Report on the administration of the Privacy Act 2015-2016

Download the PDF version

About this publication

Publication author : Canada Economic Development for the regions of Quebec

ISSN number : 2291-725x

Publish date : November 23, 2016

Summary :

This report deals with the activities of the Agency in implementing the Privacy Act for the fiscal year 2015-2016.

Table of Contents

  1. Introduction
  2. Mandate of the Economic Development Agency of Canada for the Regions of Quebec
  3. Access to information and Privacy Office
  4. Delegation of authority
  5. Interpreting the statistical report on access to personal information
  6. Training
  7. Administrative policies and practices
  8. Complaints and investigations
  9. Monitoring of Time
  10. Material Privacy Breaches
  11. Privacy Impact Assessment (PIA)
  12. Disclosure of personal information
  13. Actions planned for 2016-2017
  14. Appendix - Delegation schedule
  15. Appendix - Statistical report

Introduction

The Privacy Act (the Act), promulgated on July 1, 1983, aims to extend the present laws of Canada that protect the privacy of individuals with respect to personal information about themselves held by a government institution.

The purpose of the Act is to protect personal information by allowing individuals to consult information about themselves. It also imposes strict controls on how such information is gathered, used and shared.

Under section 72 of the Act, The head of every government institution shall prepare an annual report for submission to Parliament. This document therefore reports on the operations of the Economic Development Agency of Canada for the Regions of Quebec in 2012-2013, as required by the Act.

The Privacy Act gives individuals general access to personal information about themselves held by federal institutions, subject to certain specific and limited exceptions.

Mandate of the Economic Development Agency of Canada for the Regions of Quebec

Under its incorporating act, which came into effect on October 5, 2005, the mission of the Agency is to promote the long-term economic development of the regions of Quebec, giving special attention to those where slow economic growth is prevalent or opportunities for productive employment are inadequate. As part of its mission, the Agency is committed to promoting cooperation and a complementary relationship with Quebec and its communities

Growth and jobs and the success of Quebec’s regions and enterprises are central to the Agency’s mission and consistent with the Government of Canada’s top economic priorities.

Present across Quebec through its business offices, the Agency is the key federal actor in the economic development of the regions of Quebec. It supports businesses and economic stakeholders in their development efforts and provides funding for their projects.

In addition to its regular programs, the Agency contributes to the design and implementation of national programs and targeted temporary initiatives to meet the challenges of specific situations in Quebec.

The Agency’s approach is inspired by the best practices identified with respect to regional economic development. It is:

The Agency has had one regular grants and contributions (G&C) program, the Quebec Economic Development Program (QEDP). In addition to this program, the Agency contributed to the design and implementation in Quebec of Canada-wide programs and targeted ad-hoc initiatives such as:

Agency’s G&C Programs and Initiatives, 2015-2016

Main program: Quebec Economic Development Program (QEDP)

Canada-wide Program Implemented in Quebec by the Agency:

Infrastructure Canada’s delivery partner for the administration in Quebec:

To learn more about the Agency’s mandate, programming and operations, go to its Web site: www.dec-ced.gc.ca.

Access to information and Privacy Office

The Access to Information and Privacy Office (AIPO) reports directly to the Deputy Minister/President’s Chief of Staff.

AIPO has an access to information and privacy senior officer, as well as a coordinator. The senior officer, with the help of the coordinator, oversees compliance with legislation, regulations, procedures and broad government trends.

Through its delegated authority, AIPO represents the Agency on matters relating to the Act in dealings with the public, Treasury Board Secretariat, the Commissioners of Information and Privacy and other federal departments and institutions.

AIPO’s chief duties are:

Delegation of authority

The Agency’s enabling legislation identifies its head as being the Deputy Minister/President. In addition to managing the institution and overseeing management of Agency personnel, the Deputy Minister/President is responsible for application of the Access to Information Act.

To this end, the authority for application of the Act was delegated to the Senior Advisor, Access to Information and Parliamentary Affairs, while most administrative authority was delegated to the Coordinator, Access to Information and Parliamentary Affairs.

Interpreting the statistical report on access to personal information

Requests received and processed

In 2015-2016, three requests to access personal information were received and processed. One out of these was carried over to the next reporting period.

Owing to its economic development activities, the Agency holds numerous documents containing information on third parties, but very little in the way of personal information. This is why records of requests for access to personal information are so rare.

The following table illustrates the number of access to personal information requests received over the last five years. As the graph indicates, the Agency only processed 6 requests for access to personal information over that period.

