Annual Report to Parliament 2015-2016
Privacy Act

Part II: Report on the Privacy Act

Requests Under the Privacy Act

Statistical Report

The Annual Statistical Report for Fiscal Year 2015-2016 is included at Part III of this report.

Interpretation of the Statistical Report

Overview of Requests Pursuant to the Privacy Act
Fiscal Year # of Requests Received # of Requests Completed # of Pages Processed # of Pages Released
2015-2016 307 300 63,058 24,850
2014-2015 189 192 47,053 14,908
2013-2014 177 181 46,471 20,207
Requests Received Pursuant to the Privacy Act

307 requests were received during the period under review. In addition, 16 requests were carried forward from previous years, for a total of 323 requests.

Requests Completed Pursuant to the Privacy Act

300 requests were completed during the period under review. 23 were carried forward to be completed in fiscal year 2016-2017.

There was an increase in the number of requests completed from those of the previous year (38%). Responding to formal access to information requests involved the review of 63,058 pages, of which 24,850 pages were partially or entirely disclosed.

Disposition of Completed Requests

Of the 300 requests completed in fiscal year 2015-2016:

  • No relevant records existed under the control of the Department of Justice for 168 requests; and
  • 39 requests were abandoned by the applicant. In the majority of cases the applicant did not pursue the requests, either by withdrawing them or by not providing the clarification that was requested by the ATIP Office.

The remaining 93 requests were released in the following manner:

  • 22 were fully disclosed (24%);
  • 67 were partially disclosed (72%); and
  • 4 were exempted in their entirety (4%).



Disposition - Text Version

This pie graph illustrates the percentage of requests that were completed during the reporting period with the following dispositions: All Disclosed (24%), Disclosed in Part (72%) and All Exempted (4%).

Completion Time and Extensions

Out of 300 requests completed in 2015-2016, 269 (90%) were processed within 30 days or less.

Completion Time

Completion Time

Completion Time - Text Version

This pie graph illustrates the percentage of requests that were completed during the reporting period within the following timeframes: 1 to 15 days (64%), 16 to 30 days (26%), 31 to 60 days (6%), 61 to 120 days (1%), 121 to 180 days (1%), 181 to 365 days (1%) and more than 365 days (1%).

The ATIP Office routinely monitors the processing time for privacy requests. This routine monitoring is done through various statistical reports (weekly, monthly, quarterly and yearly) and meetings with ATIP staff to ensure that requests are being processed in a most timely manner. All ATIP staff, portfolio contacts, and senior management are made aware of the performance metrics.

In some instances, the Department found it necessary to seek extensions to the prescribed time limits due to the need to consult with other government institutions (9 times) and interference with operations (23 times).

Exemptions Invoked

The Department invoked exemptions under the PA for 71 requests. Section 26 was invoked most often (60 times), which exempts personal information relating to individuals other than the requester, and section 27 (43 times), which exempts information relating to solicitor-client privilege. For further details regarding all the exemptions invoked, please refer to the Statistical Report at Part III of this report.

Exclusions Cited

Information was excluded pursuant to section 70(1) for one (1) request, which excludes information related to Cabinet Confidences.

Method of Access

A total of 57 requesters wanted paper copies and 32 requesters chose to receive information on CD-ROM at no extra charge, an option which tends to be more widely accepted.

Consultations by other Federal Institutions or Departments

Overview of Consultations Requests Received from other Government Institutions and Organizations
Fiscal Year # of Requests Received # Pages Received # of Requests Completed # of Pages Reviewed
2015-2016 84 2,742 85 3,857
2014-2015 79 4,002 84 4,350
2013-2014 123 5,034 126 6,187

During the period under review, the Department received 84 requests from other government institutions and organizations requesting recommendations regarding records originating from, pertaining to, or of interest to the Department of Justice. In addition, five (5) consultations outstanding from previous years were carried over, for a total of 89. In total, the Department was asked to review 3,894 pages for these consultations.

Of the 89 consultations active throughout the reporting period, 85 were completed during the 2015-2016 fiscal year (3,857 pages) and the remaining four (4) were carried forward to be completed in fiscal year 2016-2017.

Other types of Requests


The ATIP Office also acted as a resource on several occasions for departmental officials as well as those from other government institutions, offering advice and guidance on the provisions of the legislation as well as related policies. The Office was consulted on the disclosure and collection of information on a wide range of issues.

