Internet posting highlights inappropriate access to tax records by CRA workers
This investigation was initiated following media reports that a Canada Revenue Agency (CRA) employee posted personal tax information of athletes to an Internet chat group. The OPC found that a former employee did post information, and other CRA employees inappropriately accessed the athletes' tax information out of curiosity, which constituted a breach of the Privacy Act. The CRA took corrective measures, including disciplinary action against employees and modernization of its audit trail system.
- Unauthorized access to taxpayer information by CRA employees
- Disclosure of taxpayer information to an external party
- Adequacy of CRA's corrective measures and audit systems
Complaint well-founded regarding unauthorized access; no finding on disclosure.
The OPC found that CRA employees improperly accessed taxpayer information without authorization, constituting a breach of the Privacy Act. While the CRA took corrective action and disciplinary measures, a finding on disclosure to an external party could not be made due to insufficient evidence.
AI-generated summary for reference only. Always verify against the official decision ↗
The Canada Revenue Agency suspended one employee, fired two others, and modernized its National Audit Trail system to better monitor employee access.
- Privacy Act
This summary is informational only and not legal advice.