Annual Report to Parliament on the Administration of the Privacy Act 2017-2018

Table of contents

Chapter 1 – Report on the Privacy Act

About Public Safety Canada

The Department of Public Safety and Emergency Preparedness (PSEP) plays a key role in discharging the Government's fundamental responsibility for the safety and security of its citizens. The Minister of PSEP is responsible for the Department. Legislation governing the Department sets out three essential roles: (i) support the Minister's responsibility for all matters related to public safety and emergency management not assigned to another federal organization; (ii) exercise leadership at the national level for national security and emergency preparedness; and (iii) support the Minister's responsibility for the coordination of Public Safety's Portfolio entities.

The Department provides strategic policy advice and support to the Minister of PSEP on a range of issues including: national security, border strategies, countering crime, and emergency management. The Department also delivers a number of grant and contribution programs related to emergency management, national security and community safety.

Public Safety Canada is organized into five branches: Emergency Management and Programs, Community Safety and Countering Crime, Portfolio Affairs and Communications, National and Cyber Security, Corporate Management; it also has a Chief Audit and Evaluation Executive and is supported by the Legal Services Unit. The Department has regional presence in all provinces, as well as in the North, in order to deliver a coordinated federal response to emergencies; facilitate the effective delivery of emergency management, Indigenous policing and crime prevention programs; and improve partnerships with other levels of government and key regional stakeholders.

About the Public Safety Portfolio

The Public Safety Portfolio encompasses nine organizations which directly contribute to the safety and security of Canadians. While Portfolio agencies deliver public security operations according to their mandates, Public Safety Canada, in its portfolio coordination role, brings strategic focus to the overall safety and security agenda. Each organization in the portfolio administers its own access to information and privacy programs, under authorities delegated to them by the Minister.

Public Safety Portfolio

About the Privacy Act

The Privacy Act protects the privacy of all Canadian citizens and permanent residents of Canada regarding personal information held by a government institution against unauthorized use and disclosure. The Privacy Act also gives Canadians, including those in Canada who are not permanent residents or citizens, the right to access personal information held by the government.

Section 72 of the Privacy Act requires that the head of every government institution submit an annual report to Parliament on the administration of the Act during the financial year. This report outlines how Public Safety Canada administered the Privacy Act throughout the fiscal year.

The Access to Information and Privacy (ATIP) Office

The ATIP Office is part of Public Safety Canada’s ATIP and Executive Services Division within the Department’s Portfolio Affairs and Communications Branch. The Director of ATIP and Executive Services, supported by one Administrative Assistant, is responsible for ATIP as well as Ministerial Correspondence and Secretariat Services. The ATIP Office consists of 12 full-time positions with two streams of ATIP-related work: (1) the ATIP Operations Unit consisting of one ATIP Manager, two Team Leaders, five Analysts, one Junior Analyst, and one Administrative Officer; and, (2) the Privacy Policy and Training Unit (PPTU) consisting of one Team Leader and one Advisor.

The ATIP Office is responsible for the coordination and implementation of policies, guidelines and procedures to ensure departmental compliance with the Access to Information Act and the Privacy Act. The team is also responsible for responding to requests made under the Acts, as well as providing the following services to the Department:

Delegation of Authority

During the reporting period, the ATIP Office operated under the delegation order signed by the Minister on January 8, 2016, delegating his powers and responsibilities under the Access to Information Act (Appendix A).

New or Revised Policies, Guidelines or Procedures

During the reporting period, the Statement of Completeness that branches complete when submitting records to ATIP was updated to help ensure the most complete responses possible are received when tasked for records.  This includes proper formatting, ensuring attachments are included and that rationales for withholding information contain sufficient detail.

Training

The ATIP Office provided 12 training or information sessions on the Access to Information Act and Privacy Act regarding retrieving and reviewing records in response to an Access to Information (ATI) request and Privacy Breaches. 225 people were trained at these sessions.

Monitoring Performance

Reports on ATI compliance and retrieval statistics are reported to the Executive Committee weekly in the Weekly ATIP Report. Additionally, on a quarterly basis, the number of Privacy Act requests, training sessions and attendees, privacy breaches and completed Privacy Impact Assessments are included in the Weekly ATIP Report.

Challenges/Complexities

The complexity of the requests received remains challenging due to the interwoven information of multiple individuals.