Complaints, Investigations and Federal Court Cases

Complaints Filed

Twelve (12) complaints were filed with the Office of the Privacy Commissioner (OPC) during the reporting period. The reasons for the complaints were as follows:

  • One (1) related to delay;
  • Five (5) related to exemption or exclusion of information; and,
  • Six (6) concerned the handling of the request in general.
Completed Investigations

Complaint findings are defined as follows:

The OPC found evidence of the complainant’s rights being denied under the PA.
Not well-founded:
The investigation uncovered no evidence leading the OPC to conclude that the government institution violated the complainant’s rights under the PA.

After a thorough investigation, the OPC helped negotiate a solution that satisfied all parties. The finding is used for those complaints in which well-founded would be too harsh to fit what essentially is a miscommunication or misunderstanding.

Settled during the course of investigation: The OPC helped negotiate a solution that satisfied all parties during the investigation, but did not issue a finding.

The complaint was withdrawn or abandoned by the complainant before allegations were fully investigated.

Sixteen (16) investigations were completed during the reporting period, some of which had been carried forward from previous years. Out of the 16, four (4) were not well-founded, seven (7) were discontinued by the complainant, and five (5) were well-founded. No key issues were raised as a result of these complaints.

At the end of the fiscal year, nine (9) complaints were still under investigation by the OPC.

Review by the Federal Court of Canada

No applications were filed before the Federal Court pursuant to sections 41, 42 and 44 of the PA during the reporting period.

Request for Correction of Personal Information

Paragraph 12(2)(a) of the PA provides that every individual given access to personal information about himself or herself that has been used, is being used, or is available for use for an administrative purpose, is entitled to request correction of such information where the individual believes there is an error or omission therein.

The Department of Justice has not received any request for correction of personal information during the reporting period.

Use and Disclosure

It is the Department of Justice’s policy that personal information be used solely for the purpose for which it is collected or for a consistent use as described in the Info Source publication.

Disclosure under Paragraph 8(2)

Sub-paragraph 8(2)(m) of the PA permits the disclosure of personal information in situations where the public interest in disclosure clearly outweighs any invasion of privacy that could result from the disclosure or when the disclosure would clearly benefit the individual to whom the information relates. The Privacy Commissioner must be informed of disclosures to be made under these provisions.

The Department did not disclose personal information pursuant to paragraph 8(2)(m) during the reporting period.

Exempt Banks

The Department of Justice had no exempt banks under the PA.

Audits Conducted by the Privacy Commissioner

Pursuant to subsection 37(1) of the PA, the Privacy Commissioner may carry out investigations in respect of personal information under the control of government institutions to ensure compliance with paragraphs 4 to 8.

No formal investigations by the Commissioner were completed during the reporting period.

Privacy Breaches

Binder containing taxpayers’ information

An incident in a courier company sorting facility caused a binder containing personal information relating to approximately 185 taxpayers to be lost during shipping from the Justice Canada Ontario Regional Office to the Ottawa Tax Law Services section.

Efforts to retrieve the binder from the courier company have been unsuccessful, and its current whereabouts are unknown. It is no longer believed to be retrievable from the company or any third party. The affected individuals were notified of the breach along with the Privacy Commissioner and the Treasury Board Secretariat. To date, there is no information that any of the personal information has been disclosed.

Social Insurance Numbers

Validated Social Insurance Numbers were inadvertently disclosed to the Nunavut Maintenance Enforcement Program in the administration of the Family Orders and Agreements Enforcement Assistance Act. The affected individuals were notified of the breach along with the Privacy Commissioner and the Treasury Board Secretariat. To date, there is no information that any of the personal information has been disclosed.

Settlement of the Royal Canadian Mounted Police (RCMP) Disabled Veterans Files

Two packages were inadvertently switched and received by two disabled RCMP veterans. The affected individuals were notified of the breach along with the Privacy Commissioner and the Treasury Board Secretariat. To date, there is no information that any of the personal information has been disclosed.

Privacy Impact Assessments (PIAs)

PIAs are a means to ensure that privacy principles are taken into account during the design, implementation, and evolution of programs and services that involve personal information. Programs and services with potential privacy risks are required to undergo a PIA.

No PIAs were completed during this reporting period.

Date modified: