BreachOfPrivacy
Decisions/Federal (Canada)/Privacy Act/Investigation of the Department of National Defence’s refusal to disclose personal information of a deceased individual
Office of the Privacy Commissioner of CanadaPrivacy ActNot well-founded
Flag of Canada

Investigation of the Department of National Defence’s refusal to disclose personal information of a deceased individual

Organization: Department of National Defence
Decision: Feb 28, 2024Published: Feb 28, 2024

A representative acting for the executor of an estate requested personal information about a deceased individual from the Department of National Defence (DND). DND determined the representative was not entitled to the information under paragraph 10(b) of the Privacy Regulations because they did not sufficiently demonstrate a connection between the information sought and the administration of the estate. While DND processed the request informally and disclosed some information under another provision of the Act, they did not clearly state the grounds for refusal. The OPC found the complaint not well-founded as the representative failed to adequately articulate and substantiate the estate's purposes and how the records would serve them.

  • Whether the representative was authorized to make a request on behalf of the deceased under paragraph 10(b) of the Privacy Regulations for the purpose of administering the estate.
  • Whether the representative sufficiently demonstrated a connection between the information sought and the administration of the deceased's estate.
  • Whether DND properly notified the representative of the refusal and the basis for it.
  • Whether DND properly handled the request informally.

Complaint not well-founded

The Office of the Privacy Commissioner found that the representative did not sufficiently articulate or substantiate the specific purposes of the estate and how the requested records would further those purposes, thus failing to meet the requirements of paragraph 10(b) of the Privacy Regulations.

AI-generated summary for reference only. Always verify against the official decision ↗

Recommended action / remedy

The OPC recommended that DND make the necessary changes to ensure compliance with the Act regarding notifications for refusals and the handling of informal requests.

Statutory provisions cited
  • subsection 12(1) Privacy Act
  • paragraph 10(b) Privacy Regulations
  • subparagraph 8(2)(m)(i) Privacy Act
  • section 16 Privacy Act
  • section 22 Privacy Act
  • section 26 Privacy Act
  • section 27 Privacy Act

This summary is informational only and not legal advice.