2020-21 Annual Report on the Administration of the Privacy Act

1. Introduction

Purpose of the Privacy Act

The Privacy Act protects the privacy of individuals with respect to their personal information that is held by government institutions, and provides these individuals with a right of access to this information. In addition, the Privacy Act gives individuals rights over the collection, use and disclosure of their personal information.

Section 72 of the Privacy Act requires that the head of every government institution prepares and tables an annual report in Parliament, detailing the administration of the Act within the institution for each fiscal year.

This annual report describes how Infrastructure Canada (INFC) administered the Privacy Act from April 1, 2020 to March 31, 2021.

Mandate of Infrastructure Canada

In 2020-2021, INFC's mandate included enabling investments in social, green, public transit and other core public infrastructure, as well as trade and transportation infrastructure to:

  • provide long-term, predictable support to help Canadians benefit from world-class, modern public infrastructure;
  • make investments, build partnerships, develop policies, deliver programs, and foster knowledge about public infrastructure in Canada; and
  • help address complex challenges that Canadians face every day – ranging from the rapid growth of our cities, to climate change, and environmental threats to our water and land.

INFC works in partnership with provinces, territories, municipalities, Indigenous communities, other federal departments and agencies, the private sector and notforprofit organizations to achieve its mandate.

2. Organizational Structure

Departmental Organization

During 2020-2021, INFC was overseen by the Minister of Infrastructure and Communities and the Minister for Women and Gender Equality and Rural Economic Development. The Ministers were supported by the Deputy Minister of Infrastructure and Communities, who was supported by the Assistant Deputy Ministers of Policy and Results, Program Operations, Corporate Services, Communities and Rural Economic Development, and Investment, Partnerships and Innovation, as well as the Directors General of Communications, the Corporate Secretariat, and the Chief Audit and Evaluation Executive.

INFC is part of the Infrastructure and Communities portfolio, which includes the Jacques Cartier and Champlain Bridges Incorporated, the Windsor-Detroit Bridge Authority, the Canada Infrastructure Bank, and federal interests in the Toronto Waterfront Revitalization Corporation.

Organization of the Access to Information and Privacy (ATIP) Office

The ATIP Office at INFC is led by the Director of ATIP and Executive Correspondence, who reports to the Director General of the Corporate Secretariat. As of the end of the reporting period, the ATIP Office was comprised of eight members: the director, the team leader, four ATIP analysts and two part-time students. The work of the office under the Act involves:

  • processing Privacy Act requests and related activities;
  • providing advice and guidance to employees and senior officials on privacy-related matters;
  • developing and delivering training to departmental employees; and
  • representing INFC in dealings with the Treasury Board Secretariat, the Privacy Commissioner, and other government institutions regarding the application of the ATIP legislation.

There was no service agreement under section 73.1 of the Privacy Act for INFC during this reporting period.

Section 11 of Annex B shows a breakdown of resources as they relate solely to the administration of the Privacy Act.

3. Delegation Order

The delegation order in effect at the end of this reporting period was signed in February 2020. Under this order, full authority to exercise the powers, duties and functions of the Deputy Minister for all sections of the Act is delegated to all Assistant Deputy Ministers, the Chief Audit and Evaluation Executive, the Director General of Communications, and the Director of ATIP and Executive Correspondence. The team leader and senior ATIP advisor are delegated the ability to notify requesters where access is requested, and to notify of an extension to the time limits of a request.

See Annex A for a copy of the signed delegation order.

4. Performance Overview 2020-2021

The Statistical Report on the Privacy Act is prepared by government institutions to assist the Treasury Board of Canada Secretariat (TBS) to analyze trends and exercise oversight. INFC's 2020-21 annual statistical report is provided in Annex B and Annex C (Supplemental Statistical Report).

Privacy Requests Closed Within Legislated Timelines

One of the key measures of INFC privacy request performance is the number of requests closed within legislated timelines. In 2020-21, INFC closed three out of the four total requests within the legislated timelines, giving an overall compliance rate of 75% for this reporting period. The one late request required a consultation with another government department that was unable to be completed within the legislative timelines due to the exceptional measures put in place to curb the spread of the novel coronavirus (COVID-19) and protect the health and safety of Canadians. It is also important to note that due to the small volume of requests received by INFC, one late request dramatically affects the overall percentage.

Table 1: Number of requests closed within legislated timelines

2017-18

2018-19

2019-20

2020-21

Number of requests closed

1

2

15

4

Number of requests closed within legislated timelines

1

2

15

3

Percentage of requests closed within legislated timelines

100%

100%

100%

75%

Overview on Completion Times of Closed Requests

INFC completed two out of four privacy requests within 30 days and obtained extensions for the remaining two requests. One privacy request was closed between 31 to 60 days, and one was completed between 61 to 120 days – 18 days past the legislative deadline due to the need for an external consultation amidst the challenges posed by the COVID-19 pandemic.

Table 2: Processing time for completed requests

Processing Time

Number of requests

2017-18

2018-19

2019-20

2020-21

1 to 30 days

1

2

15

2

31 to 60 days

0

0

0

1

61 to 120 days

0

0

0

1

Overview of Requests Received and Closed

INFC closed 100% of the three requests received in 2020-21. One request was carried forward from the previous reporting period and closed in 2020-21, bringing the total of requests closed to four.

Table 3: Number of privacy requests received and closed

2017-18

2018-19

2019-20

2020-21

Number of requests received in reporting period

2

1

16

3

Carried forward from last reporting period

0

1

0

1

Closed in reporting period

1

2

15

4

Carried forward to next reporting period

1

0

1

0

Reasons for Extensions

Section 14 of the Privacy Act requires institutions to provide a response to the requester within 30 days of receipt of the request, or to notify the requester that an extension is required. Section 15 allows institutions to extend the time limit by a maximum of another 30 days. In 2020-21, two extensions were taken due to interference with operations; one extension required further review to determine an exemption, and the remaining one was due to a large volume of pages.

Table 4: Reasons for extensions

2017-18

2018-19

2019-20

2020-21

Interference with operations 15(a)(i)

0

0

0

2

Consultation 15(a)(ii)

0

0

0

0

Translation or conversion 15(b)

0

0

0

0

Consultations from Other Government Institutions and Organizations

When other institutions and organizations retrieve information that concerns or originates from INFC in response to Privacy Act requests, they may consult the INFC ATIP Office for recommendations on release. Other government institutions are defined as federal institutions subject to the Act. Other organizations include the governments of the provinces, territories and municipalities, and of other countries.

INFC did not receive any consultation requests in this reporting period.

Overview on Disposition of Requests

During the reporting period of 2020-21, INFC did not disclose any privacy requests in full and disclosed in part three out of four requests. The remaining request was abandoned.

Table 5: Percentage of requests all disclosed and disclosed in part

2017-18

2018-19

2019-20

2020-21

Percentage of requests all disclosed

100%

50%

6.67%

0%

Percentage of requests disclosed in part

0%

50%

20%

75%

Impact of COVID-19

Although Infrastructure Canada's operations were not affected during the reporting period due to exceptional measures put in place to curb the spread of COVID-19, some departments have faced challenges to maintain this important function while operating within a fully remote work environment which has caused some delays for INFC during the consultation process. Overall INFC was able to continue to process and complete requests in a timely manner and was operating at full working capacity. This is because of procedures previously put in place by the department, and the ATIP Office, to help reduce the operational impact of administering the Act, as well as new measures adopted in light of the remote working environment.

In recent years, the Department issued tablets and cellphones to all employees, allowing for greater flexibility to work remotely. This included upgrading our network to allow for secure remote access and the ability to process records from a distance. In addition, the ATIP Office had previously begun transitioning from many paperbased operations to more electronic practices where possible, prior to the COVID-19 pandemic.

INFC ATIP worked remotely for the entire fiscal year. During this time, the ATIP Office has been able to conduct all record retrieval and approval processes electronically through the use of departmental shared drives and encrypted email exchanges. Email is used for external correspondence whenever possible. The ATIP Office was fully operational for every week of the last fiscal year, maintaining full capability to process requests by mail and electronically.

Annex C includes statistical information related to the impact of COVID-19.

5. Training and Awareness

The ATIP Office provided seven formal training sessions in 2020-21 to 99 employees. All sessions contained a privacy component and included the INFC training courses Processing ATIP Requests 101, Privacy 101 and ATIP Essentials for Executives.

Institution-specific training was offered in a variety of formats to best suit the needs of employees across the Department. Courses offered included a 90-minute general ATIP course available to all employees, a 90-minute ATIP essentials course for executives and a 90-minute course devoted solely for privacy. In addition, group training outside of the regularly scheduled sessions was offered to meet the specific content needs and schedules of teams or employees.

Information related to training offered by the ATIP Office can be accessed by all employees through the intranet webpage. The ATIP Office has expanded its web presence by redesigning the webpage to include a variety of resources related to roles and responsibilities under the Privacy Act. The webpage includes resources on processing privacy requests, identifying sensitive information, how to protect personal information, ATIP training, and frequently asked questions. The ATIP Office is proactive in taking opportunities to foster awareness and promote privacy and data protection best practices. For example, on International Data Privacy Day, the ATIP Office sent out a department-wide email highlighting the importance of valuing and protecting personal information.

6. Policies, Guidelines, Procedures and Initiatives

During the fiscal year, the ATIP Office worked with the Department's Information Technology Division and third party vendor to launch a major case management and redaction system update. The update was launched in 2020 and has automated many administrative tasks, which allows the ATIP Office to process privacy requests more efficiently.

INFC also began a major review of the Department's privacy practices and procedures, with the goal of creating a consolidated privacy policy suite of tools. An internal privacy policy was developed by the ATIP Office to assist individuals whose job function may have an impact on privacy and/or who handle personal information including the collection, retention, use, disclosure and disposal of personal information. The policy was presented to the Directors Internal Services Committee and Directors Policy and Programs Committee (DISC-DPPC), as well as the Director General Management Committee (DGMC). The policy will be presented to the Deputy Minister Executive Committee (DMEC) for endorsement in June 2021. The suite of tools, which outlines sound privacy management practices and clear responsibilities, is anticipated to go live on the Department's intranet webpage thereafter.

Last fiscal year, ATIP conducted a review of all INFC forms with the goal of ensuring that forms in use by the Department contain a privacy notice statement. This project was finalized during the 2020-21 reporting period. As part of this process, privacy notice statements were drafted using a standard template which includes the necessary elements listed in the Treasury Board Secretariat Directive on Privacy Practices. This review encompassed a total of 63 forms, leading to 31 new privacy notice statements in total being drafted. The privacy notice statements were added to the forms and uploaded onto the intranet for use by the Department. A notice was published on INFC's intranet to promote awareness on the important update to these forms.

7. Key Issues and Actions Taken on Complaints

No complaints were received or concluded during the reporting period.

8. Monitoring Compliance

INFC makes every effort to meet statutory deadlines and actively monitors the time taken to process privacy requests and requests for the correction of personal information. Monitoring begins as soon as a request is received by the ATIP Office, entered into the case management system and assigned to an analyst. Deadlines are tracked electronically highlighting files nearing completion or targeted deadlines. Maintaining positive working relationships with the program areas by engaging in early discussions of requests, providing guidance when needed and sending weekly status reports to the offices of the Assistant Deputy Ministers/Directors General (highlighting the requests in retrievals, under consultation and in approvals) has been instrumental to ensuring INFC's compliance with the legislation.

9. Material Privacy Breaches

A privacy breach is defined by the Office of the Privacy Commissioner as the loss of, unauthorized access to, or disclosure of, personal information. A material privacy breach is defined by the Treasury Board Secretariat as involving sensitive information that could reasonably be expected to cause serious injury or harm to the individual and/or involves a large number of affected individuals.

No material privacy breach was reported to the Office of the Privacy Commissioner or to the Treasury Board of Canada Secretariat during the reporting period.

10. Privacy Impact Assessments

Privacy impact assessments (PIAs) are risk management tools to determine whether privacy risks are present in new or existing departmental programs, initiatives or projects that collect, use and retain personal information. PIAs promote transparency and accountability, and contribute to continued public confidence in the way the Government manages personal information.

During the reporting period, the Department completed two PIAs. The first privacy impact assessment, titled Assessing Privacy Risks on INFC's Programs and Activities in the rollout of Microsoft 365, 2020, was completed on March 19, 2021. The PIA was conducted to develop an informed assessment of the privacy risk associated with using the Microsoft 365 suite by all programs and activities at INFC, and to inform recommendations to mitigate any identified privacy risks to an acceptable level.

The second PIA, titled Privacy Impact Assessment on Web-based Staffing Tools, was completed on March 22, 2021. The assessment was conducted to evaluate the privacy risks associated with administering pre-recorded video interviewing technology, expected to greatly reduce the amount of time required to complete the staffing process.