Graph 1 – Requests received

Requests received

Figure 1 - Long description

Number of requests received

In 2011-2012, no request was received

In 2012-2013, 2 requests were received

In 2013-2014, no request was received

In 2014-2015, 1 request was received

In 2015-2016, 3 requests were received

Processing times, disposition, extension and exceptions invoked

For the two requests closed during the reporting period, one was abandoned as the requester recognised that he submitted his request to the wrong institution. Thus, for the request that was processed and closed in 2015-2016, the information was released prior to the 30th day of processing time. As such, no extension was taken. Section 26 of the Act, which pertains to personal information about another individual, was the only exception invoked.

Pages processed and disclosed

A total of 776 pages was processed and released. Since the Agency rarely processes access to personal information requests, there is no trend that can be detected.

Consultations

The Agency did not resort to any consultation while processing this access to personal information request. Also, the Agency did not receive any consultation from other institutions.

Cost

Expenditures related to the administration of the Act totalled $10,726 in 2015-2016. That amount includes $10,470 in salaries for 0.18 FTEs. Also, a total of $256 was spent on travel costs, software leasing, supplies and translation services.

Training

Over the course of fiscal year 2015-2016, training sessions on privacy and access to information was offered to all employees of the Agency. The goals of this mandatory training were to enable employees to recognize the importance of protecting personal information and adopting good practices in creating, collecting, retrieving, using, removing or disclosing personal information. This raining also served as a way to determine when a Privacy Impact Assessment needs to be conducted and the role employees have, to notify when a privacy breach or incident took place and to mitigate the risk of a privacy breach or incident. In total, 15 sessions were delivered in English, 1 session in French and 246 employees were trained.

Administrative policies and practices

Access to information and personal information procedure

Since 2010, the AIPO has had an Access to Information and Personal Information Procedure, submitted to and approved by the Agency’s top management. One amendment was done in 2015-2016, as the notice that is sent to managers involved in a file went from 48 to 72 hours.

The procedure meets the demands of the Directive on the Administration of the Access to Information Act, as updated in January 2012. The purpose of this directive is to facilitate compliance with legislative and regulatory strictures, spell out the roles and responsibilities of all those involved in processing access requests and provide an efficient model of practices and processes for handling access requests.

In addition to presenting the roles and responsibilities of the various individuals involved, this procedure presents the process for handling requests, intended to illustrate the various processing and approval stages in effect at the Agency, based on the steps indicated in the following diagram.

Processing Flow

Receipt

Processing

Communication

As part of a well defined process, AIPO is responsible for receiving and processing requests submitted under the Act and provides leadership in this regard. AIPO then forwards the requests to the office of primary interest, which is then responsible for forwarding the requested documents and providing AIPO with expert advice.
Once the document extraction process has been completed, AIPO analyses the documents on the basis of the Act, consults the office of primary interest, the departments concerned and third parties, if necessary. It then informs the branches and sectors concerned of the recommended dispositions, which are then discussed with the Chief of Staff of the Deputy Minister/President.
A 72-hour notice included in AIPO’s decision is sent simultaneously to the managers involved. The documents are then prepared for reporting and sent to the applicants.

Information available on the Agency’s Web site

One section of the Agency’s site has information about its role in applying the Act. There, one can find practical supplementary information to help citizens who want to file privacy request. This section serves as a gateway to AIPO’s services.

There, one can also find a link to the Open Government portal which enables users to consult summaries the Agency’s completed access to information requests. These summaries contain the identification, abstract and disposition of requests, as well as the number of pages released.

Access to Personal Information On-line Request

Since January 2016, it is now possible to submit to the Agency an access to information and privacy request on-line. During the reporting period, the only privacy request processed and closed by the Agency was received on-line.

Complaints and investigations

During fiscal year 2015-2016, the Agency received no complaint about a request for access to personal information. In addition, no investigation was conducted in 2015-2016.

Monitoring of Time

The AIPO ensures the time to process access to personal information requests is monitored through a weekly report of on-going requests. The report provides details of the day an answer is due for each request. This report is distributed to the Agency’s senior management, including the deputy head.

Material Privacy Breaches

There was no material privacy breach that occurred over the reporting period.

Privacy Impact Assessment (PIA)

No privacy impact assessment was conducted in 2015-2016.

Disclosure of personal information

In 2014-2015, no information was disclosed pursuant to subsection 8.(2)(m).

Actions planned for 2016-2017

The ATIPO will continue to respond to all requests for access to personal information in accordance with the spirit and letter of the Act.

