Office of the Privacy Commissioner Compliance Monitoring of Statistics Canada’s Financial Transactions Project and Credit Agency Data Project: Final Report
This report follows up on an earlier investigation into Statistics Canada's Financial Transactions Project and Credit Agency Data Project. While the initial investigation found no contraventions, it raised significant privacy concerns. This compliance monitoring report assesses whether Statistics Canada’s redesigned projects adequately incorporate the principles of necessity and proportionality. Although Statistics Canada has made progress in reducing the scope of data collection and implementing privacy-enhancing measures, the report concludes that the project plans still fall short in adequately describing public goals, demonstrating effectiveness, and analyzing privacy impacts.
- Adequacy of public goal descriptions for necessity and proportionality assessment.
- Demonstration of project effectiveness.
- Sufficiency of privacy impact analysis, including risk of harm.
- Alignment of Statistics Canada's necessity and proportionality framework with OPC criteria.
Recommendations made for further improvements
Statistics Canada has made efforts and progress in redesigning its projects to address privacy concerns, particularly regarding necessity and proportionality. However, the OPC found that the project plans, as presented, still have deficiencies in defining public goals with sufficient precision, demonstrating effectiveness, and conducting a thorough analysis of privacy impacts and potential harms. Recommendations were made for Statistics Canada to resubmit revised plans before final implementation.
AI-generated summary for reference only. Always verify against the official decision ↗
Statistics Canada was recommended to describe public goals with greater specificity and precision, revisit the question of effectiveness once projects have progressed, analyze privacy in context including risk of harm, and resubmit the plans for OPC review before final implementation.
- Privacy Act
This summary is informational only and not legal advice.