Canadian privacy & access decisions

The complainant alleged that the Privy Council Office (PCO) failed to conduct a reasonable search for records related to the management of the government's parliamentary agenda. Initially, PCO's Offices of Primary Interest (OPIs) provided nil responses, leading PCO to inform the complainant that no relevant records were found. However, the complainant provided detailed reasons why records should exist, prompting the OIC to request further representations from PCO. During the OIC's investigation, PCO conducted additional searches, which located 26 pages of relevant records that were not found in the initial search because they were stored in a PCO-ATIP library rather than directly by the OPI. The Commissioner found that PCO had not conducted a reasonable search initially. Consequently, the complaint was deemed well-founded, and PCO was ordered to process and release the newly found records.

• Whether the institution conducted a reasonable search for records under s.30(1)(a) ATIA

The complainant alleged that Library and Archives Canada (LAC) improperly withheld information under subsections 13(1) and 15(1) of the Access to Information Act, concerning Joint Intelligence Committee Intelligence for NORAD records from 1958-63. During the investigation, LAC provided two supplementary releases of previously withheld information. The Office of the Information Commissioner (OIC) determined that NORAD qualifies as an international organization of states for the purposes of paragraph 13(1)(b). The OIC found that not all information initially exempted by LAC met the requirements of subsections 13(1) and 15(1), leading to a well-founded complaint. However, an order was deemed unnecessary because LAC had already released some information, and the remaining withheld information was found to properly meet the requirements of subsection 13(1).

• Whether information was properly withheld under s.13(1) ATIA
• Whether NORAD constitutes an international organization of states or an institution thereof for the purposes of s.13(1)(b) ATIA
• Whether information was obtained in confidence from a foreign state under s.13(1)(a) ATIA
• Whether information was obtained in confidence from an international organization of states under s.13(1)(b) ATIA
• Whether the institution reasonably exercised its discretion under s.13(2) ATIA
• Whether the circumstances in s.13(2) ATIA existed (consent or public availability)
• Whether information was properly withheld under s.15(1) ATIA

The complainant alleged that the Royal Canadian Mounted Police (RCMP) failed to conduct a reasonable search for records concerning expenses incurred for providing security to internationally protected persons visiting Canada. The request sought all records, including breakdowns by visitor, from January 1, 2015, to January 24, 2020. In response, the RCMP provided only a two-page summary of costs, arguing that most records would likely be exempt or excluded under the Act, and that generating a summary was more expedient than reviewing an estimated 150,000 pages. The Information Commissioner found that the RCMP did not demonstrate how the summary fulfilled its responsibility to retrieve and process all responsive records, nor did it adequately justify not identifying and locating the full records based on potential exemptions. Consequently, the Commissioner concluded that the RCMP did not conduct a reasonable search. The complaint was found to be well founded, and the RCMP was ordered to conduct a new search and provide a new response.

• Whether the institution conducted a reasonable search for records
• Whether providing a summary of records fulfills the obligation to search for 'all records'
• Whether the potential for exemptions justifies not identifying and locating all responsive records

The complainant requested a full Issue Detail Report for a food complaint from the Canadian Food Inspection Agency (CFIA). The CFIA withheld information under subsections 19(1) (personal information), 20(1)(b) (confidential third-party information), and 20(1)(c) (financial impact on a third party) of the Access to Information Act. The complainant also alleged that the CFIA improperly used 'negative' (white) redactions, making it difficult to identify withheld portions. During the investigation, the complainant withdrew the allegation regarding subsection 19(1). The Commissioner found that the CFIA failed to meet its duty to assist by using negative redactions and recommended they cease this practice. For the third-party exemptions, the Commissioner determined that most of the information did not meet the requirements of paragraphs 20(1)(b) or 20(1)(c), as the institution and third party did not sufficiently establish confidentiality or reasonable expectation of harm. The Commissioner ordered the CFIA to disclose most of the withheld third-party information, with specific exceptions for supplier names, procedural details, and product weighing processes. The CFIA agreed to implement the order and recommendation.

