2020 to 2021 Annual Report on the Access to Information Act and the Privacy Act

Information contained in this publication or product may be used and reproduced, in part or in whole, and by any means, for personal or public non-commercial purposes, without charge or further permission, unless otherwise specified, provided that you do the following:

• exercise due diligence in ensuring the accuracy of the materials reproduced
• indicate both the complete title of the materials reproduced, as well as the author organization
• indicate that the reproduction is a copy of an official work published by the Government of Canada and that the reproduction has not been produced in affiliation with, or with the endorsement of, the Government of Canada

Commercial reproduction and distribution is prohibited, except with written permission from Public Services and Procurement Canada (PSPC). For more information, please contact PSPC at questions@tpsgc-pwgsc.gc.ca.

The official symbols of the Government of Canada, including the Canada wordmark and flag symbol, may not be reproduced, whether for commercial or non-commercial purposes.

© Her Majesty the Queen in Right of Canada, represented by the Minister of Public Services and Procurement, 2021.

Aussi disponible en français.

ISSN 2562-623X

Introduction

Public Services and Procurement Canada is pleased to present to Parliament its annual report on the administration of the Access to Information Act and the Privacy Act . This integrated report describes the activities that support compliance with both acts for the fiscal year commencing April 1, 2020, and ending March 31, 2021.

Section 94 of the Access to Information Act, section 72 of the Privacy Act and section 20 of the Service Fees Act require that the head of every federal government institution submit an annual report to Parliament on the administration of the Access to Information Act and the Privacy Act during the fiscal year.

In the spirit of efficiency, ease of access and continuous improvement, PSPC is responding to this obligation by submitting an integrated annual report.

Purpose of the acts

Access to Information Act

The purpose of the Access to Information Act is to enhance the accountability and transparency of federal institutions in order to promote an open and democratic society and to enable public debate on the conduct of those institutions. In furtherance of that purpose, part 1 extends the present laws of Canada to provide a right of access to information in records under the control of a government institution in accordance with the principles that government information should be available to the public, that necessary exceptions to the right of access should be limited and specific, and that decisions on the disclosure of government information should be reviewed independently of government; and part 2 sets out requirements for the proactive publication of information.

Privacy Act

The purpose of the Privacy Act is to extend the present laws of Canada that protect the privacy of individuals with respect to personal information about themselves held by a government institution and that provide individuals with a right of access to that information. The Privacy Act protects an individual’s privacy by preventing others from having unlawful access to personal information. It also grants an individual specific rights regarding the collection, use and disclosure of this information.

About Public Services and Procurement Canada

Public Services and Procurement Canada, formerly Public Works and Government Services Canada, derives its mandate from the Department of Public Works and Government Services Act of 1996, which established the department as a common service provider. As such, the department plays an important role in the daily operations of the Government of Canada as a key provider of services for federal departments and agencies. The department supports them in the achievement of their mandated objectives in 5 service categories:

• buying and selling
• pay, pension and benefits
• property and buildings
• security, corporate and information services
• Translation Bureau

PSPC has 17,000 employees, and services are provided across Canada through 5 regional offices, as well as offices in Europe and Washington, DC, United States.

Delegation of authority

Pursuant to section 95(1) of the Access to Information Act and section 73(1) of the Privacy Act, the Minister of Public Services and Procurement has delegated the power, duties and functions of the administration of the acts to the access to information and privacy (ATIP) senior director and managers (with the exception of paragraph 8(2)(m) of the Privacy Act). Certain administrative functions are also delegated to ATIP managers, team leaders and senior analysts to accelerate the processing of requests.^{Footnote 1}

Organizational structure

The ATIP Directorate is responsible for the administration of the Access to Information Act and the Privacy Act within PSPC. The ATIP senior director acts as the department’s ATIP coordinator. The directorate is overseen by the director general of the Corporate Secretariat and Accessibility Sector, who is also the department’s chief privacy officer.

In the 2020 to 2021 fiscal year, 51.202 full-time equivalent (FTE) employees administered the acts with the support of consultant services composed of 11.37 FTEs and casual employees composed of 2.67 FTEs, for a total complement of 65.243 FTEs.

Access to Information and Privacy reporting structure at Public Services and Procurement Canada

The Access to Information Act and the Privacy Act allow for the provision of services by a government institution to another government institution that is presided over by the same minister. In fiscal year 2020 to 2021, PSPC did not have any such service agreement under section 96 of the Access to Information Act and section 73.1 of the Privacy Act.

