act.

During the reporting period, several PIAs were drafted but none were completed. TC ATIP team members met with TC officials responsible for various programs, discussed the activities and/or initiatives they were planning, confirmed the need for PIAs and reviewed draft PIAs to ensure they considered all privacy implications and mitigation measures throughout the development and implementation of their processes. Much progress has been made in advancing several PIAs, expected to be completed in the next reporting period.

A major area of focus was providing privacy advice in relation to COVID-19 vaccination mandates in the air, rail and marine transportation sectors. The ATIP Office played a critical role in ensuring that the mandates were implemented according to privacy by design and in compliance with the Privacy Act. The ATIP Office proactively engaged TC officials responsible for program areas that were to collect and handle personal information, or that were to direct the collection by other parties, in order to provide guidance and recommendations in line with privacy principles on the implementation of the mandates, such as limiting collection of personal information and the necessity for a Privacy Notice Statement. Additionally, TC’s ATIP Office created a Privacy Considerations one-pager, annexed to engagement papers developed for the purpose of engaging stakeholders, that outlined high-level guidance for air, marine and rail operators to consider. This document enabled the promotion of privacy with the private sector entities and stakeholders who would be implementing vaccination policies based on the vaccine mandate. The ATIP Office also consulted with the OPC and its Government Advisory Directorate (OPC-GA) on the development of vaccination-related activities and their implementation with various stakeholders, as well as on privacy considerations.

Public interest disclosures

Paragraph 8(2)(m) of the Privacy Act allows for the head of the institution to disclose personal information without the consent of the affected individual in cases where, in the opinion of the head, the public interest outweighs any invasion of privacy that could result from the disclosure, or when it is clearly in the best interest of the individual. During the reporting period, no disclosures were made under paragraph 8(2)(m).

Annex A: Delegation Order

Access to Information Act and Privacy Act delegation

The Minister of Transport, pursuant to subsection 95(1) of the Access to Information Act and subsection 73(1) of the Privacy Act, delegates the persons holding the positions set out in the attached schedule, including persons designated to act in their absence, to exercise the powers, duties and functions of the Minister of Transport as the head of the Department of Transport, under the provisions of these Acts and related Regulations^{Footnote 1}, set out in the attached schedule opposite each position.

This delegation replaces all previous designations.

Dated at the City of Ottawa, in the Province of Ontario, this 30th day of March, 2021.

Omar Alghabra
Minister of Transport

Schedule

Position	Access to Information Act and regulations	Privacy Act and regulations
Deputy Minister	Full authority	Full authority
Associate Deputy Minister	Full authority	Full authority
Assistant Deputy Minister, Corporate Services, and Chief Financial Officer	Full authority	Full authority
Director, ATIP	Full authority	Full authority except: PA: 8(2)(m)
Managers, ATIP	Full authority except: ATIA: 6.1(1)	Full authority except: PA: 8(2)(j) and 8(2)(m)
Senior ATIP Advisors (PM-05)	ATIA: 7(a), 8(1), 9, 19, 27(1), 33, and 43(1)	PA: 14(a), 15, and 26

Annex B: Transport Canada’s Statistical Report on the Privacy Act

Statistical Report on the Privacy Act

Name of institution: Transport Canada

Reporting period: April 1, 2021 to March 31, 2022

Section 1: Requests Under the Privacy Act

1.1 Number of requests

	Number of requests
Received during reporting period		168
Outstanding from previous reporting periods		24
Outstanding from previous reporting period	23
Outstanding from more than one reporting period	1
Total		192
Closed during reporting period		143
Carried over to next reporting period		49
Carried over within legislated timeline	28
Carried over beyond legislated timeline	21

1.2 Channels of requests

Source	Number of requests
Online	134
E-mail	23
Mail	8
In person	0
Phone	0
Fax	3
Total	168

Section 2: Informal requests

2.1 Number of informal requests

	Number of requests
Received during reporting period	0
Outstanding from previous reporting periods	0
Outstanding from previous reporting period	0
Outstanding from more than one reporting period	0
Total	0
Closed during reporting period	0
Carried over to next reporting period	0

