Canadian privacy & access decisions

The complainant alleged that Crown-Indigenous Relations and Northern Affairs Canada (CIRNAC) failed to conduct a reasonable search for records from the Deputy Minister’s Office concerning the funding or fiscal management of the Assembly of First Nations between January 1, 2016, and April 1, 2019. The investigation revealed that CIRNAC's initial search was inadequate, as it did not task all relevant sectors despite internal recommendations and evidence suggesting the existence of more records. Specifically, the Policy and Strategic Direction (PSD) sector and the Audit and Evaluation sector were not initially tasked, even though the Deputy Minister's Office suggested their relevance. Furthermore, CIRNAC did not adequately explain why records from PSD prior to 2017 were inaccessible or why there was a paucity of records despite the Deputy Minister's known involvement in related discussions. The Commissioner concluded that CIRNAC did not conduct a reasonable search and ordered the institution to perform a new search and provide a revised response.

• Whether Crown-Indigenous Relations and Northern Affairs Canada conducted a reasonable search for records from the Deputy Minister’s Office relating to funding or fiscal management of the Assembly of First Nations from January 1, 2016 to April 1, 2019
• Whether all relevant sectors were tasked in the search
• Whether the inaccessibility of records prior to 2017 was adequately explained
• Whether the paucity of located records was reasonable given the Deputy Minister's involvement

The complainant alleged that the Canada Border Services Agency (CBSA) failed to conduct a reasonable search for records in response to an access request for emails, text messages, and briefing notes related to companies working on the ArriveCAN application. The complainant specifically questioned the absence of text messages in the records provided. The Office of the Information Commissioner (OIC) investigated CBSA's search efforts, including the program areas involved, search parameters, and policies regarding text message management. CBSA explained that text messages are often considered transitory, especially if followed by an email, and that employees are responsible for saving non-transitory messages to a corporate repository. The OIC found that the Offices of Primary Interest conducted searches in appropriate repositories and that it was reasonable to believe that relevant text messages either did not exist or were not considered relevant at the time of the request, in line with CBSA and Treasury Board Secretariat policies. Consequently, the Information Commissioner concluded that CBSA conducted a reasonable search.

• Whether the Canada Border Services Agency conducted a reasonable search for records
• Whether text messages related to the ArriveCAN application existed and should have been provided
• Whether CBSA's information management policies regarding text messages were appropriately applied

The complainant alleged that Health Canada failed to respond to an access request within the 30-day statutory period, as required by section 7 of the Access to Information Act. The request sought internal and external records related to a Regulatory Impact Analysis Statement for the Regulations Amending the Tobacco Products Regulations. Health Canada acknowledged that it had not responded by the deadline and was deemed to have refused access under subsection 10(3). The institution identified 20,250 pages of responsive records and indicated that extensive consultations with its Legal Services Unit, 10 other government departments, and 25-30 third parties would be required. Health Canada proposed a response date of July 17, 2030, citing the volume and complexity of records, and workload. The Commissioner found this proposed timeline unreasonable given the significant delay already incurred and the complainant's denied access rights. The Commissioner ordered Health Canada to provide a complete response by April 7, 2026, which the institution agreed to implement.

• Whether Health Canada responded to the access request within the 30-day period set out in section 7 of the Access to Information Act
• Whether Health Canada's proposed response date of July 17, 2030, was reasonable

The complainant, a father involved in a custody dispute, submitted an ATIP request to Immigration, Refugees and Citizenship Canada (IRCC) for his minor child's passport application, which had been submitted by his former spouse. He provided a court order authorizing him to obtain his children's information from third parties. IRCC denied the request, stating that the child's consent was required. The complainant alleged that IRCC improperly denied access despite the court order. The OPC investigated whether the complainant had a right of access under paragraph 10(a) of the Privacy Regulations, which allows access on behalf of a minor under certain conditions. The OPC found that while the child was a minor and the complainant had legal authorization to administer the child's affairs, the request was not made on the child's behalf, but rather for the complainant's own interests. Therefore, the third condition of paragraph 10(a) was not met, and IRCC's denial was deemed reasonable.

• Whether the complainant had a right of access to his child’s personal information under section 10 of the Privacy Regulations
• Whether the child was a minor at the time of the ATIP request
• Whether the complainant had legal authorization to administer the child's affairs
• Whether the complainant exercised the right of access on the minor’s behalf
• Whether the child had the decision-making capacity to provide consent for the release of their personal information

The complainant alleged that National Defence (DND) improperly withheld information under subsection 19(1) (personal information) of the Access to Information Act and failed to conduct a reasonable search for records. The request sought records related to the funding of a medical residency training program. DND conceded that it had not properly applied subsection 19(1) in all instances and issued a supplementary disclosure, with the Commissioner finding the remaining withholdings appropriate. However, the Commissioner concluded that DND did not conduct a reasonable search initially, as additional records were found during the investigation, and some responsive records that should have existed were not retained. The Commissioner recommended DND ensure employees receive training and support on information management responsibilities. DND agreed to implement the recommendations and shared a plan for improving records management practices. The complaint was found to be well founded.

• Whether information was properly withheld under subsection 19(1) ATIA
• Whether the information met the requirements of subsection 19(1) ATIA
• Whether DND reasonably exercised its discretion under subsection 19(2) ATIA
• Whether DND conducted a reasonable search for records
• Whether DND failed to pursue inquiries to locate all responsive records