Personal information leaked from DFAIT database
The OPC investigated a complaint regarding the leak of a Canadian citizen's personal information from a DFAIT database, which was reported in the media in spring 2008. The investigation confirmed the information was held in an official consular record within DFAIT's computer system. A significant concern was that 1,231 DFAIT employees had access to these files, and the system lacked audit trail capabilities or mechanisms to restrict access to specific records. Consequently, the OPC could not identify the source of the leak. The complaint was found to be well-founded, and DFAIT agreed to implement corrective measures.
- 1Whether personal information was leaked from a DFAIT database
- 2Whether DFAIT's security safeguards were adequate to protect personal information
- 3Whether DFAIT's computer system had sufficient audit trail capabilities
- 4Whether DFAIT's computer system had mechanisms to restrict access to particular files
- Personal information leak: Complaint well-founded
- Access controls: Lack of adequate controls identified
- Audit trails: Lack of audit trail capabilities identified
- Corrective measures: Institution agreed to implement measures
- Source of leak: Source could not be identified
Complaint well-founded — corrective measures agreed upon
The OPC found a contravention of the Privacy Act due to the confirmed leak of personal information and the inadequate security safeguards, including a lack of audit trails and access restrictions. DFAIT agreed to implement corrective measures to address these deficiencies.
DFAIT agreed to prepare better guidance on sharing personal information, improve documentation of information requests, and explore changes to its computer system to enable audit trails and restrict file access.
This summary is for informational purposes only and not legal advice.
Related by meaning
Decisions with similar reasoning and facts — found by AI across statutes and jurisdictions, not just keywords.
Coverage — 13 of 14 jurisdictions searchable
Fully searchable: Ontario, British Columbia, Alberta, Saskatchewan, Newfoundland and Labrador, Northwest Territories, New Brunswick, Manitoba.
Partial (recent decisions only): Federal (Canada) (651 of 1,631), Nova Scotia (49 of 472), Quebec (6 of 7,090), Prince Edward Island (2 of 279), Yukon (1 of 75).
Coming soon: Nunavut — being re-processed for AI search.
Find decisions like this one — by meaning, not keywords.
Related by meaning is a Pro feature. Upgrade to surface conceptually similar decisions across the corpus, powered by AI.
Upgrade to Pro