• Whether the CFIA improperly withheld information under s.19(1) ATIA
• Whether the CFIA improperly withheld information under s.20(1)(b) ATIA
• Whether the CFIA improperly withheld information under s.20(1)(c) ATIA
• Whether the CFIA's use of negative (white) redactions was appropriate under s.4(2.1) ATIA (duty to assist)
• Whether the information is financial, commercial, scientific or technical for s.20(1)(b) ATIA
• Whether the information is confidential by an objective standard for s.20(1)(b) ATIA
• Whether the third party supplied the information to a government institution for s.20(1)(b) ATIA
• Whether the third party has consistently treated the information as confidential for s.20(1)(b) ATIA
• Whether disclosure could result in material financial loss or gain to the third party for s.20(1)(c) ATIA
• Whether there is a reasonable expectation of harm for s.20(1)(c) ATIA
• Whether disclosure could injure the competitive position of the third party for s.20(1)(c) ATIA

The complainant requested records related to CSL Group Inc., specifically policy and workplace health and safety committee reports from 2012 to 2022. Employment and Social Development Canada (ESDC) withheld information under several provisions of the Access to Information Act and was also alleged to have conducted an unreasonable search for records. The Commissioner found that ESDC failed to justify most of its exemption claims, including those under s.16(1)(c), s.16(2), s.20(1)(b), s.20(1)(c), s.21(1)(b), and s.23. While some personal information and specific recommendations were properly withheld under s.19(1) and s.21(1)(a) respectively, ESDC's exercise of discretion for other s.21(1)(a) information was deemed unreasonable. Furthermore, ESDC failed to demonstrate that it conducted a reasonable search for responsive records. Consequently, the complaint was found to be well-founded. The Commissioner ordered ESDC to disclose most of the withheld information, re-exercise discretion for certain records, and conduct a new, reasonable search for responsive records. ESDC notified the Commissioner of its intent to comply with the order.

• Whether ESDC improperly withheld information under s.16(1)(c) ATIA (law enforcement, conduct of investigations)
• Whether ESDC improperly withheld information under s.16(2) ATIA (facilitating the commission of an offence)
• Whether ESDC improperly withheld information under s.19(1) ATIA (personal information)
• Whether the corporate address on page 136 constitutes personal information under s.19(1) ATIA
• Whether non-personal information on business cards on page 138 constitutes personal information under s.19(1) ATIA
• Whether ESDC reasonably exercised its discretion under s.19(2) ATIA regarding personal information
• Whether ESDC improperly withheld information under s.20(1)(b) ATIA (confidential third-party financial, commercial, scientific or technical information)
• Whether the information is financial, commercial, scientific or technical under s.20(1)(b) ATIA
• Whether ESDC improperly withheld information under s.20(1)(c) ATIA (financial impact on a third party)
• Whether disclosure could reasonably be expected to have a material financial impact or injure competitive position under s.20(1)(c) ATIA
• Whether ESDC improperly withheld information under s.21(1)(a) ATIA (advice or recommendations)
• Whether the information constitutes advice or recommendations under s.21(1)(a) ATIA
• Whether ESDC reasonably exercised its discretion under s.21(1)(a) ATIA regarding advice or recommendations
• Whether ESDC improperly withheld information under s.21(1)(b) ATIA (accounts of consultations or deliberations)
• Whether the information constitutes accounts of consultations or deliberations under s.21(1)(b) ATIA
• Whether ESDC improperly withheld information under s.23 ATIA (solicitor-client and litigation privilege)
• Whether the information is subject to solicitor-client privilege under s.23 ATIA
• Whether the information is subject to litigation privilege under s.23 ATIA
• Whether ESDC conducted a reasonable search for records

The complainant alleged that Health Canada improperly withheld information under paragraph 20(1)(b) of the Access to Information Act and failed to conduct a reasonable search for records. The request sought documents related to stakeholder consultations on amendments to the Food and Drug Regulations concerning COVID-19 drugs. The OIC found that neither Health Canada nor the third parties established that the names of the third parties met the requirements of paragraph 20(1)(b), specifically regarding whether the information was financial, commercial, scientific, or technical, and whether it was confidential. The OIC also concluded that Health Canada did not conduct a reasonable search, noting issues with search parameters, lack of documentation, and failure to locate expected records. Consequently, the Information Commissioner ordered Health Canada to disclose the names of the third parties and conduct a new, comprehensive search for records. Health Canada agreed to comply with the order.