Volume and Capacity

The number of requests received under the Privacy Act decreased by 69 per cent (from 67 to 21 requests).  

Key Issues Raised as a Result of Complaints/Investigations/Audits

Public Safety responded to one complaint this fiscal year which was resolved.  There were no audits or key issues during the year.

Material Privacy Breaches

There were no material privacy breaches reported this fiscal year.

Appeals to the Court

There were no appeals to the Federal Court this fiscal year.

Privacy Impact Assessments Completed During the Year

One Privacy Impact Assessment (PIA) was completed this fiscal year:

The PIA can be found at the following link:   https://www.publicsafety.gc.ca/cnt/trnsprnc/ccss-nfrmtn-prvc/prvc-mpct-ssssmnt/gvrnr-cncl-ppntmnts-en.aspx.

Chapter II – Privacy Act Statistical Report

Summary

Public Safety Canada received 21 requests under the Privacy Act, a decrease of approximately 69 per cent over the previous year. Public Safety Canada completed 100 per cent on time, the ninth consecutive year of over 90 per cent on time completion. It took the department an average of 29 days to process a request made under the Privacy Act.

Overall Workload Trends

Appendix B provides a summarized statistical report on Access to Information Act requests processed by Public Safety Canada between April 1, 2017 and March 31, 2018.  The following section provides an overview and interpretation of this information.  The figures below include formal Access to Information and Privacy requests and consultations received from other institutions.

Overall, the number of requests received has decreased by 4.6% over the 2016-17 fiscal year, and increased by 7.0% over the 2015-16 fiscal year. 

2013-2014

2014-2015

2015-2016

2016-2017

2017-2018

ATI requests received by
Public Safety Canada

465

 310

 346

417

421

Privacy requests received by Public Safety Canada

68

23       

 35

67

21

ATI consultations received from other institutions

255

238

271

247

256

Privacy consultations received from other institutions

9

9

3

4

3

Total workload

797

580

655

735

701

*Note:  In 2014-2015, the reporting structure at Public Safety changed resulting in informal requests no longer counting as part of this table.

Requests Received under the Privacy Act

The number of privacy requests remains small compared to the volume of access to information requests. Public Safety Canada collects little information directly from Canadians in comparison to portfolio agencies whose mandates are more operational in nature, such as the Royal Canadian Mounted Police (RCMP) and Correctional Service of Canada (CSC) who receive thousands of privacy requests annually.

Public Safety Canada received 21 new Privacy Act requests throughout the fiscal year, representing an decrease of approximately 69 per cent over the number of requests received during previous year (67). No requests were carried forward from the previous fiscal year and one request was carried forward to the following reporting year.

Extensions

Section 15 of the Privacy Act allows institutions to extend the legal deadline for processing a request if a search for responsive records would unreasonably interfere with the operations of the government institution, or consultations are necessary to comply with the request that cannot reasonably be completed within the original time limit. During the fiscal year, the department invoked seven extensions of 16 to 30 days. The extensions were invoked to conduct required consultations.

Performance in Meeting Statutory Response Deadlines

Of the 20 completed requests, three were completed within 15 days, nine were completed between 16 to 30 days and eight between 61 to 120 days. All 20 requests were completed within the statutory deadline.

Disposition of Requests

There was one request received under the Privacy Act disclosed without exemptions applied, 14 requests disclosed in part, zero requests exempted in their entirety, one request was abandoned, three requests where no records existed and one request where the existence of records was neither confirmed nor denied.

Consultations from other Institutions

During fiscal year, a total of three consultations from other institutions were received.

Disclosures Pursuant to paragraph 8(2)(m) of the Privacy Act

Paragraph 8(2)(m) of the Privacy Act provides the head of the institution with the authority to disclose personal information where the public interest in disclosure clearly outweighs any invasion of privacy that could result from the disclosure, or where the disclosure would clearly benefit the individual to whom the information relates. No disclosures pursuant to paragraph 8(2)(m) of the Privacy Act were made by Public Safety Canada.

Appendix A – Delegation of Authority for the Privacy Act and Regulations

The Minister of Public Safety and Emergency Preparedness, pursuant to section 73 of the Privacy Act*, hereby designates the persons holding the positions set out below, or the persons occupying on an acting basis those positions, to exercise the powers, duties and functions of the Minister as the head of the Department of Public Safety and Emergency Preparedness, under the section of the Act and related regulations set out opposite each position.  This designation replaces all previous delegation orders.

Delegation Order – Privacy Act and Regulations (signed January 8, 2016)
Section   Deputy Minister/
Associate  Deputy Minister
Assistant Deputy Minister, Portfolio Affairs and Communicatons; Director General, Cabinet and Parliamentary Affairs, and Executive Services  Assistant Deputy Ministers, Chief Audit Executive ATIP Manager
Director, ATIP and Executive Services
Team Leaders, ATIP Operations and ATIP
8(2)(j) Disclosure for research purposes
     
8(2)(m) Disclosure in the public interest or in the interest of the individual
       
8(4) Copies of requests under 8(2)(e) to be retained
     
8(5) Notice of disclosure under  8(2)(m)
     
9(1) Record of disclosures to be retained
     
9(4) Consistent uses
 
10 Personal information to be included in personal information banks
 
14 Notice when access requested
     
15 Extension of time limits
   
17(2)(b) Language of access
     
17(3)(b) Access to personal information in alternative format
     
18(2) Exemption (exempt bank) – Disclosure may be refused
     
19(1) Exemption – Personal information obtained in confidence
   
19(2) Exemption – Where authorized to disclose
   
20 Exemption – Federal-provincial affairs
   
21 Exemption – International affairs and defence
   
22 Exemption – Law enforcement and investigations
   
22.3 Exemption – Public Servants Disclosure Protection Act
   
23 Exemption – Security clearances
   
24 Exemption – Individuals sentenced for an offence
   
25 Exemption – Safety of individuals
   
26 Exemption – Information about another individual
   
27 Exemption – Solicitor-client privilege
   
28 Exemption – Medical record
   
31 Notice of intention to investigate
   
35(1) Findings and recommendations of Privacy Commissioner (complaints)
     
35(4) Access to be given
     
36(3) Report of findings and recommendations (exempt banks)
     
37(3) Report of findings and recommendations (compliance review)
     
51(2)(b) Special rules for hearings
     
51(3) Ex parte representations
     
70 Confidences of the Queen’s Privy Council for Canada         
72(1) Annual report to Parliament
     
Privacy Regulations
9 Reasonable facilities and time provided to examine personal information
     
11(2) Notification that correction to personal information has been made
     
11(4) Notification that correction to personal information has been refused
     

Appendix B – Statistical Report on the Privacy Act

Reporting period: 2017-04-01 to 2018-03-31

Part 1: Requests Under the Privacy Act

Part 1: Requests Under the Privacy Act
  Number of Requests

Received during reporting period

21

Outstanding from previous reporting period

0

Total

21

Closed during reporting period

20

Carried over to next reporting period

1

Part 2: Requests Closed During the Reporting Period

2.1 Disposition and completion time

Disposition of Requests

Completion Time

 

 

1 to 15 Days

16 to 30 Days

31 to 60 Days

61 to 120 Days

121 to 180 Days

181 to 365 Days

More Than 365 Days

Total

All disclosed

0

1

0

0

0

0

0

1

Disclosed in part

0

6

8

0

0

0

0

14

All exempted

0

0

0

0

0

0

0

0

All excluded

0

0

0

0

0

0

0

0

No records exist

2

1

0

0

0

0

0

3

Request abandoned

1

0

0

0

0

0

0

1

Neither confirmed nor denied

0

1

0

0

0

0

0

1

Total

3

9

8

0

0

0

0

20

 

2.2 Exemptions

Section

Number of Requests

Section

Number of Requests

Section

Number of Requests

18(2)

0

22(1)(a)(i)

0

23(a)

0

19(1)(a)

0

22(1)(a)(ii)

0

23(b)

0

19(1)(b)

0

22(1)(a)(iii)

0

24(a)

0

19(1)(c)

0

22(1)(b)

0

24(b)

0

19(1)(d)

0

22(1)(c)

0

25

0

19(1)(e)

0

22(2)

0

26

14

19(1)(f)

0

22.1

0

27

2

20

0

22.2

0

28

0

21

2

22.3

0

0 0

 

2.3 Exclusions

Section

Number of Requests

Section

Number of Requests

Section

Number of Requests

69(1)(a)

0

70(1)

0

70(1)(d)