11. Public Interest Disclosures

Paragraph 8(2)(m) allows institutions to disclose personal information in circumstances where the public interest in disclosure clearly outweighs any invasion of privacy that could result from the disclosure, or where disclosure would clearly benefit the individual to whom the information relates. No disclosure was made under paragraph 8(2)(m) of the Privacy Act during the reporting period.

Annexes

Annex A: Access to Information Act Delegation Order

Access to Information Act and Privacy Act Delegation Order /
Arrêté de délégation en vertu de la Loi sur l'accès à l'information et de la Loi sur la protection des renseignements personnels

The Deputy Minister of Infrastructure and Communities, pursuant to section 95(1) of the Access to Information Act and section 73(1) of the Privacy Act, hereby designates the persons holding the positions set out in the schedule hereto, or the persons occupying on an acting basis those positions, to exercise the powers, duties and functions of the Deputy Minister as the head of Infrastructure and Communities, under the provisions of the Act and related regulations set out in the schedule opposite each position. This designation replaces all previous delegation orders.

En vertu de l'article 95(1) de la Loi sur l'accès à l'information et de l'article 73(1) de la Loi sur la protection des renseignements personnels, la sous-ministre de l'Infrastructure et des Collectivités délègue aux titulaires des postes mentionnés à l'annexe ci-après, ainsi qu'aux personnes occupant à titre intérimaire lesdits postes, les attributions dont elle est, en qualité de responsable de l'Infrastructure et des Collectivités, investie par les dispositions de la Loi ou de son règlement mentionnées en regard de chaque poste. Le présent document remplace et annule tout arrêté antérieur.

Schedule / Annexe
Position / Poste Access to Information Act and Regulations / Loi sur l'accès à l'information et Règlement Privacy Act and Regulations / Loi sur la protection des renseignements personnels et Règlement
Assistant Deputy Ministers / Sous-ministre adjoint (e) Full authority / Autorité absolue Full authority/ Autorité absolue
Chief Audit and Evaluation Executive / Dirigeant (e) principal (e) de la vérification et de l'évaluation Full authority / Autorité absolue Full authority / Autorité absolue
Director General of Communications / Directeur (trice) général (e) des communications Full authority / Autorité absolue Full authority / Autorité absolue
ATIP Coordinator / Coordonnateur (trice) de l'AIPRP Full authority / Autorité absolue Full authority / Autorité absolue
ATIP Team Lead and Senior ATIP Advisor (PM-05) / Chef d'équipe de l'AIPRP et Conseiller (ère) principal (e) de l'AIPRP (PM-05) 7(a) Notice where access requested / Notification
9 Extension of time limits / Prorogation du délai
14(a) Notice where access requested / Notification
15 Extension of time limits / Prorogation du délai

Kelly Gillis

Deputy Minister of Infrastructure and Communities / Sous-ministre de l'Infrastructure et des Collectivités

Signed and dated:

February 19, 2020

Annex B: 2020-21 Statistical Report on the Privacy Act

Statistical Report on the Privacy Act

Name of institution: Infrastructure Canada

Reporting period: 2020-04-01 to 2021-03-31

Section 1: Requests Under the Privacy Act

1.1 Number of requests

Number of Requests

Received during reporting period

3

Outstanding from previous reporting period

1

Total

4

Closed during reporting period

4

Carried over to next reporting period

0

Section 2: Requests Closed During the Reporting Period

2.1 Disposition and completion time

Disposition of Requests

Completion Time

1 to 15 Days

16 to 30 Days

31 to 60 Days

61 to 120 Days

121 to 180 Days

181 to 365 Days

More Than 365 Days

Total

All disclosed

0

0

0

0

0

0

0

0

Disclosed in part

0

1

1

1

0

0

0

3

All exempted

0

0

0

0

0

0

0

0

All excluded

0

0

0

0

0

0

0

0

No records exist

0

0

0

0

0

0

0

0

Request abandoned

1

0

0

0

0

0

0

1

Neither confirmed nor denied

0

0

0

0

0

0

0

0

Total

1

1

1

1

0

0

0

4

2.2 Exemptions

Section

Number of Requests

Section

Number of Requests

Section

Number of Requests

18(2)

0

22(1)(a)(i)

0

23(a)

0

19(1)(a)