In addition, it will continue improving its business practices while complying with access to personal information-related directives, regulations and major trends.

Appendix - Delegation schedule

Delegation Chart - Privacy Act and Privacy Regulations

The President, pursuant to section 73 of the Privacy Act, hereby designates the persons holding the positions set out in the schedule hereto, or the persons occupying on an acting basis those positions, to exercise the powers, duties and functions of the President as the head of the Economic Development Agency for the Regions of Quebec, under the provisions of the Act and related regulations set out in the schedule opposite each position. This designation replaces all previous delegation orders.

Privacy Act
Provision Description Proposed delegation
Senior advisor, access to information Coordinator, access to information
8(2)(j) Disclose personal information for research purposes  
8(2)(m) Disclose personal information in the public interest or in the interest of the individual  
8(4) Retain copy of 8(2)(e) requests and disclosed records
8(5) Notify Privacy Commissioner of 8(2)(m) disclosures
9(1) Retain record of use
9(4) Consistent use
10 Include personal information in personal information banks
14(a) Notice where access requested
14(b) Giving access to the record
15 Extension of time limits
17(2)(b) Language of access
17(3)(b) Access to personal information in alternate format
Exemption Provisions of the Privacy Act
Provision Description Proposed delegation
Senior advisor, access to information Coordinator, access to information
18(2) Exemption (exempt bank) Disclosure may be refused  
19(1) Exemption - Personal information obtained in confidence  
19(2) Exemption - Where authorized to disclose  
20 Exemption - Federal-provincial affairs  
21 Exemption - International affairs and defence  
22 Exemption - Law enforcement and investigation  
22.3 Exemption - Public Servants Disclosure Protection Act  
23 Exemption - Security clearances  
24 Exemption - Individuals sentenced for an offence  
25 Exemption - Safety of individuals  
26 Exemption - Information about another individual  
27 Exemption - Solicitor-client privilege  
28 Exemption - Medical record  
Other Provisions of the Privacy Act
Provision Description Proposed delegation
Senior advisor, access to information Coordinator, access to information
33(2) Right to make representation  
35(1) Findings and recommendations of Privacy Commissioner (complaints)
35(4) Access to be given
36(3) Report of findings and recommendations (exempt banks)
51(2),(3) Special rules for hearings  
70 Cabinet confidences*  
72 Report to Parliament

* Legal advice obtained beforehand

Privacy Regulations
Provision Description Proposed delegation
Senior advisor, access to information Coordinator, access to information
7 Retention of personal information requested under paragraph 8(2)(e)
9 Examination of information
11(2),11(4) Notification concerning corrections
13(1) Disclosure of personal information relating to physical or mental health
14 Examination in presence of medical practitioner or psychologist

I approve the delegation schedule.

__________________________________________
Pierre-Marc Mongeau, A/Deputy Minister/President
__________________________________________
Date

Appendix - Statistical report

Part 1: Requests Under the Privacy Act

Number of Requests
Received during reporting period 3
Outstanding from previous reporting period 0
Total 3
Closed during reporting period 2
Carried over to next reporting period 1

Part 2: Requests Closed During the Reporting Period

2.1 Disposition and completion time
Disposition of Requests Completion Time
1 to 15 Days 16 to 30 Days 31 to 60 Days 61 to 120 Days 121 to 180 Days 181 to 365 Days More than 365 Days Total
All disclosed 0 0 0 0 0 0 0 0
Disclosed in part 0 1 0 0 0 0 0 1
All exempted 0 0 0 0 0 0 0 0
All excluded 0 0 0 0 0 0 0 0
No records exist 0 0 0 0 0 0 0 0
Request abandoned 1 0 0 0 0 0 0 1
Neither confirmed nor denied 0 0 0 0 0 0 0 0
Total 1 1 0 0 0 0 0 2
2.2 Exemptions
Section Number of Requests
18(2) 0
19(1) (a) 0
19(1) (b) 0
19(1) (c) 0
19(1) (d) 0
19(1) (e) 0
19(1) (f) 0
20 0
21 0
22(1) (a) (i) 0
22(1) (a) (ii) 0
22(1) (a) (iii) 0
22(1) (b) 0
22(1) (c) 0
22(2) 0
22.1 0
22.2 0
22.3 0
23(a) 0
23(b) 0
24(a) 0
24(b) 0
25 0
26 1
27 0
28 0
2.3 Exclusions
Section Number of Requests
69(1) (a) 0
69(1) (b) 0
69.1 0
70(1) 0
70(1) (a) 0
70(1) (b) 0
70(1) (c) 0
70(1) (d) 0
70(1) (e) 0
70(1) (f) 0
70.1 0
2.4 Format of information released
Disposition Paper Electronic Other formats
All disclosed 0 0 0
Disclosed in part 1 0 0
Total 1 0 0