2.2 Channels of informal requests

Source	Number of requests
Online	0
E-mail	0
Mail	0
In person	0
Phone	0
Fax	0
Total	0

2.3 Completion time of informal requests

Completion time
1 to 15 days	16 to 30 days	31 to 60 days	61 to 120 days	121 to 180 days	181 to 365 days	More than 365 days	Total
0	0	0	0	0	0	0	0

2.4 Pages released informally

Less than 100 pages released		100-500 pages released		501-1000 pages released		1001-5000 pages released		More than 5000 pages released
Number of requests	Pages released	Number of requests	Pages released	Number of requests	Pages released	Number of requests	Pages released	Number of requests	Pages released
0	0	0	0	0	0	0	0	0	0

Section 3: Requests closed during the reporting period

3.1 Disposition and completion time

Disposition of requests	Completion time
	1 to 15 days	16 to 30 days	31 to 60 days	61 to 120 days	121 to 180 days	181 to 365 days	More than 365 days	Total
All disclosed	1	22	7	0	0	0	0	30
Disclosed in part	5	25	13	7	3	1	0	54
All exempted	0	0	0	0	0	0	0	0
All excluded	0	0	0	0	0	0	0	0
No records exist	6	10	1	0	0	0	0	17
Request abandoned	37	3	1	1	0	1	0	42
Neither confirmed nor denied	0	0	0	0	0	0	0	0
Total	49	60	22	7	4	1	0	143

3.2 Exemptions

Section	Number of requests
18(2)	0
19(1)(a)	1
19(1)(b)	0
19(1)(c)	0
19(1)(d)	1
19(1)(e)	0
19(1)(f)	0
20	0
21	0
22(1)(a)(i)	0
22(1)(a)(ii)	0
22(1)(a)(iii)	0
22(1)(b)	2
22(1)(c)	0
22(2)	0
22.1	0
22.2	0
22.3	0
22.4	0
23(a)	1
23(b)	1
24(a)	0
24(b)	0
25	0
26	56
27	4
27.1	0
28	0

3.3 Exclusions

Section	Number of requests
69(1)(a)	0
69(1)(b)	0
69.1	0
70(1)	0
70(1)(a)	0
70(1)(b)	0
70(1)(c)	0
70(1)(d)	0
70(1)(e)	0
70(1)(f)	0
70.1	0

3.4 Format of information released

Paper	Electronic				Other
	E-record	Data set	Video	Audio
2	82	0	2	0	0

3.5 Complexity

3.5.1 Relevant pages processed and disclosed for paper and e-record formats

Number of pages processed	Number of pages disclosed	Number of requests
17797	7111	126

3.5.2 Relevant pages processed by request disposition for paper and e-record formats by size of requests

Disposition	Less than 100 pages processed		100-500 pages processed		501-1000 pages processed		1001-5000 pages processed		More Than 5000 pages processed
	Number of requests	Pages processed	Number of requests	Pages processed	Number of requests	Pages processed	Number of requests	Pages processed	Number of requests	Pages processed
All disclosed	28	776	2	266	0	0	0	0	0	0
Disclosed in part	33	1396	16	3548	3	2114	1	1318	1	7702
All exempted	0	0	0	0	0	0	0	0	0	0
All excluded	0	0	0	0	0	0	0	0	0	0
Request abandoned	40	63	2	614	0	0	0	0	0	0
Neither confirmed nor denied	0	0	0	0	0	0	0	0	0	0
Total	101	2235	20	4428	3	2114	1	1318	1	7702

3.5.3 Relevant minutes processed and disclosed for audio formats

Number of minutes processed	Number of minutes disclosed	Number of requests
0	0	0

3.5.4 Relevant minutes processed per request disposition for audio formats by size of requests

Disposition	Less than 60 minutes processed		60-120 minutes processed		More than 120 minutes processed
	Number of requests	Minutes processed	Number of requests	Minutes processed	Number of requests	Minutes processed
All disclosed	0	0	0	0	0	0
Disclosed in part	0	0	0	0	0	0
All exempted	0	0	0	0	0	0
All excluded	0	0	0	0	0	0
Request abandoned	0	0	0	0	0	0
Neither confirmed nor denied	0	0	0	0	0	0
Total	0	0	0	0	0	0