• Whether the names of third parties constitute financial, commercial, scientific or technical information under s.20(1)(b) ATIA
• Whether the names of third parties were confidential under s.20(1)(b) ATIA
• Whether the information was supplied by a third party under s.20(1)(b) ATIA
• Whether the third parties consistently treated the information as confidential under s.20(1)(b) ATIA
• Whether Health Canada conducted a reasonable search for records

The complainant alleged that the Privy Council Office (PCO) failed to conduct a reasonable search for records related to IAC reports concerning the USSR and former Warsaw Pact and Yugoslavia from 1990. Initially, PCO provided only minutes, leading to the complaint. During the investigation, PCO conducted an additional search, releasing 1,352 pages, but the complainant maintained that several specific reports were still missing. The OIC was not satisfied with the initial search efforts and requested further representations from PCO. PCO subsequently identified that some of the missing reports had been previously withheld in their entirety, some were not in their holdings, and 100 additional pages covering other requested documents were located. The Commissioner found that PCO had now conducted a reasonable search and ordered PCO to process and release the newly identified records by January 22, 2026. PCO agreed to implement the order.

• Whether the institution conducted a reasonable search for records responsive to the access request

The complainant alleged that Environment and Climate Change Canada (ECCC) failed to respond to an access request within the extended timeframe, constituting a deemed refusal under subsection 10(3) of the Access to Information Act. The request sought records related to the "Cedar LNG" export facility project. The investigation found that ECCC did not respond by the required date, attributing the delay to the Offices of Primary Interest (OPIs) and the ATIP office's failure to provide and process records in a timely manner. The Commissioner found the delay unacceptable and ordered ECCC to issue interim responses for documents not requiring consultation and to provide a complete response by March 16, 2026. The Commissioner also recommended that ECCC develop processes to ensure timely record provision from OPIs and establish performance indicators for accountability. ECCC agreed to implement the orders and recommendations. The complaint was found to be well founded.

• Whether Environment and Climate Change Canada responded to the access request within the extended period under subsection 9(1) of the Access to Information Act
• Whether the delay in responding constituted a deemed refusal under subsection 10(3) of the Access to Information Act
• Whether the delays caused by Offices of Primary Interest (OPIs) in providing records were acceptable
• Whether the proposed timeline for completing the review and consultations was reasonable

The complainant alleged that Public Services and Procurement Canada (PSPC) improperly withheld information under several sections of the Access to Information Act related to financial statements for the leaseback of seven specific buildings. The OIC investigated claims under paragraphs 18(d), 20(1)(b), 20(1)(c), 20(1)(d), and 21(1)(b). The complainant withdrew their allegation regarding subsection 19(1) and certain banking information. The OIC found that PSPC's arguments for withholding the information were largely speculative and lacked sufficient evidence to meet the requirements of the exemptions claimed, particularly concerning the potential for material harm or interference with negotiations. The Commissioner concluded that PSPC could not demonstrate that it met all the requirements of the exemptions, especially given the public interest in transparency regarding significant public funds. The complaint was found to be well-founded, and PSPC was ordered to disclose most of the withheld information. PSPC subsequently notified the Commissioner that it would comply with the order.

• Whether s.18(d) government financial interests, undue benefit to an individual, was properly applied
• Whether disclosure under s.18(d) could materially harm government financial interests
• Whether disclosure under s.18(d) could materially harm the Government of Canada’s ability to manage the economy
• Whether disclosure under s.18(d) could result in an individual or corporation receiving an undue benefit
• Whether s.20(1)(b) confidential third-party financial, commercial, scientific or technical information, was properly applied
• Whether the information is financial, commercial, scientific or technical under s.20(1)(b)
• Whether the information is confidential by an objective standard under s.20(1)(b)
• Whether the third party supplied the information to a government institution under s.20(1)(b)
• Whether the third party has consistently treated the information as confidential under s.20(1)(b)
• Whether s.20(1)(c) financial impact on a third party, was properly applied
• Whether disclosure under s.20(1)(c) could result in material financial loss or gain to the third party
• Whether disclosure under s.20(1)(c) could injure the competitive position of the third party
• Whether s.20(1)(d) negotiations by a third party, was properly applied
• Whether a third party is or will be conducting contractual or other negotiations under s.20(1)(d)
• Whether disclosure under s.20(1)(d) could interfere with those negotiations
• Whether s.21(1)(b) accounts of consultations or deliberations, was properly applied
• Whether the information is an account of consultations or deliberations under s.21(1)(b)
• Whether the information reveals the nature of deliberations under s.21(1)(b)

The complainant alleged that the Royal Canadian Mounted Police (RCMP) failed to conduct a reasonable search for records related to allegations of political interference with the Attorney General's functions concerning the SNC-Lavalin prosecution. The request covered records from July 8, 2022, to July 5, 2023. The investigation found that while the RCMP tasked relevant offices, these offices failed to search for records within the full specified timeframe. Specifically, Federal Policing and National Division did not search for records created after certain dates within the request's scope, and the Commissioner's Office's search timeframe was unclear. Furthermore, a 4600-page Police Reporting and Occurrence System (PROS) file, which the RCMP deemed irrelevant due to its 'occurrence time' being outside the request's timeframe, was found by the Commissioner to be relevant and to contain actions reported within the requested period. The Commissioner concluded that the RCMP did not conduct a reasonable search and ordered a new search and response. The RCMP agreed to implement the order.

• Whether the Royal Canadian Mounted Police conducted a reasonable search for records
• Whether Federal Policing searched for records up to July 5, 2023
• Whether National Division searched for records created after May 29, 2023
• Whether the Commissioner's Office's search timeframe was adequate
• Whether the 4600-page PROS Occurrence Report was relevant to the request timeframe

The complainant alleged that National Defence (DND) failed to respond to an access request within the 30-day statutory period, constituting a deemed refusal under subsection 10(3) of the Access to Information Act. The request sought "Report 002-18: The militia movement, the III%, and the threat to DND/CAF" and associated documents. The investigation confirmed that DND did not respond by the deadline of April 9, 2025, and had not extended the timeline. The delay was attributed to the Office of Primary Interest (OPI), Canadian Forces Intelligence Command (CFINTCOM), which had not yet retrieved the records despite estimating only 13 pages. The Information Commissioner found this delay unacceptable and emphasized the collective responsibility of all DND personnel to respect access rights. The complaint was found to be well founded, and DND was ordered to provide a complete response within 36 business days.

• Whether National Defence responded to the access request within the 30-day period set out in section 7 of the Access to Information Act
• Whether National Defence was in deemed refusal under subsection 10(3) of the Access to Information Act

The complainant alleged that National Defence (DND) failed to respond to an access request within the 30-day period mandated by section 7 of the Access to Information Act. The request sought a Canadian Forces National Counter-Intelligence Unit (CFNCIU) document titled "Defining IMVE," dated November 8, 2018. DND received the request on March 10, 2025, making the response deadline April 9, 2025, but failed to respond by this date or to issue a valid extension. The investigation revealed that the delay was due to the Office of Primary Interest (OPI), the Canadian Forces Intelligence Command (CFINTCOM), not providing the requested records to DND's Directorate Access to Information and Privacy (DAIP). The Commissioner found this delay unacceptable, especially given the document was estimated to be only six pages long. Consequently, DND was deemed to have refused access under subsection 10(3) of the Act. The Commissioner ordered DND to provide a complete response within 36 business days, and DND agreed to comply.