Performance for 2020 to 2021

Requests received

Access to information requests received and completed

The department received a total of 800 requests pursuant to the Access to Information Act in the 2020 to 2021 reporting period, which represents an increase of 27% compared to the previous year. The increase is due to the role that PSPC played in supporting the government’s response to the COVID-19 pandemic such as the purchase of personal protective equipment and vaccines that evoked interest from the public. The compliance rate was 47.5% due to the fact that PSPC’s ATIP operations were disrupted by the pandemic and limited network access in the first 2 quarters of the fiscal year. Additionally, Procurement Branch saw a significant increase in the volume of access to information requests, but had limited capacity to process them within legislated timelines given their focus on emergency COVID-19 procurement. The majority of the access to information requests received by the department during 2020 to 2021 related to contracts, COVID-19 initiatives and briefing notes on various topics.

Privacy requests received and completed

PSPC received a total of 353 privacy requests in the 2020 to 2021 reporting period, which represents a decrease of 29% from the previous year. The overall compliance rate for privacy requests was 70% for the reporting period, a significant decrease from the 92% compliance rate from the previous reporting period due to the fact that PSPC’s ATIP operations were disrupted by the pandemic and limited network access in the first 2 quarters of the fiscal year. The requests were mainly related to pension and pay files, labour relations matters, as well as employment, staffing and security records.

Pages reviewed

In 2020 to 2021, PSPC reviewed 271,785 pages for requests received under the Access to Information Act and reviewed 161,594 pages for requests received under the Privacy Act.

Sources of requests under the Access to Information Act

As with the previous fiscal year, during the 2020 to 2021 reporting period PSPC received the majority (65.26%) of its requests under the Access to Information Act from 3 sources:

• members of the public (21%)
• the media (26%)
• private sector businesses (18%)

2020 to 2021 saw a significant increase (15% to 33%) in the percentage of requesters who declined to identify themselves from the previous year.

Sources of requests

Informal access requests under the Access to Information Act

PSPC publishes summaries of completed access to information requests pertaining to records that do not contain personal or third-party information on the open government portal. Members of the public can then submit informal requests for a copy of previously released information without having to pay the application fee.

In fiscal year 2020 to 2021, PSPC processed 197 informal access to information requests, which represents a decrease of 40% from the 331 informal requests processed during the 2019 to 2020 reporting period.

Exemptions

Access to Information Act

The department invoked exemptions on 287 requests (48%), and all information was disclosed in 114 requests (19%). The remaining 199 (33%) were either abandoned, transferred or no records existed.

The majority of exemptions invoked by PSPC fell under 3 sections of the Access to Information Act:

• section 19(1), which protects personal information, was used in 184 files (31%)
• paragraph 20(1)(b), which protects confidential financial, commercial, scientific or technical information belonging to a third party, was used in 149 files (25%)
• paragraph 20(1)(c), which protects information the disclosure of which could reasonably be expected to result in material financial loss or gain to, or could reasonably be expected to prejudice the competitive position of, a third party, was used in 123 files (20%)

Of note, more than one section (exemption) can be applied to a specific request.

Privacy Act

The department invoked exemptions on 110 requests (29%), and all information was disclosed in 146 requests (38%). The remaining 125 requests (33%) were either abandoned or no records existed.

The majority of exemptions invoked by PSPC fell under 3 sections of the Privacy Act:

• section 26, which protects personal information, was used in 106 files (28%)
• paragraph 22(1)(b), which addresses law enforcement and criminal investigations, was used in 4 files (1%)
• section 27, which protects solicitor-client privilege information, was used in 5 files (1%)

Of note, more than one section (exemption) can be applied to a specific request.

Exclusions

The Access to Information Act and the Privacy Act do not apply to or exclude certain types of information, specifically records that are already available to the public (section 68 of the Access to Information Act) and confidence of the Queen’s Privy Council for Canada (section 69 of the Access to Information Act and section 70 of the Privacy Act).

Overall in the 2020 to 2021 reporting period, PSPC applied exclusions to records requested under the Access to Information Act on 5 occasions pursuant to section 68, and cited section 69 in 73 exclusions.

No exclusions were applied under the Privacy Act during the reporting period.

Disclosure of personal information under subsection 8(2)

In accordance with subsection 8(2) of the Privacy Act, under certain circumstances, a government institution may disclose personal information under its control without the consent of the individual to whom the information relates.

