
Immigration, Refugees and Citizenship Canada systematically withholds access to certain personal information in its Global Case Management System
The OPC investigated a complaint alleging that Immigration, Refugees and Citizenship Canada (IRCC) improperly withheld access to personal information. The complainant requested the "History Section" of their case file, but IRCC only provided a subset of information from other sections, referred to as the "Short Form" report. The OPC found that IRCC's practice of systematically retrieving and processing only the Short Form report contravenes section 12 of the Privacy Act, as it fails to provide individuals with access to all personal information under the government's control. Although the specific file was eventually provided, IRCC refused to update its procedures to address the systemic issue.
- Whether IRCC's practice of only retrieving and processing a "Short Form" subset of records in response to access requests complies with the Privacy Act's access obligations.
- Whether the "History Section" of the Global Case Management System (GCMS) file contains personal information.
- Whether IRCC's assertion that information outside the "Short Form" would always be withheld under exemptions is valid.
- Whether IRCC's failure to commit to updating its procedures constitutes a continuing contravention of the Privacy Act.
Complaint well-founded and not resolved.
The OPC found that IRCC contravened section 12 of the Privacy Act by systematically retrieving and processing only a subset of records, failing to provide individuals with access to all personal information under the government's control. IRCC did not agree to update its procedures to address this systemic issue, leaving the matter unresolved.
AI-generated summary for reference only. Always verify against the official decision ↗
IRCC was recommended to retrieve and process the "History Section" of the complainant's file and to update its procedures to retrieve and process all parts of individuals' GCMS files responsive to Privacy Act requests.
- s. 12 Privacy Act
This summary is informational only and not legal advice.