• Whether the institution responded to the access request within the 30-day period set out in section 7 of the Access to Information Act
• Whether the institution was deemed to have refused access under subsection 10(3) of the Act due to delay

The complainant alleged that Transport Canada failed to conduct a reasonable search for records in response to an access request concerning communications between Transport Canada and the Royal Canadian Mounted Police (RCMP) related to Class D operation with a single engine helicopter. Initially, Transport Canada located only two pages. During the OIC's investigation, Transport Canada conducted additional searches, identifying approximately 690 more responsive pages. While the institution argued that consultations with the RCMP would take at least six months, the Commissioner found that a reasonable search had ultimately been conducted. However, the Commissioner ordered Transport Canada to process these additional records and provide a new response to the complainant within 60 business days, emphasizing that the institution bears ultimate responsibility for ensuring consultations do not unduly delay access. The complaint was found to be well founded.

• Whether Transport Canada conducted a reasonable search for records
• Whether the consultation process with the RCMP unduly delayed access

The OPC investigated a complaint against Google regarding its search engine displaying outdated media articles about the Complainant's HIV status and a stayed criminal charge when their name was searched. The Complainant alleged these articles caused significant harm, including physical assault and lost employment, and sought their de-listing from name-based search results. The OPC's jurisdiction over Google's search engine under PIPEDA was affirmed by the Federal Court and Federal Court of Appeal, rejecting Google's claims of non-commercial activity and journalistic exemption. The OPC found Google did not contravene Principle 4.6 (accuracy), as its responsibility was for the search results accurately reflecting linked content, not the content itself. However, the OPC concluded that Google contravened subsection 5(3) (appropriate purposes), determining that the significant harms to the Complainant's safety and dignity outweighed the limited public interest in the articles remaining linked to their name. The OPC recommended Google de-list the articles from searches for the Complainant's name, balancing privacy rights with freedom of expression. Google declined to implement this recommendation, stating it required further court guidance on the "right to de-listing" and Charter implications. Consequently, the complaint was found well-founded and unresolved regarding subsection 5(3), and not well-founded for the accuracy issue.

• Whether PIPEDA applies to Google's search engine service as a commercial activity within the meaning of paragraph 4(1)(a) of PIPEDA
• Whether the operation of Google’s search engine service is excluded from the application of Part 1 of PIPEDA by virtue of paragraph 4(2)(c) of PIPEDA because it involves the collection, use or disclosure of personal information for journalistic, artistic or literary purposes and for no other purpose
• Whether Google is contravening Accuracy requirements under Principle 4.6 of Schedule 1 of PIPEDA by continuing to display the search results in response to searches for the Complainant’s name
• Whether Google is contravening subsection 5(3) of PIPEDA by continuing to display the search results in response to searches for the Complainant’s name, considering whether the purposes are appropriate in the circumstances
• Whether the accessibility of information in response to a search for the Complainant's name causes significant harm to the Complainant
• Whether the significant harm to the Complainant outweighs the public interest in the search results remaining available through Google's search engine by searching the Complainant's name
• Whether Google collected, used, or disclosed personal information without consent under Principles 4.3.4 and 4.3.8 of Schedule 1 of PIPEDA (OPC declined to address)

The complainant alleged that the Canadian Broadcasting Corporation (CBC) improperly withheld the number of paid subscribers to its Gem streaming service under section 68.1 and paragraph 18(b) of the Access to Information Act. The Commissioner found that while the information related to CBC's programming activities, it also related to its general administration, thereby engaging the exception to the section 68.1 exclusion. Consequently, section 68.1 did not apply. Regarding paragraph 18(b), the Commissioner determined that CBC failed to demonstrate a reasonable expectation of harm to its competitive position or interference with negotiations, beyond a mere possibility. The Commissioner concluded that neither exemption applied and ordered CBC to disclose the information. CBC, however, notified the Commissioner that it would not implement the order, leading to a well-founded complaint.

• Whether the information relates to CBC's journalistic, creative or programming activities under s.68.1 ATIA
• Whether the information relates to CBC's general administration, engaging the exception to s.68.1 ATIA
• Whether s.68.1 ATIA applies when information relates to both programming activities and general administration
• Whether disclosure could reasonably be expected to harm CBC's competitive position under s.18(b) ATIA
• Whether disclosure could reasonably be expected to interfere with CBC's negotiations under s.18(b) ATIA
• Whether the CRTC's non-publication of subscriber figures supports CBC's claim of harm under s.18(b) ATIA