Thirteen disclosures of personal information were made during the reporting period under the Privacy Act pursuant to paragraph 8(2)(e), releasing the information to investigative bodies regarding 13 individuals. There was no disclosure made under paragraph 8(2)(m)—public interest or benefit to individual—of the Privacy Act during fiscal year 2020 to 2021.

Consultations

PSPC responded to 180 consultations from other government institutions and organizations for records relating to the department’s activities. These consultations totaled 23,045 pages, with 175 files (22,966 pages) relating to the Access to Information Act and 5 files (79 pages) relating to the Privacy Act. A total of 64% of access to information consultation files were responded to within 60 days against 45% for formal requests.

Extensions

Section 9 of the Access to Information Act permits the statutory time limits to be extended if consultations are necessary or if the request is for a larger volume of records, and if processing it within the original time limit would unreasonably interfere with the operations of the department.

PSPC invoked a total of 313 extensions during the 2020 to 2021 reporting period. Extensions were required in 117 instances in order to allow consultations with other government institutions. In 113 files, third-party consultations were necessary, and extensions taken accordingly. Extensions were required in 83 cases where the request necessitated a search through a large volume of records, which otherwise would have interfered with operations.

Section 15 of the Privacy Act permits the statutory time limits to be extended if consultations are necessary, if translation is required, or if the request is for a large volume of records and processing it within the original time limits would unreasonably interfere with the operations of the department.

PSPC invoked 67 extensions during the 2020 to 2021 reporting period. Of these, 62 were deemed necessary to allow the department to search for or through a large volume of records or to respond to the influx of records, which interfered with operations. A further 5 files required extensions to allow for consultations prior to responding. The department did not invoke any extensions for the purpose of translation.

Completion times

Access to information requests

Privacy requests

PSPC’s overall compliance rate for the 2020 to 2021 reporting period was 47.5% for requests under the Access to Information Act and 70.3% for requests under the Privacy Act. This is mainly due to the fact that PSPC’s ATIP operations were disrupted by the COVID-19 pandemic and had limited network access in the first 2 quarters of the fiscal year. These compliance rates represent all files that were completed either within the initial 30 days or within an extension period taken for reasons of volume or consultations.

The percentage of requests under the Access to Information Act completed within the initial 30 days was 29.4%. Given the nature of PSPC’s mandate as a service provider and central purchasing agent, the department is often required to perform consultations in order to seek input from other institutions and complete all required actions on a file. Therefore, a large number of PSPC’s access to information files require extensions beyond the 30-day legislative period.

The percentage of requests under the Privacy Act completed within the initial 30 days was 59.31%, which represents a decrease of 22.26% from fiscal year 2019 to 2020.

Fees

The Access to Information Act requires a $5 application fee to make a request. Based on requests received during 2020 to 2021, PSPC collected $3,000 in application fees. In accordance with the Interim Directive on the Administration of the Access to Information Act, issued on May 5, 2016, and the changes to the Access to Information Act that came into force on June 21, 2019, PSPC waived all fees prescribed by the act and its regulations, other than the $5 application fee set out in paragraph 7(1)(a) of the regulations. PSPC also waived or refunded a total of $1,000 in application fees. The total operating cost of the ATIP program at PSPC for fiscal year 2020 to 2021 was $6,841,428.

Disposition

Approximately 82% of all requests completed pursuant to the Access to Information Act during the 2020 to 2021 reporting period were either disclosed in part (58.47%) or fully disclosed (23.55%). Additionally, 16.74% of requests were abandoned.

Access to information request disposition

Approximately 76% of all requests completed pursuant to the Privacy Act during the 2020 to 2021 reporting period were either disclosed in part (32.24%) or fully disclosed (43.58%). Additionally, 23.58% of requests were abandoned.

Privacy request disposition

Impact of COVID-19

Exceptional measures have been taken by PSPC to support the Government of Canada’s response to COVID-19 and devote resources to new challenges. Initially, due to network access challenges, the shift to remote work significantly limited PSPC’s ability to process requests made under the Access to Information Act and the Privacy Act. Consequently, most of the PSPC offices of primary interest (OPIs) were unable to respond to ATIP tasking and provide required documents.