2.5 Complexity

2.5.1 Relevant pages processed and disclosed
Disposition of Requests Number of Pages Processed Number of Pages Disclosed Number of Requests
All disclosed 34 34 1
Disclosed in part 776 776 1
All exempted 0 0 0
All excluded 0 0 0
Request abandoned 0 0 1
Neither confirmed nor denied 0 0 0
Total 776 776 2
2.5.2 Relevant pages processed and disclosed by size of requests
Disposition Less Than 100 Pages Processed 101-500 Pages Processed 501-1000 Pages Processed
Number of Requests Pages Disclosed Number of Requests Pages Disclosed Number of Requests Pages Disclosed
All disclosed 0 0 0 0 0 0
Disclosed in part 0 0 0 0 1 776
All exempted 0 0 0 0 0 0
All excluded 0 0 0 0 0 0
Request abandoned 1 0 0 0 0 0
Neither confirmed nor denied 0 0 0 0 0 0
Total 1 0 0 0 1 776
2.5.2 Relevant pages processed and disclosed by size of requests (continued)
Disposition 1001-5000 Pages Processed More Than 5000 Pages Processed
Number of Requests Pages Disclosed Number of Requests Pages Disclosed
All disclosed 0 0 0 0
Disclosed in part 0 0 0 0
All exempted 0 0 0 0
All excluded 0 0 0 0
Request abandoned 0 0 0 0
Neither confirmed nor denied 0 0 0 0
Total 0 0 0 0
2.5.3 Other complexities
Disposition Consultation Required Legal Advice Sought Interwoven Information Other Total
All disclosed 0 0 0 0 0
Disclosed in part 0 0 0 0 0
All exempted 0 0 0 0 0
All excluded 0 0 0 0 0
Request abandoned 0 0 0 0 0
Neither confirmed nor denied 0 0 0 0 0
Total 0 0 0 0 0

2.6 Deemed refusals

2.6.1 Reasons for not meeting statutory deadline
Number of Requests Closed Past the Statutory Deadline Principal Reason
Workload External Consultation Internal Consultation Other
0 0 0 0 0
2.6.2 Number of days past deadline
Number of Days Past Deadline Number of Requests Past Deadline Where No Extension Was Taken Number of Requests Past Deadline Where An Extension Was Taken Total
1 to 15 days 0 0 0
16 to 30 days 0 0 0
31 to 60 days 0 0 0
61 to 120 days 0 0 0
121 to 180 days 0 0 0
181 to 365 days 0 0 0
More than 365 days 0 0 0
Total 0 0 0
2.7 Requests for translation
Translation Requests Accepted Refused Total
English to French 0 0 0
French to English 0 0 0
Total 0 0 0

Part 3 - Disclosures Under Subsection 8(2) and 8(5)

Paragraph 8(2)(e) Paragraph 8(2)(m) Subsection 8(5) Total
0 0 0 0

Part 4 - Requests for Correction of Personal Information and Notations

Disposition for Correction Requests Received Number
Notations attached 0
Requests for correction accepted 0
Total 0

Part 5 - Extensions

5.1 Reasons for extensions and disposition of requests
Disposition of Requests Where an Extension Was Taken 15(a)(i)
Interference With Operations
15(a)(ii)
Consultation
15(b)
Translation or Conversion
Section 70 Other
All disclosed 0 0 0 0
Disclosed in part 0 0 0 0
All exempted 0 0 0 0
All excluded 0 0 0 0
No records exist 0 0 0 0
Request abandoned 0 0 0 0
Total 0 0 0 0
5.2 Length of extensions
Length of Extensions 15(a)(i)
Interference with operations
15(a)(ii)
Consultation
15(b)
Translation purposes
Section 70 Other
1 to 15 days 0 0 0 0
16 to 30 days 0 0 0 0
Total 0 0 0 0

