BreachOfPrivacy

Canadian Privacy Decisions

The comprehensive archive of Canadian privacy decisions from federal, provincial, and territorial commissioners — with AI-summarized plain-language summaries for every decision.

62 decisions matching
Federal (Canada)Privacy ActWell-founded
Jan 24, 2025· Indexed Apr 12, 2026

Measures to anonymize sensitive polygraph records mitigated privacy impacts of NSIRA review

NSIRA Secretariat

This investigation examined complaints regarding the National Security and Intelligence Review Agency's (NSIRA) Secretariat's request for access to polygraph records as part of a review of the Communications Security Establishment. The OPC found that the anonymization measures significantly reduced re-identification risks, and the polygraph recordings themselves contained no personal information. However, concerns were raised about the timeliness of the Secretariat's requests to Treasury Board Secretariat for approval of Personal Information Banks (PIBs). The collection issue was found not well-founded, but the timeliness of PIB updates was found well-founded and subsequently resolved.

Quick View

Privacy ActWell-founded

Measures to anonymize sensitive polygraph records mitigated privacy impacts of NSIRA review

Jan 24, 2025
Adjudicator: Philippe Dufresne
Plain-Language Summary

This investigation examined complaints regarding the National Security and Intelligence Review Agency's (NSIRA) Secretariat's request for access to polygraph records as part of a review of the Communications Security Establishment. The OPC found that the anonymization measures significantly reduced re-identification risks, and the polygraph recordings themselves contained no personal information. However, concerns were raised about the timeliness of the Secretariat's requests to Treasury Board Secretariat for approval of Personal Information Banks (PIBs). The collection issue was found not well-founded, but the timeliness of PIB updates was found well-founded and subsequently resolved.

Key Issues
  • Whether the NSIRA Secretariat collected personal information without a direct relationship to its operating programs or activities.
  • Whether the NSIRA Secretariat complied with its obligations to include all personal information under its control in Personal Information Banks (PIBs).
  • Assessment of privacy mitigation measures implemented by CSE to anonymize polygraph records.
  • Timeliness of the NSIRA Secretariat's requests for PIB approvals and publication of its Info Source page.
Federal (Canada)Access to Information ActWell-founded
Jan 13, 20255823-03025· Indexed Apr 21, 2026

A-2023-00192 — Indigenous Services Canada

Indigenous Services Canada

The complainant alleged that Indigenous Services Canada (ISC) did not conduct a reasonable search for records concerning housing guides and criteria for Indigenous communities from 1960 to 1990. The Office of the Information Commissioner (OIC) found the search was initially unreasonable, as ISC failed to retrieve all relevant records. After further searches prompted by the OIC, 800 pages of responsive records were identified. The OIC ordered ISC to release records promptly, with a final response to follow.

Quick View

Access to Information ActWell-founded

A-2023-00192 — Indigenous Services Canada

Jan 13, 20255823-03025
Adjudicator: Caroline Maynard
Plain-Language Summary

The complainant alleged that Indigenous Services Canada (ISC) did not conduct a reasonable search for records concerning housing guides and criteria for Indigenous communities from 1960 to 1990. The Office of the Information Commissioner (OIC) found the search was initially unreasonable, as ISC failed to retrieve all relevant records. After further searches prompted by the OIC, 800 pages of responsive records were identified. The OIC ordered ISC to release records promptly, with a final response to follow.

Key Issues
  • Reasonableness of the search conducted by the institution.
  • Identification and retrieval of all responsive records.
  • Timeliness of interim and final responses to the access request.