Canadian Privacy Decisions

The complainant alleged that the Public Service Commission of Canada (PSC) contravened the Privacy Act by disclosing her private medical information to multiple witnesses during an investigation into potential fraud. The OPC found that while the PSC's collection and use of the information were justified, the disclosure of the doctor's letter to all witnesses was not a "consistent use" and thus contravened the Act. The PSC has committed to implementing new procedures to ensure future compliance.

• Whether the disclosure of medical information to all witnesses in an investigation complied with the Privacy Act's "consistent use" provision.
• Whether the PSC's disclosure of medical information was necessary for procedural fairness.
• Whether the PSC's interpretation of "affected person" was overly broad, leading to excessive disclosure.