The ATIP Directorate developed and implemented the following mitigating measures to adapt to the pandemic:

• in March 2020, PSPC’s primary focus became supporting the government’s emergency pandemic response efforts. With employees required to work from home, this resulted in limited virtual private network (VPN) access for PSPC staff outside of the COVID-19 response
• PSPC placed all access and privacy requests on hold to allow the department to focus on essential services, including payroll, pensions and procurement. Requesters were informed of that decision. They were also assured that the ATIP Directorate was making every effort to respond to all requests within a reasonable time frame and employees were available to answer their questions
• in order to continue to respond to Canadians while limiting the demand on the network, ATIP officials changed their work habits in order to work outside of normal working hours, sent documents exclusively through epost and discovered and used alternate technologies like Zoom, Facebook Messenger, Google Hangouts and MS Teams to collaborate with colleagues, as appropriate, given security considerations
• as the situation evolved, OPI capacity assessments were carried out allowing the ATIP Directorate to begin tasking OPIs that had the operational capacity to process requests
• on July 6, 2020, PSPC authorized employees to return to the workplace in order to be able to access files, including secret files, when possible, while respecting public health authorities’ instructions
• on September 23, 2020, the hold was lifted and PSPC fully resumed regular operations. Regular activities included sending out publication notices, weekly reports, and tasking reminders to liaison officers. This ensured that the department was in compliance with ATIP legal obligations, given the ongoing COVID-19 context

As the pandemic has continued into a second fiscal year, the impact of PSPC’s continued role in Canada’s COVID-19 response has resulted in continued challenges in the processing of ATIP files.

The statistical report on the capacity to receive and process requests during the pandemic is attached as Annex D: Supplemental statistical report on the Access to Information Act and Privacy Act.

Complaints and audits

Access to Information Act

During the 2020 to 2021 reporting period, PSPC was notified of 70 complaints received by the Office of the Information Commissioner of Canada. Most of these complaints were related to delays or to the exemptions or exclusions applied.

During the reporting period, the ATIP Directorate processed and closed 27 complaint investigations. Of these, 7 were deemed well-founded, 4 were deemed not well-founded and 9 were discontinued, while 14 were settled or resolved to the satisfaction of the requester.

During the 2020 to 2021 reporting period, no audits were undertaken under the Access to Information Act. PSPC has worked collaboratively with the Office of the Information Commissioner of Canada by holding regular meetings to ensure prompt resolution of issues on common files.

Privacy Act

During the 2020 to 2021 reporting period, the department was notified of 7 privacy complaints received by the Office of the Privacy Commissioner of Canada. Most of these complaints were related to delays and missing records.

During the reporting period, the ATIP Directorate processed and closed 2 complaint investigations. Of these, 1 was deemed well-founded, settled and resolved, and 1 was deemed not well-founded.

During the 2020 to 2021 reporting period, no audits were undertaken under the Privacy Act.

Monitoring compliance

The ATIP Directorate provides a weekly “snapshot” report to senior executives that contains statistics on the number of requests received and processed under the acts. There is also a weekly summary report of upcoming requests soon to be disclosed under the Access to Information Act.

During the 2020 to 2021 reporting period, the ATIP Directorate produced quarterly dashboards intended to further support monitoring and increasing compliance within the department, including branch performance and complaints.

Appeal to the Federal Court of Canada

During the 2020 to 2021 fiscal year, no new application was filed with the Federal Court of Canada against PSPC pursuant to section 44 of the Access to Information Act.

Privacy impact assessments

In the course of fulfilling its mandate as a service provider, PSPC collects, retains, uses and discloses personal information. The ATIP Directorate’s Privacy Management Division provides advice and guidance to program officials throughout the privacy impact assessment (PIA) process for programs and activities, in accordance with the Treasury Board Interim Directive on Privacy Impact Assessment.

During the 2020 to 2021 fiscal year, PSPC completed two PIAs.

Electronic procurement solution

PSPC awarded a contract to Infosys Public Services to implement and manage an electronic procurement solution based on public cloud software as a service (SaaS) system. The electronic procurement solution delivered by Infosys Public Services and its partners—Ernst and Young, and SAP Inc.—is a cornerstone of procurement modernization. The solution is a bilingual (English and French) Government of Canada–wide SaaS that combines SAP Ariba, the world’s largest business commerce network, and SAP Fieldglass, an external resource management platform that helps organizations transform how they manage talent across multiple channels.

A PIA was authored, as electronic procurement solutions will provide modern and innovative e-tools and applications for all facets of the procurement process, including e-sourcing, contract lifecycle management, spend analysis, supplier relationship management and e-purchasing through catalogues. It also provides one portal for all acquisitions needs, facilitates suppliers’ interactions with the Government of Canada and provides greater accessibility for public sector clients to procure goods and services at the best value possible.

Receiver General for Canada: Treasury

This PIA is a high-level review of privacy compliance of payment issuance and receipt processing activities supported by existing central systems, mainly the Standard Payment System and the Government Banking System.

This PIA reviews and identifies any areas within the Receiver General payment function that may have risks. It also reviews the use of personal information and how data flows. This review provided the opportunity to ensure that the personal information being used was required for the continued operations of the Receiver General. Finally, this PIA included a privacy compliance analysis to ensure that all personal information continues to be properly used and protected in all Receiver General activities.

Summaries of all completed privacy impact assessments are posted on PSPC’s website.

Material privacy breaches

During the 2020 to 2021 fiscal year, PSPC has not received any reports of material privacy breaches nor reported any to the Office of the Privacy Commissioner of Canada (OPC) and the Treasury Board of Canada Secretariat (TBS).

Initiatives

To improve internal processes and client service in its administration of the Access to Information Act and the Privacy Act, PSPC undertook the following initiatives during the 2020 to 2021 fiscal year:

• initiated PSPC’s approach towards transparency and openness in order to prioritize departmental efforts to go beyond proactive publication and make PSPC information of public interest available to Canadians:
  • the approach aims to produce a transparency policy directive to further generate a cultural shift of transparency by design
  • this initiative directly supports the government-wide and ministerial mandated priority of continuing to “raise the bar on openness, effectiveness and transparency in government”
• created and implemented a new training course named “Privacy Breach awareness”:
  • this course aims to inform PSPC employees of the importance of protecting the personal information they hold, the steps to take in the event of a privacy breach and the mechanisms to put in place to prevent future breaches
• carried out a thorough review of the privacy breach protocol:
  • this review concluded that no major changes were required as the protocol provides an appropriate privacy management tool for processing and responding to privacy breaches
  • amendments were made to the Breach Incident Report to enable collection of more in-depth information and to better assist employees in their investigations of reported incidents

The launch of the new Directive on Privacy Management did not occur as originally planned. In September 2020, PSPC implemented a framework for departmental policy instruments. While this framework provides mandatory procedures, it required further internal consultations as per the amended requirements. These consultations will occur in fiscal year 2021 to 2022.

Policies, guidelines and procedures

Proactive publication

Bill C-58, an act to amend the Access to Information Act and the Privacy Act and to make consequential amendments to other acts received royal assent and came into force on June 21, 2019. The most significant change brought by Bill C-58 was to amend the Access to Information Act to include legislative requirements for mandatory proactive publication of certain records produced by government institutions.

Building on the improvements made by Bill C-58, the government launched a review of the Access to Information Act in June 2020. The scope of the review focused on the streams of legislation, proactive publication, and processes and systems. The department contributed to the first stage of the review in fiscal year 2020 to 2021 by engaging with stakeholders on their perspectives and experiences regarding the identification of key Access to Information Act issues. The received input was consolidated into a high-level overview and shared with TBS.

PSPC remains at the forefront of the federal government in terms of readiness and engagement for proactive publication. As the department’s coordinator for the implementation of Bill C-58, PSPC’s ATIP Directorate continued to undertake the following activities in alignment with the legislative requirements for proactive publication under part 2 of the Access to Information Act in fiscal year 2020 to 2021:

• monitored and refined implementation plans in support of continuous process improvement
• built awareness within the department of the new legislative requirements
• coordinated and supported collaboration between the diverse centres of expertise necessary to support the implementation of proactive publication
• updated templates and guidance documents to support content creation of proactive publications with accessibility, disclosure and bilingualism in mind

As a result of the activities outlined above, PSPC successfully produced the following proactive publications under part 2 of the Access to Information Act during the 2020 to 2021 fiscal year:

• 30 packages of briefing materials prepared by a government institution for the minister's appearance before a committee of Parliament pursuant to paragraph 74(d)
• 2 packages of question period notes prepared by a government institution for the minister and that were in use on the last sitting days of the House of Commons in June and December 2020 pursuant to paragraph 74(c)
• 4 quarterly reports of contracts over $10,000 pursuant to sections 77 and 86
• 3 quarterly reports of position reclassifications pursuant to section 85
• 4 reports tabled in Parliament pursuant to section 84
• 12 monthly lists of memoranda prepared by a government institution for the minister or deputy ministers in the previous month pursuant to paragraphs 74(b) and 88(b)
• 10 monthly reports of travel expenses incurred by the minister, ministerial advisers and staff, senior officers or employees pursuant to sections 75 and 82
• 3 monthly reports of hospitality expenses incurred by the minister, ministerial advisers and staff, senior officers or employees pursuant to sections 76 and 83

Training and awareness

Through delivery of training and awareness activities, PSPC continues to strengthen an institution-wide familiarity with the Access to Information Act and the Privacy Act and the obligations that arise from these 2 pieces of legislation.