Part 6: Consultations Received From Other Institutions and Organizations

6.1 Consultations received from other Government of Canada institutions and other organizations
Consultations Other Government of Canada Institutions Number of Pages to Review Other Organizations Number of Pages to Review
Received during the reporting period 0 0 0 0
Outstanding from the previous reporting period 0 0 0 0
Total 0 0 0 0
Closed during the reporting period 0 0 0 0
Pending at the end of the reporting period 0 0 0 0
6.2 Recommendations and completion time for consultations received from other Government of Canada institutions
Recommendation Number of Days Required to Complete Consultation Requests
1 to 15 Days 16 to 30 Days 31 to 60 Days 61 to 120 Days 121 to 180 Days 181 to 365 Days More Than 365 days Total
All disclosed 0 0 0 0 0 0 0 0
Disclose in part 0 0 0 0 0 0 0 0
All exempted 0 0 0 0 0 0 0 0
All excluded 0 0 0 0 0 0 0 0
Consult other institution 0 0 0 0 0 0 0 0
Other 0 0 0 0 0 0 0 0
Total 0 0 0 0 0 0 0 0
6.3 Recommendations and completion time for consultations received from other organizations
Recommendation Number of days required to complete consultation requests
1 to 15 Days 16 to 30 Days 31 to 60 Days 61 to 120 Days 121 to 180 Days 181 to 365 Days More Than 365 Days Total
All Disclosed 0 0 0 0 0 0 0 0
Disclose in part 0 0 0 0 0 0 0 0
All exempted 0 0 0 0 0 0 0 0
All excluded 0 0 0 0 0 0 0 0
Consult other institution 0 0 0 0 0 0 0 0
Other 0 0 0 0 0 0 0 0
Total 0 0 0 0 0 0 0 0

Part 7: Completion Time of Consultations on Cabinet Confidences

7.1 Requests with Legal Services
Number of Days Fewer Than 100 Pages Processed 101-500 Pages Processed 501-1000 Pages Processed
Number of Requests Pages Disclosed Number of Requests Pages Disclosed Number of Requests Pages Disclosed
1 to 15 0 0 0 0 0 0
16 to 30 0 0 0 0 0 0
31 to 60 0 0 0 0 0 0
61 to 120 0 0 0 0 0 0
121 to 180 0 0 0 0 0 0
181 to 365 0 0 0 0 0 0
More than 365 0 0 0 0 0 0
Total 0 0 0 0 0 0
7.1 Requests with Legal Services (continued)
Number of Days 1001-5000 Pages Processed More than 5000 Pages Processed
Number of Requests Pages Disclosed Number of Requests Pages Disclosed
1 to 15 0 0 0 0
16 to 30 0 0 0 0
31 to 60 0 0 0 0
61 to 120 0 0 0 0
121 to 180 0 0 0 0
181 to 365 0 0 0 0
More than 365 0 0 0 0
Total 0 0 0 0
7.2 Requests with Privy Council Office
Number of Days Fewer Than 100 Pages Processed 101-500 Pages Processed 501-1000 Pages Processed
Number of Requests Pages Disclosed Number of Requests Pages Disclosed Number of Requests Pages Disclosed
1 to 15 0 0 0 0 0 0
16 to 30 0 0 0 0 0 0
31 to 60 0 0 0 0 0 0
61 to 120 0 0 0 0 0 0
121 to 180 0 0 0 0 0 0
181 to 365 0 0 0 0 0 0
More than 365 0 0 0 0 0 0
Total 0 0 0 0 0 0
7.2 Requests with Privy Council Office (continued)
Number of Days 1001-5000 Pages Processed More than 5000 Pages Processed
Number of Requests Pages Disclosed Number of Requests Pages Disclosed
1 to 15 0 0 0 0
16 to 30 0 0 0 0
31 to 60 0 0 0 0
61 to 120 0 0 0 0
121 to 180 0 0 0 0
181 to 365 0 0 0 0
More than 365 0 0 0 0
Total 0 0 0 0

Part 8: Complaints and Investigations Notices Received

Section 31 Section 33 Section 35 Court action Total
0 0 0 0 0

Part 9: Privacy Impact Assessments (PIAs)

Number of PIA(s) completed 1

Part 10: Resources Related to the Privacy Act

10.1 Costs
Expenditures Amount
Salaries $10 470
Overtime $0
Goods and Services $256
  • Professional services contracts
$0  
  • Other
$256
Total $10 726
10.2 Human Resources
Resources Person Years Dedicated to Privacy Activities
Full-time employees 0,18
Part-time and casual employees 0,00
Regional staff 0,00
Consultants and agency personnel 0,00
Students 0,00
Total 0,18

Note: Enter values to two decimal places.

Date modified: