Canadian privacy & access decisions

The complainant alleged that the Canadian Security Intelligence Service (CSIS) failed to conduct a reasonable search for records related to pay equity for unionized CSIS employees. The request sought communications between CSIS and other federal government departments and agencies on this topic. CSIS initially searched its Human Resource Compensation Branch but refused to search its Departmental Legal Services Unit (DLSU), arguing that DLSU records were under the control of the Department of Justice, not CSIS. The Office of the Information Commissioner found that CSIS's refusal to task its DLSU was premature and that records physically located with the DLSU could still be under CSIS's control, especially given the solicitor-client relationship and the subject matter relating directly to CSIS's mandate. The Commissioner concluded that CSIS failed to conduct a reasonable search by not retrieving and reviewing these records to determine control. The complaint was found to be well founded, and the Commissioner recommended that CSIS retrieve, review, and respond to the records from its DLSU, but CSIS declined to implement the recommendations.

• Whether CSIS conducted a reasonable search for records
• Whether records physically located with CSIS's Departmental Legal Services Unit (DLSU) are under the control of CSIS
• Whether CSIS's refusal to task its DLSU for records constitutes a failure to conduct a reasonable search

A truck driver complained that Trimac Transportation Services Inc. (Trimac) installed a dash camera in his vehicle that continuously recorded audio and video without his consent, particularly concerned with audio recording. The OPC investigated two main issues: the appropriateness of the audio recording functionality and whether employee consent was required. The OPC found that Trimac's continuous audio recording, even when drivers were off-duty, was disproportionately privacy-intrusive, despite legitimate business needs. Trimac also initially failed to be transparent about the disciplinary purposes of the system, meaning it could not rely on the employment relationship exception to consent. Trimac agreed to implement recommendations to limit audio recording to on-duty hours and restrict access to recorded clips, and has since clarified the system's disciplinary uses to employees. The OPC found the audio recording issue well-founded and conditionally resolved, and the consent issue well-founded and resolved.

• Whether road safety, asset protection, and employee performance management are appropriate purposes for the continuous collection of in-cabin audio via the System, including when drivers are off-duty and not driving, under subsection 5(3) of PIPEDA.
• Whether the collection of sensitive personal information (in-cabin audio) was justified given the legitimate need, effectiveness, less privacy-invasive means, and proportionality.
• Whether employee consent was required for the collection of personal information via the System, specifically whether Trimac could rely on the exception to consent under subsection 7.3 of PIPEDA.
• Whether Trimac was sufficiently transparent about the disciplinary purposes of its dash camera system to rely on the subsection 7.3 exception to consent.