0

69(1)(b)

0

70(1)(a)

1

70(1)(e)

0

69.1

0

70(1)(b)

0

70(1)(f)

0

0 0

70(1)(c)

0

70.1

0

 

2.4 Format of information released

Disposition

Paper

Electronic

Other formats

All disclosed

0

1

0

Disclosed in part

2

12

0

Total

2

13

0

2.5 Complexity

2.5.1 Relevant pages processed and disclosed

Disposition of Requests

Number of Pages Processed

Number of Pages Disclosed

Number of Requests

All disclosed

81

81

1

Disclosed in part

5911

5030

14

All exempted

0

0

0

All excluded

0

0

0

Request abandoned

0

0

1

Neither confirmed nor denied

0

0

1

Total

5992

5111

17

 

2.5.2 Relevant pages processed and disclosed by size of requests

Disposition

Less Than 100
Pages Processed

101-500
Pages Processed

501-1000
Pages Processed

1001-5000
Pages Processed

More Than 5000
Pages Processed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

All disclosed

1

81

0

0

0

0

0

0

0

0

Disclosed in part

3

48

8

1637

1

766

2

2579

0

0

All exempted

0

0

0

0

0

0

0

0

0

0

All excluded

0

0

0

0

0

0

0

0

0

0

Request abandoned

1

0

0

0

0

0

0

0

0

0

Neither confirmed nor denied

1

0

0

0

0

0

0

0

0

0

Total

6

129

8

1637

1

766

2

2579

0

0

 

2.5.3 Other complexities

Disposition

Consultation Required

Legal Advice Sought

Interwoven Information

Other

Total

All disclosed

0

0

0

0

0

Disclosed in part

3

1

0

0

4

All exempted

0

0

0

0

0

All excluded

0

0

0

0

0

Request abandoned

0

0

1

1

2

Neither confirmed nor denied

0

0

0

0

0

Total

3

1

1

1

6

2.6 Deemed refusals

2.6.1 Reasons for not meeting statutory deadline

Number of Requests Closed Past the Statutory Deadline

Principal Reason

Workload

External Consultation

Internal Consultation

Other

0

0

0

0

0

 

2.6.2 Number of days past deadline

Number of Days Past Deadline

Number of Requests Past Deadline Where No Extension Was Taken

Number of Requests Past Deadline Where An Extension Was Taken

Total

1 to 15 days

0

0

0

16 to 30 days

0

0

0

31 to 60 days

0

0

0

61 to 120 days

0

0

0

121  to 180 days

0

0

0

181 to 365 days

0

0

0

More than 365 days

0

0

0

Total

0

0

0

 

2.7  Requests for translation

Translation Requests

Accepted

Refused

Total

English to French

0

0

0

French to English

0

0

0

Total

0

0

0

Part 3: Disclosures Under Subsections 8(2) and 8(5)

Disclosures Under Subsections 8(2) and 8(5)

Paragraph 8(2)(e)

Paragraph 8(2)(m)

Subsection 8(5)

Total

0

0

0

0

Part 4: Requests for Correction of Personal Information and Notations

Requests for Correction of Personal Information and Notations

Disposition for Correction Requests Received

Number

Notations attached

91

Requests for correction accepted

14

Total

105

Part 5: Extensions

5.1 Reasons for extensions and disposition of requests
Disposition of Requests Where an Extension Was Taken 15(a)(i)
Interference With Operations
15(a)(ii)
Consultation
15(b)
Translation or Conversion
Section 70 Other

All disclosed

0

0

0

0

Disclosed in part

4

0

3

0

All exempted

0

0

0

0

All excluded

0

0

0

0

No records exist

0

0

0

0

Request abandoned

0

0

0

0

Total

4

0

3

0

 

5.2 Length of extensions
Length of Extensions 15(a)(i)
Interference with operations
15(a)(ii)
Consultation
15(b)
Translation purposes
Section 70 Other

1 to 15 days

0

0

0

0

16 to 30 days

4

0

3

0

Total

4

0

3

0

Part 6: Consultations Received From Other Institutions and Organizations

6.1 Consultations received from other Government of Canada institutions and other organizations

Consultations

Other Government of Canada Institutions

Number of Pages to Review

Other Organizations

Number of Pages to Review

Received during the reporting period

3

24

0

0

Outstanding from the previous reporting period

0

0

0

0

Total

3

24

0

0

Closed during the reporting period

3

24

0

0

Pending at the end of the reporting period

0

0

0

0

 

6.2 Recommendations and completion time for consultations received from other Government of Canada institutions

Recommendation

Number of Days Required to Complete Consultation Requests

1 to 15 Days

16 to 30 Days

31 to 60 Days

61 to 120 Days

121  to 180 Days

181 to 365 Days

More Than 365 Days

Total

All disclosed

1

0

0

0

0

0

0

1

Disclosed in part

0

0

0

0

0

0

0

0

All exempted

1

0

0

0

0

0

0

1

All excluded

0

0

0

0

0

0

0

0

Consult other institution

0

0

0

0

0

0

0

0

Other

1

0

0

0

0

0

0

1

Total

3

0

0

0

0

0

0

3

 

6.3 Recommendations and completion time for consultations received from other organizations

Recommendation

Number of days required to complete consultation requests

1 to 15 Days

16 to 30 Days

31 to 60 Days

61 to 120 Days

121  to 180 Days

181 to 365 Ddays

More Than 365 Days

Total

All disclosed

0

0

0

0

0

0

0

0

Disclosed in part

0

0

0

0

0

0

0

0

All exempted

0

0

0

0

0

0

0

0

All excluded

0

0

0

0

0

0

0

0

Consult other institution

0

0

0

0

0

0

0

0

Other

0

0

0

0

0

0

0

0

Total

0

0

0

0

0

0

0

0

Part 7: Completion Time of Consultations on Cabinet Confidences

7.1 Requests with Legal Services

Number of Days

Fewer Than 100 Pages Processed

101-500 Pages Processed

501-1000
Pages Processed

1001-5000
Pages Processed

More than 5000
Pages Processed

Number of
Requests

Pages Disclosed

Number of
Requests

Pages Disclosed

Number of
Requests

Pages Disclosed

Number of
Requests

Pages Disclosed

Number of
Requests

Pages Disclosed

1 to 15

1

2

0

0

0

0

0

0

0

0

16 to 30

0

0

0

0

0

0

0

0

0

0

31 to 60

0

0

0

0

0

0

0

0

0

0

61 to 120

0

0

0

0

0

0

0

0

0

0

121 to 180

0

0

0

0

0

0

0

0

0

0

181 to 365

0

0

0

0

0

0

0

0

0

0

More than 365

0

0

0

0

0

0

0

0

0

0

Total

1

2

0

0

0

0

0

0

0

0

 

7.2 Requests with Privy Council Office

Number of Days

Fewer Than 100 Pages Processed

101‒500 Pages Processed

501-1000
Pages Processed

1001-5000
Pages Processed

More than 5000
Pages Processed

Number of
Requests

Pages Disclosed

Number of
Requests

Pages Disclosed

Number of
Requests

Pages Disclosed

Number of
Requests

Pages Disclosed

Number of
Requests

Pages Disclosed

1 to 15

0

0

0

0

0

0

0

0

0

0

16 to 30

0

0

0

0

0

0

0

0

0

0

31 to 60

0

0

0

0

0

0

0

0

0

0

61 to 120

0

0

0

0

0

0

0

0

0

0

121 to 180

0

0

0

0

0

0

0

0

0

0

181 to 365

0

0

0

0

0

0

0

0

0

0

More than 365

0

0

0

0

0

0

0

0

0

0

Total

0

0

0

0

0

0

0

0

0

0

Part 8: Complaints and Investigations Notices Received

Complaints and Investigations Notices Received

Section 31

Section 33

Section 35

Court action

Total

 

1

0

0

0

1

 

 

Part 9: Privacy Impact Assessments (PIAs)

Number of PIA(s) completed

1

Part 10: Resources Related to the Privacy Act

10.1 Costs

Expenditures

Amount

Salaries

$237,398

Overtime

$0

Goods and Services

$4,020

• Professional services contracts

$0

• Other

$4,020

Total

$241,418

 

10.2 Human Resources

Resources

Person Years Dedicated to Privacy Activities

Full-time employees

2.98

Part-time and casual employees

0.00

Regional staff

0.00

Consultants and agency personnel

0.00

Students

0.00

Total

2.98

Note: Enter values to two decimal places.

Date modified: