Privacy Impact Assessment on the Research and Knowledge Initiative (RKI)

---

Title of the PIA

Privacy Impact Assessment on the Research and Knowledge Initiative (RKI)

Government Institution

Infrastructure Canada (INFC)

Head of INFC or Delegate for Section 10 of the Privacy Act

Melanie Davis, Director, ATIP and Executive Correspondence

Senior Official or Executive Responsible for the New Initiative

Amelia Brown, Director, Research and Innovation

Name and Description of the Program or Activity of the Government Institution

Research and Knowledge Initiative

Legal Authority

The legal authority for the collection of personal information is Order in Council P.C. 2004-0325.

Personal Information Bank

There is currently no registered personal information bank for RKI.

Short Description of the New Initiative

The Research and Knowledge Initiative (RKI) is a national, competitive and merit-based contribution funding program that supports data and research on issues related to public infrastructure and communities, with the purpose of advancing understanding of public infrastructure needs, challenges, and opportunities relevant to Canadians. It aims to strengthen the evidence base on public infrastructure and communities in Canada, facilitate collaboration and partnership among key public infrastructure actors and stakeholders, and support data, research, and knowledge-sharing activities. The first open, competitive call for proposals under this initiative was launched in Summer 2021. Previously, the initiative has funded a $3M pilot project with the World Council on City Data.

Risk Area Identification and Categorization

The following section contains risks identified in the PIA for the new or modified program. The numbered risk scale is presented in an ascending order: the first level (1) represents the lowest level of potential risk for the risk area; the fourth level (4) represents the highest level of potential risk for the given risk area.

Type of Program or Activity

Administration of program or activity and services – Personal information is used to make decisions that directly affect the individual (i.e., determining eligibility for programs including authentication for accessing programs/services, administering program payments, overpayments, or support to clients, issuing or denial of permits/licenses, processing appeals, etc.). 

Level of risk to privacy: 2

Type of Personal Information Involved and Context

Social Insurance Number, medical, financial or other sensitive personal information or the context surrounding the personal information is sensitive; personal information of minors or of legally incompetent individuals or involving a representative acting on behalf of the individual.

Level of risk to privacy: 3

Program or Activity Partners and Private Sector Involvement

With other institutions or a combination of federal, provincial or territorial, and municipal governments.

Level of risk to privacy: 3

Duration of the Program or Activity

Long‑term program or activity

Level of risk to privacy: 3

Program Population

For external administrative purposes affects all individuals.

Level of risk to privacy: 4

Technology & Privacy

The program or activity requires the use of an existing electronic system, application or software, including collaborative software (or groupware), to support the program or activity in terms of the creation, collection or handling of personal information.

Level of risk to privacy: 1

Personal Information Transmission

The personal information is transmitted using wireless technologies.

Level of risk to privacy: 4

Risk Impact to the Individual or Employee in the Event of a Privacy Breach

Inconvenience, reputation harm, embarrassment.

Level of risk to privacy: 2