5822-05417 — Canada Border Services Agency

The complainant alleged that the Canada Border Services Agency (CBSA) failed to conduct a reasonable search for records in response to an access request concerning cybersecurity and data breach risks associated with the ArriveCan application. The complainant specifically questioned the absence of information related to named companies and expenses. The Office of the Information Commissioner (OIC) investigated by reviewing CBSA's search efforts, including the program areas tasked and the search parameters. The OIC found that the Office of Primary Interest (OPI) most likely to hold relevant records, the Information, Science and Technology Branch, had searched appropriate repositories and provided 896 pages of documents for processing. Based on this, the Commissioner concluded that CBSA conducted a reasonable search. The complaint was therefore deemed not well founded.