BreachOfPrivacy
Decisions/Federal (Canada)/Privacy Act/Veterans Affairs Improperly Reveals Severity of Disability - Twice
Office of the Privacy Commissioner of CanadaPrivacy ActWell-founded
Flag of Canada

Veterans Affairs Improperly Reveals Severity of Disability - Twice

Organization: Veterans Affairs Canada
Decision: Oct 4, 2012Published: Oct 4, 2012

This investigation concerned a complaint that Veterans Affairs Canada (VAC) improperly disclosed the severity of a serving member of the Canadian Forces' disability pension to the Department of National Defence (DND). This disclosure, which included the exact percentage of the disability pension, was made without the veteran's consent and was not necessary for his medical treatment. The investigation found that the disclosure was not deliberate and did not meet the criteria for the "public interest" exemption under the Privacy Act. The complaint was upheld as well-founded, and VAC implemented recommendations to improve its policies and training on information sharing.

  • Unauthorized disclosure of personal information (disability pension percentage)
  • Applicability of the "public interest" exemption under the Privacy Act
  • Compliance with internal policies and agreements for information sharing between government departments

Complaint well-founded — corrective measures taken

The Office found that Veterans Affairs Canada contravened the Privacy Act by disclosing the veteran's disability pension percentage without consent and without evidence of it being useful or necessary for treatment, and that the "public interest" exemption did not apply. Veterans Affairs Canada implemented recommendations to resolve the issue.

AI-generated summary for reference only. Always verify against the official decision ↗

Recommended action / remedy

Veterans Affairs Canada was recommended to review and comply with its policies on sharing personal information with the Department of National Defence, disseminate these policies to employees, and provide training. These recommendations were implemented.

Statutory provisions cited
  • s. 8(2)(m)(i) Privacy Act
  • s. 8(2)(m)(ii) Privacy Act

This summary is informational only and not legal advice.