Since the beginning of the COVID-19 pandemic, there have been many changes to the way public servants work. During the 2020 to 2021 reporting period, the ATIP Directorate entered into a new evolution of work era by adapting existing classroom training into virtual training sessions in order to continue offering fundamentals training while respecting public health authorities’ measures and guidelines.

PSPC delivered the following training sessions:

• 77 virtual training sessions on the “Access to Information and Privacy Fundamentals” course were given to 815 PSPC employees, including 10 sessions in the Atlantic Region, 16 in the Ontario Region and 4 in the Quebec Region
• personalized ATIP fundamentals training sessions were tailored with a focus on privacy and involvement in the protection of sensitive information, for 175 PSPC employees working at the Phoenix call centre (pay administration) and in the MyHR resource team. This course was made mandatory by these teams to ensure that employees (client service officers, human resources advisors and administrative assistants) dealing with personal information are aware of the key components of the Privacy Act, including privacy basics and sharing and communicating personal information to avoid privacy breaches
• 14 virtual training sessions of the new “Privacy Breach awareness” course were given to 204 participants

Data Privacy Day

Data Privacy Day is an international effort held annually on January 28 to create awareness about the importance of respecting privacy, safeguarding personal data and enabling trust. It commemorates the signing of the first legally binding international treaty dealing with privacy and data protection in 1981.

The ATIP Directorate marked Data Privacy Day 2021 by organizing the launch of the new “Privacy Breach Awareness” training, inviting employees to learn about privacy pertaining to PSPC, to recognize and handle privacy breaches, as well as why it is important to protect our own information, along with best practices to protect the personal information that employees handle every day.

Right to Know Week

International Right to Know Day originated at an international meeting of access to information advocates in 2002. Now celebrated annually on September 28, by approximately 40 countries and 60 non-governmental organizations, it has been expanded into a week-long event in Canada with the purpose of raising awareness about the right of individuals to access government information while promoting freedom of information as essential to both democracy and good governance. Openness and transparency empower citizens to hold their governments accountable and strengthen trust in democratic institutions.

This year’s Right to Know Week took place from September 28 to October 4, 2020. On September 28, PSPC posted information on its intranet to highlight the importance of the right of access in Canadian society, to inform all PSPC employees of efforts taken by the department to make the government more accessible to everyone, and to provide employees with the contact information of the governance division within the ATIP Directorate to learn more about access to information and proactive disclosure.

Annex A: Delegation of authorities charts for the Access to Information Act and the Privacy Act

Annex B: Statistical report on the Access to Information Act

Name of institution: Public Services and Procurement Canada.

Reporting period: April 1, 2020, to March 31, 2021.

Section 1: Requests under the Access to Information Act

Section 2: Decline to act on vexatious, made in bad faith or abuse of right requests

Section 3: Requests closed during the reporting period

3.5 Complexity

3.7 Deemed refusals

Section 4: Extensions

Section 5: Fees

Section 6: Consultations received from other institutions and organizations

Section 7: Completion time of consultations on Cabinet confidences

Section 8: Complaints and investigations

Section 9: Court actions

Section 10: Resources Related to the Access to Information Act

Annex C: Statistical report on the Privacy Act

Name of institution: Public Services and Procurement Canada.

Reporting period: April 1, 2020, to March 31, 2021.

Section 1: Requests under the Privacy Act

Section 2: Requests closed during the reporting period

2.5 Complexity

2.7 Deemed refusals

Section 3: Disclosures under subsections 8(2) and 8(5)

Section 4: Requests for correction of personal information and notations

Section 5: Extensions

Section 6: Consultations received from other institutions and organizations

Section 7: Completion time of consultations on Cabinet confidences

Section 8: Complaints and investigations notices received

Section 9: Privacy Impact Assessments (PIA) and Personal Information Banks (PIB)

Number of PIAs completed: 2

Section 10: Material Privacy Breaches

Number of material privacy breaches reported to TBS: 0

Number of material privacy breaches reported to OPC 0

Section 11: Resources related to the Privacy Act

Annex D: Supplemental statistical report on the Access to Information Act and the Privacy Act

Section 1: Capacity to receive requests

Section 2: Capacity to process records