3.5.5 Relevant minutes processed and disclosed for video formats

Number of minutes processed	Number of minutes disclosed	Number of requests
2	2	2

3.5.6 Relevant minutes processed per request disposition for video formats by size of requests

Disposition	Less than 60 minutes processed		60-120 minutes processed		More than 120 minutes processed
	Number of requests	Minutes processed	Number of requests	Minutes processed	Number of requests	Minutes processed
All disclosed	0	0	0	0	0	0
Disclosed in part	2	2	0	0	0	0
All exempted	0	0	0	0	0	0
All excluded	0	0	0	0	0	0
Request abandoned	0	0	0	0	0	0
Neither confirmed nor denied	0	0	0	0	0	0
Total	0	0	0	0	0	0

3.5.7 Other complexities

Disposition	Consultation required	Legal advice sought	Interwoven information	Other	Total
All disclosed	0	0	0	0	0
Disclosed in part	13	0	39	2	54
All exempted	0	0	0	0	0
All excluded	0	0	0	0	0
Request abandoned	1	0	0	0	1
Neither confirmed nor denied	0	0	0	0	0
Total	14	0	39	2	55

3.6 Closed requests

3.6.1 Number of requests closed within legislated timelines

Number of requests closed within legislated timelines	129
Percentage of requests closed within legislated timelines (%)	90.21

3.7 Deemed refusals

3.7.1 Reasons for not meeting legislated timelines

Number of requests closed past the legislated timelines	Principal reason
	Interference with operations / workload	External consultation	Internal consultation	Other
14	0	0	0	14

3.7.2 Request closed beyond legislated timelines (including any extension taken)

Number of days past legislated timelines	Number of requests past legislated timeline where no extension was taken	Number of requests past legislated timeline where an extension was taken	Total
1 to 15 days	4	0	4
16 to 30 days	3	0	3
31 to 60 days	2	0	2
61 to 120 days	3	0	3
121 to 180 days	1	0	1
181 to 365 days	1	0	1
More than 365 days	0	0	0
Total	14	0	14

3.8 Requests for translation

Translation requests	Accepted	Refused	Total
English to French	0	0	0
French to English	0	0	0
Total	0	0	0

Section 4: Disclosures under Subsections 8(2) and 8(5)

Paragraph 8(2)(e)	Paragraph 8(2)(m)	Subsection 8(5)	Total
0	0	0	0

Section 5: Requests for correction of personal information and notations

Disposition for correction requests received	Number
Notations attached	0
Requests for correction accepted	0
Total	0

Section 6: Extensions

6.1 Reasons for extensions

Number of requests where an extension was taken	15(a)(i) Interference with operations				15 (a)(ii) Consultation			15(b) Translation purposes or conversion
	Further review required to determine exemptions	Large volume of pages	Large volume of requests	Documents are difficult to obtain	Cabinet Confidence Section (Section 70)	External	Internal
18	0	6	0	0	0	12	0	0

6.2 Length of extensions

Length of Extensions	15(a)(i) Interference with operations				15(a)(ii) Consultation			15(b) Translation purposes or conversion
	Further review required to determine exemptions	Large volume of pages	Large volume of requests	Documents are difficult to obtain	Cabinet Confidence Section (Section 70)	External	Internal
1 to 15 days	0	0	0	0	0	0	0	0
16 to 30 days	0	6	0	0	0	12	0	0
31 days or greater	-	-	-	-	-	-	-	0
Total	0	6	0	0	0	12	0	0

Section 7: Consultations received from other institutions and organizations

7.1 Consultations received from other Government of Canada institutions and other organizations

Consultations	Other Government of Canada institutions	Number of pages to review	Other organizations	Number of pages to review
Received during the reporting period	1	15	0	0
Outstanding from the previous reporting period	0	0	0	0
Total	1	15	0	0
Closed during the reporting period	1	15	0	0
Carried over within negotiated timelines	0	0	0	0
Carried over beyond negotiated timelines	0	0	0	0

7.2 Recommendations and completion time for consultations received from other Government of Canada institutions

Recommendation	Number of days Required to Complete Consultation Requests
	1 to 15 days	16 to 30 days	31 to 60 days	61 to 120 days	121 to 180 days	181 to 365 days	More Than 365 days	Total
Disclose entirely	0	1	0	0	0	0	0	1
Disclose in part	0	0	0	0	0	0	0	0
Exempt entirely	0	0	0	0	0	0	0	0
Exclude entirely	0	0	0	0	0	0	0	0
Consult other institution	0	0	0	0	0	0	0	0
Other	0	0	0	0	0	0	0	0
Total	0	1	0	0	0	0	0	1

7.3 Recommendations and completion time for consultations received from other organizations outside the Government of Canada

Recommendation	Number of days Required to Complete Consultation Requests
	1 to 15 days	16 to 30 days	31 to 60 days	61 to 120 days	121 to 180 days	181 to 365 days	More Than 365 days	Total
Disclose entirely	0	0	0	0	0	0	0	0
Disclose in part	0	0	0	0	0	0	0	0
Exempt entirely	0	0	0	0	0	0	0	0
Exclude entirely	0	0	0	0	0	0	0	0
Consult other institution	0	0	0	0	0	0	0	0
Other	0	0	0	0	0	0	0	0
Total	0	0	0	0	0	0	0	0

Section 8: Completion time of consultations on cabinet confidences

8.1 Requests with Legal Services

Number of days	Fewer than 100 pages processed		100-500 pages processed		501-1000 pages processed		1001-5000 pages processed		More than 5000 pages processed
	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed
1 to 15	0	0	0	0	0	0	0	0	0	0
16 to 30	0	0	0	0	0	0	0	0	0	0
31 to 60	0	0	0	0	0	0	0	0	0	0
61 to 120	0	0	0	0	0	0	0	0	0	0
121 to 180	0	0	0	0	0	0	0	0	0	0
181 to 365	0	0	0	0	0	0	0	0	0	0
More than 365	0	0	0	0	0	0	0	0	0	0
Total	0	0	0	0	0	0	0	0	0	0

8.2 Requests with Privy Council Office

Number of days	Fewer than 100 pages processed		100-500 pages processed		501-1000 pages processed		1001-5000 pages processed		More than 5000 pages processed
	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed
1 to 15	0	0	0	0	0	0	0	0	0	0
16 to 30	0	0	0	0	0	0	0	0	0	0
31 to 60	0	0	0	0	0	0	0	0	0	0
61 to 120	0	0	0	0	0	0	0	0	0	0
121 to 180	0	0	0	0	0	0	0	0	0	0
181 to 365	0	0	0	0	0	0	0	0	0	0
More than 365	0	0	0	0	0	0	0	0	0	0
Total	0	0	0	0	0	0	0	0	0	0

Section 9: Complaints and investigations notices received

Section 31	Section 33	Section 35	Court action	Total
11	6	1	0	18

Section 10: Privacy Impact Assessments (PIAs) and Personal Information Banks (PIBs)

10.1 Privacy Impact Assessments

Number of PIAs completed	0
Number of PIAs modified	0

10.2 Institution-specific and central Personal Information Banks

Personal Information Banks	Active	Created	Terminated	Modified
Institution-specific	24	0	0	0
Central	49	0	0	0
Total	73	0	0	0

Note: Previous Annual Reports only reported the number of institution-specific Personal Information Banks (PIBs). This year, institutions were required to also include the number of centralized PIBs.

Section 11: Privacy breaches

11.1 Material privacy breaches reported

Number of material privacy breaches reported to TBS	2
Number of material privacy breaches reported to OPC	2

11.2 Non-material privacy breaches

Number of non-material privacy breaches	10

Section 12: Resources related to the Privacy Act

12.1 Allocated costs

Expenditures	Amount
Salaries	$587,855
Overtime	$10,207
Goods and services	$146,508
Professional services contracts: $113,905 Other: $32,603
Total	$744,570

12.2 Human Resources

Resources	Person years dedicated to privacy activities
Full-time employees	7.5
Part-time and casual employees	0.0
Regional staff	0.0
Consultants and agency personnel	1.0
Students	0.0
Total	8.5