Canadian privacy & access decisions

The complainant alleged that National Defence (DND) failed to respond to an access request within the 30-day statutory period for all documents relating to the course of action of Operation Aegis. The OIC found that DND received the request on September 1, 2023, and did not extend the response period or transfer the request, making the deadline October 1, 2023. DND failed to respond by this date, leading to a deemed refusal under subsection 10(3) of the Act. The investigation revealed that delays were primarily due to the Canadian Forces Intelligence Command (CFINTCOM), one of DND's Offices of Primary Interest (OPIs), which had not yet provided all responsive records to the Departmental Access to Information and Privacy (DAIP) office. The Commissioner deemed CFINTCOM's delay unacceptable and emphasized the collective responsibility of the institution to ensure timely access to information. The complaint was found to be well-founded, and DND was ordered to provide a complete response within 60 business days.

• Whether National Defence responded to the access request within the 30-day period set out in section 7 of the Access to Information Act
• Whether National Defence validly extended the 30-day period under section 9 of the Access to Information Act
• Whether National Defence is deemed to have refused access to the requested records under subsection 10(3) of the Access to Information Act
• Whether the delay by the Office of Primary Interest (Canadian Forces Intelligence Command) in retrieving records was acceptable

An institution applied to the Information Commissioner for approval to decline to act on an access request under subsection 6.1(1) of the Access to Information Act, arguing the request was both an abuse of the right to make a request and vexatious. The request sought emails from three employees containing specific keywords and the HR file of one employee. The institution claimed it had fulfilled its duty to assist the requester by engaging in numerous communications to clarify and narrow the request. The Commissioner found that the institution had indeed made every reasonable effort to assist the requester. However, the Commissioner determined that the institution failed to provide clear and compelling evidence that the request constituted an abuse of the right of access or was vexatious. The Commissioner noted that seeking information related to government employees is not inherently abusive and that the institution did not adequately substantiate claims of undue burden or privacy invasion. Consequently, the application to decline to act on the request was denied.

• Whether the institution met its obligation to assist the requester under subsection 4(2.1) ATIA
• Whether the access request is an abuse of the right to make a request under subsection 6.1(1) ATIA
• Whether the access request is vexatious under subsection 6.1(1) ATIA

The complainant alleged that the Social Sciences and Humanities Research Council of Canada (SSHRC) improperly withheld information related to the Canada Research Chairs’ Equity, Diversity and Inclusion (EDI) Public Accountability and Transparency Requirements under several sections of the Access to Information Act. Initially, SSHRC claimed exemptions under s.16(2)(c), s.19(1), s.20(1)(c), s.20(1)(d), s.21(1)(a), and s.21(1)(b). During the investigation, the s.16(2)(c) claim was removed from the scope, and SSHRC additionally relied on s.20(1)(b). The Commissioner found that SSHRC appropriately withheld information under s.19(1) (personal information) and parts of s.21(1)(a) and s.21(1)(b) (advice/recommendations and consultations/deliberations), as the requirements for these exemptions were met and discretion was reasonably exercised. However, SSHRC failed to demonstrate that the information met the requirements for s.20(1)(b), s.20(1)(c), and s.20(1)(d) due to insufficient evidence of confidentiality, financial impact, or interference with negotiations. Consequently, the Commissioner ordered SSHRC to disclose all redacted information except that falling under s.19(1), s.21(1)(a), and s.21(1)(b). SSHRC agreed to implement the order, and the complaint was found to be well founded.

• Whether s.16(2)(c) facilitating the commission of an offence applied to the withheld information
• Whether s.19(1) personal information applied to the withheld information
• Whether SSHRC reasonably exercised discretion under s.19(2)
• Whether s.20(1)(b) confidential third-party financial, commercial, scientific or technical information applied to the withheld information
• Whether s.20(1)(c) material financial impact on a third party applied to the withheld information
• Whether s.20(1)(d) interference with contractual or other negotiations of a third party applied to the withheld information
• Whether s.21(1)(a) advice or recommendations applied to the withheld information
• Whether s.21(1)(b) accounts of consultations or deliberations applied to the withheld information
• Whether SSHRC reasonably exercised discretion under s.21(1)