Canadian Privacy Decisions

The Office of the Privacy Commissioner of Canada (OPC) investigated the Canada Border Services Agency's (CBSA) contracting practices related to the ArriveCAN application following a complaint and a request from a parliamentary committee. The investigation examined whether contractors had inappropriate access to travellers' personal information. While the OPC found no contravention of the Privacy Act, it identified shortcomings in the CBSA's contracting processes, such as issues with the timeliness and accuracy of security assessments and broad task descriptions in contracts. The OPC made recommendations to improve the CBSA's practices, which the agency accepted.

• Whether CBSA authorized contractors to access personal information without required security clearances.
• Accuracy and timeliness of security requirement assessments for contracts.
• Clarity and specificity of task descriptions in contracts and task authorizations.
• CBSA's compliance with security requirements for personnel and organizations involved in ArriveCAN contracts.

The complainant alleged that Public Services and Procurement Canada (PSPC) improperly withheld information regarding leases valued over $500,000 annually. The complainant sought records for leases signed between 2018-2022 in specific cities. PSPC invoked exemptions under paragraphs 18(b) and 20(1)(b) of the Access to Information Act, claiming harm to its competitive position and the confidentiality of third-party financial information. The Information Commissioner found that neither PSPC nor the third parties established the requirements for these exemptions, noting that rent amounts were negotiated terms and the claims of harm were speculative. The Commissioner ordered PSPC to disclose the records in full.

• Whether the annual rent figures for leases were properly withheld under paragraph 18(b) (competitive position of government institutions).
• Whether the annual rent figures were properly withheld under paragraph 20(1)(b) (confidential third-party financial or commercial information).
• Whether the annual rent figures were properly withheld under paragraph 20(1)(c) (material financial impact on a third party).
• Whether the annual rent figures were properly withheld under paragraph 20(1)(d) (interference with third-party negotiations).

The complainant alleged that Indigenous Services Canada (ISC) failed to conduct a reasonable search for records concerning a specific video posted on Facebook. During the investigation, it was found that ISC had initially excluded records interpreted as drafts, leading to the retrieval of 1,087 additional pages. The Information Commissioner found the original search unreasonable but concluded that ISC had since conducted a reasonable search. The Commissioner ordered ISC to process and respond to the additional records within 36 business days.

• Reasonableness of the search conducted by the institution
• Interpretation and application of exclusion criteria for records