Canadian Privacy Decisions

The complainant alleged that Public Services and Procurement Canada (PSPC) did not conduct a reasonable search for records related to a specific contract. The request concerned various documents, including feasibility reports, meeting minutes, and environmental assessments. The Information Commissioner found that some of the requested records, if they exist, were under PSPC's control, and that PSPC had failed to demonstrate a reasonable search. The Commissioner ordered PSPC to seek assistance from a third-party subcontractor to locate and obtain records, provide a new response to the complainant, and disclose any newly found records.

• Control of records held by a third-party subcontractor
• Reasonableness of the search conducted by the institution
• Definition of departmental matters under the ATIA
• Requirement to seek records from third parties

The complainant alleged that the Department of Justice Canada (Justice) took an unreasonable extension of time to respond to an access request for records concerning a presentation booking and cancellation. Justice claimed a 292-day extension under paragraph 9(1)(a) and a 90-day extension under paragraph 9(1)(b). The Information Commissioner found the 292-day extension unreasonable, citing a lack of justification and a flawed page count. As Justice also failed to respond within the 90-day extension, it was deemed to have refused access. The Commissioner ordered Justice to provide a complete response within 36 business days.

• Reasonableness of time extension claimed under ATIA s. 9(1)(a)
• Failure to respond within claimed time extension under ATIA s. 9(1)(b)
• Deemed refusal of access under ATIA s. 10(3)
• Flawed process for identifying responsive records and duplicates

The complainant alleged that Library and Archives Canada (LAC) took an unreasonable extension of time to respond to an access request for Royal Canadian Mounted Police records concerning the Communist Party of Canada. LAC claimed an 810-day extension to consult with the Canadian Security Intelligence Service (CSIS) on nearly 5,000 pages of records. The Commissioner found the extension unreasonable, noting LAC's lack of serious effort to assess the necessary duration and CSIS's lengthy estimated review time. The Commissioner ordered LAC to respond within 60 business days and recommended improvements to consultation timelines.

• Reasonableness of the 810-day extension claimed by LAC
• LAC's consultation process with CSIS
• Timeliness of response to access requests
• LAC's adherence to the Interim Directive on Access to Information

The complainant alleged that Public Services and Procurement Canada (PSPC) refused to process an access request for all emails of a specific employee. PSPC argued the request lacked sufficient detail. The Information Commissioner found that experienced employees could have identified the records and ordered PSPC to provide a complete response. The Commissioner also recommended training for PSPC employees on information management due to the large volume of emails found.

• Whether the access request provided sufficient detail for experienced institutional employees to identify relevant records with a reasonable effort, as required by section 6 of the ATIA.
• Whether PSPC reasonably refused to process the request under section 6 of the ATIA.
• Whether PSPC failed to respond to the access request within the legislated timeframe.
• Whether PSPC's information management practices are adequate to respond to access requests.

The complainant alleged that the Port Alberni Port Authority (PAPA) improperly withheld information related to the lease or sale of its assets, citing exemptions under paragraphs 18(a), 18(b), 18(c), subsection 19(1), and paragraphs 20(1)(b), 20(1)(c) of the Access to Information Act. The request was specifically for company names and amounts. PAPA failed to demonstrate that the withheld information met the requirements of these exemptions. Consequently, the Information Commissioner ordered PAPA to disclose the requested information concerning company names and amounts.

• Whether PAPA improperly withheld information regarding company names and amounts under various sections of the Access to Information Act.
• Whether the withheld information met the criteria for exemptions under paragraphs 18(a), 18(b), 18(c), subsection 19(1), and paragraphs 20(1)(b), 20(1)(c) of the ATIA.
• Whether PAPA discharged its burden to prove that the exemptions applied to the withheld information.
• The confidentiality and commercial value of the leased premises information.

The complainant alleged that Environment and Climate Change Canada (ECCC) improperly withheld records related to the recovery strategy for the whitebark pine under several sections of the Access to Information Act. The Information Commissioner found that ECCC failed to demonstrate that certain exemptions were met, particularly regarding third-party information and the severing of factual information from exempt advice or deliberations. The Commissioner ordered ECCC to disclose specific records and re-exercise discretion on others, and ECCC agreed to comply with the order.

• Application of exemptions for personal information (s. 19)
• Application of exemptions for third-party information (s. 20(1)(b))
• Application of exemptions for advice/deliberations (s. 21(1)(a) and (b))
• Application of exemptions for federal-provincial affairs (s. 14)

The complainant alleged that the Canada Border Services Agency (CBSA) improperly withheld records concerning cybersecurity and data breach risks associated with the ArriveCAN application, citing exemptions related to facilitating offences and third-party negotiations. During the investigation, CBSA disclosed some records but continued to withhold others under subsection 16(2) and claimed subsection 19(1) for personal information. The Information Commissioner found that while some information properly fell under subsection 16(2), other withheld information did not. Furthermore, CBSA failed to properly consider the disclosure of personal information under subsection 19(1). Although the complaint was found well-founded, the issue was resolved as CBSA released additional information and the complainant was satisfied.

• Applicability of subsection 16(2) (facilitating the commission of an offence)
• Applicability of paragraph 20(1)(d) (negotiations by a third party)
• Proper application of subsection 19(1) (personal information) and the discretion required under subsection 19(2)
• Procedural fairness regarding the submission of representations after an initial report

The complainant alleged that the Canadian Broadcasting Corporation (CBC) improperly withheld records containing communications between CBC and Twitter employees, citing exemptions related to the safety of individuals and personal information. The OIC found that the CBC failed to demonstrate that disclosing the requested information would reasonably be expected to threaten an individual's safety or facilitate the commission of an offence. The Commissioner ordered the CBC to disclose the withheld information.

• Whether the CBC properly applied section 17 (safety of individuals) to withhold records.
• Whether the CBC properly applied subsection 16(2) (facilitating the commission of an offence) to withhold records.
• Whether the CBC properly applied subsection 19(1) (personal information) to withhold records.
• The standard of proof for demonstrating a reasonable expectation of harm under sections 16(2) and 17.

The complainant alleged that Public Services and Procurement Canada (PSPC) improperly withheld records concerning the negotiation of a 1991 lease under section 23 of the Access to Information Act, citing solicitor-client and litigation privilege. PSPC applied these exemptions broadly to 96,781 pages of records. The Information Commissioner found that while some information qualified for solicitor-client privilege, PSPC failed to demonstrate that any information met the criteria for litigation privilege. Furthermore, PSPC did not reasonably exercise its discretion in withholding information and failed to perform severance as required by section 25.

• Application of section 23 (solicitor-client and litigation privilege)
• Application of section 25 (severance)
• Reasonableness of the institution's exercise of discretion
• Burden of proof on the institution to justify exemptions

The complainant alleged that Environment and Climate Change Canada (ECCC) improperly withheld records related to Taseko Mines Limited’s New Prosperity Project under several exemptions in the Access to Information Act. The Information Commissioner found that ECCC failed to demonstrate that information withheld under paragraphs 20(1)(d) (negotiations by a third party), 21(1)(a) (advice or recommendations), and 21(1)(b) (accounts of consultations or deliberations) met the exemption criteria, and that certain information claimed under section 23 (solicitor-client privilege) did not qualify. ECCC has agreed to comply with the order to disclose the specified information. The complaint was found to be well founded.

• Whether information withheld under paragraph 20(1)(d) interfered with third-party negotiations
• Whether information withheld under paragraph 21(1)(a) constituted advice or recommendations
• Whether information withheld under paragraph 21(1)(b) constituted accounts of consultations or deliberations
• Whether information withheld under section 23 met the criteria for solicitor-client or litigation privilege

This investigation examined allegations that the Canada Revenue Agency (CRA) inappropriately disclosed an adopted child's adoptive name, and the adoptive mother's personal information, to the child's biological mother. The OPC found that, on the balance of probabilities, the CRA likely disclosed the child's adoptive name, contravening section 8 of the Privacy Act. Deficiencies were also identified in the CRA's internal procedures for safeguarding adopted children's personal information. The complaint was found to be well-founded but not resolved, as the CRA agreed to implement some, but not all, of the OPC's recommendations.

• Whether the CRA disclosed the child's adoptive name and the adoptive mother's personal information to the biological mother without consent.
• Whether the CRA's internal procedures adequately protected the personal information of adopted children.
• Whether the CRA's actions contravened section 8 of the Privacy Act.
• Whether the complaint was resolved based on the CRA's response to the OPC's recommendations.

The complainant alleged that the Canada Border Services Agency (CBSA) did not conduct a reasonable search for Microsoft Teams messages related to ArriveCAN. CBSA's policy retains these messages for only 30 days, but an administrative error delayed the processing of the request beyond this period, leading officials to believe no records existed. Although CBSA later found one relevant record in its corporate repositories during the investigation, the initial delay meant a reasonable search was not conducted at the time of the request. The complaint was found to be well founded.

• Reasonableness of the search conducted by the institution
• Timeliness of request processing
• Impact of administrative errors on the right of access
• Proper retention and retrieval of electronic records

The complainant alleged that the Canada Revenue Agency (CRA) improperly denied access to personal information related to five grievances, relying on exceptions under the Privacy Act. The OPC found that while the CRA conducted reasonable searches, it failed to adequately substantiate its use of paragraph 22(1)(b) of the Act to withhold information. Much of the withheld information was transactional and did not demonstrate a clear risk of harm upon disclosure. The complaint was found to be well-founded, but unresolved, as the CRA maintained its position on the withheld information.

• Proper application of paragraph 22(1)(b) of the Privacy Act regarding risk of harm.
• Adequacy of government institution's searches for responsive records.
• Substantiation of claims for withholding information under statutory exemptions.
• Requirement for case-by-case assessment when applying exemptions.

The complainant alleged that Transport Canada improperly withheld information related to rail workplace fatality investigation reports. The request was for copies of all such reports completed since January 2000. The Information Commissioner found that Transport Canada failed to demonstrate that the exemptions for personal information (s.19) and third-party commercial/financial/technical information (s.20) were properly applied in all instances. Specifically, Transport Canada did not reasonably exercise its discretion regarding publicly available personal information and failed to justify withholding certain third-party information.

• Proper application of the personal information exemption (s.19 ATIA)
• Proper application of the third-party commercial, financial, or technical information exemption (s.20(1)(b) ATIA)
• Proper application of the third-party financial impact or competitive harm exemption (s.20(1)(c) ATIA)
• Reasonable exercise of discretion by the institution

The complainant alleged that Health Canada improperly withheld information related to campfires and air quality, citing exemptions for personal information and financial impact on third parties. Health Canada initially withheld names and short texts about third parties under the financial impact exemption. However, the third parties did not provide evidence of material financial harm, and one explicitly stated disclosure would not cause harm. The Information Commissioner found the complaint well-founded, ordering Health Canada to disclose the withheld information.

• Whether information withheld under paragraph 20(1)(c) met the requirements of the exemption.
• Whether third parties demonstrated a material financial impact or harm to their competitive position.
• Whether disclosure was in the public interest and outweighed potential harm.