0

22(1)(a)(ii)

0

23(b)

0

19(1)(b)

0

22(1)(a)(iii)

0

24(a)

0

19(1)(c)

0

22(1)(b)

0

24(b)

0

19(1)(d)

0

22(1)(c)

0

25

0

19(1)(e)

0

22(2)

0

26

3

19(1)(f)

0

22.1

0

27

0

20

0

22.2

0

27.1

0

21

0

22.3

0

28

0

-N/A

22.4

0

-N/A

2.3 Exclusions

Section

Number of Requests

Section

Number of Requests

Section

Number of Requests

69(1)(a)

0

70(1)

0

70(1)(d)

0

69(1)(b)

0

70(1)(a)

0

70(1)(e)

0

69.1

0

70(1)(b)

0

70(1)(f)

0

-N/A

70(1)(c)

0

70.1

0

2.4 Format of information released

Paper

Electronic

Other

0

3

0

2.5 Complexity
2.5.1 Relevant pages processed and disclosed

Number of Pages Processed

Number of Pages Disclosed

Number of Requests

3167

3167

4

2.5.2 Relevant pages processed and disclosed by size of requests

Disposition

Less Than 100 Pages Processed

101-500 Pages Processed

501-1000 Pages Processed

1001-5000 Pages Processed

More Than 5000 Pages Processed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

All disclosed

0

0

0

0

0

0

0

0

0

0

Disclosed in part

1

70

1

113

0

0

1

2984

0

0

All exempted

0

0

0

0

0

0

0

0

0

0

All excluded

0

0

0

0

0

0

0

0

0

0

Request abandoned

1

0

0

0

0

0

0

0

0

0

Neither confirmed nor denied

0

0

0

0

0

0

0

0

0

0

Total

2

70

1

113

0

0

1

2984

0

0

2.5.3 Other complexities

Disposition

Consultation Required

Legal Advice Sought

Interwoven Information

Other

Total

All disclosed

0

0

0

0

0

Disclosed in part

0

1

0

0

1

All exempted

0

0

0

0

0

All excluded

0

0

0

0

0

Request abandoned

0

0

0

0

0

Neither confirmed nor denied

0

0

0

0

0

Total

0

1

0

0

1

2.6 Closed requests
2.6.1 Number of requests closed within legislated timelines

Requests closed within legislated timelines

Number of requests closed within legislated timelines

3

Percentage of requests closed within legislated timelines (%)

75

2.7 Deemed refusals
2.7.1 Reasons for not meeting legislated timelines

Number of Requests Closed Past the Legislated Timelines

Principal Reason

Interference with Operations / Workload

External Consultation

Internal Consultation

Other

1

0

1

0

0

2.7.2 Requests closed beyond legislated timelines (including any extension taken)

Number of Days Past Legislated Timelines

Number of Requests Past Legislated Timeline Where No Extension Was Taken

Number of Requests Past Legislated Timelines Where an Extension Was Taken

Total

1 to 15 days

0

0

0

16 to 30 days

0

1

1

31 to 60 days

0

0

0

61 to 120 days

0

0

0

121 to 180 days

0

0

0

181 to 365 days

0

0

0

More than 365 days

0

0

0

Total

0

1

1

2.8 Requests for translation

Translation Requests

Accepted

Refused

Total

English to French

0

0

0

French to English

0

0

0

Total

0

0

0

Section 3: Disclosures Under Subsections 8(2) and 8(5)

Paragraph 8(2)(e)

Paragraph 8(2)(m)

Subsection 8(5)

Total

0

0

0

0

Section 4: Requests for Correction of Personal Information and Notations

Disposition for Correction Requests Received

Number

Notations attached

0

Requests for correction accepted

0

Total

0

Section 5: Extensions

5.1 Reasons for extensions and disposition of requests

Number of requests where an extension was taken

15(a)(i) Interference with operations

15 (a)(ii) Consultation

15(b) Translation purposes or conversion

Further review required to determine exemptions

Large volume of pages

Large volume of
requests

Documents are difficult to obtain

Cabinet Confidence Section (Section 70)

External

Internal

2

1

1

0

0

0

0

0

0

5.2 Length of extensions

Length of Extensions

15(a)(i) Interference with operations

15 (a)(ii) Consultation

15(b) Translation purposes or conversion

Further review required to determine exemptions

Large volume of pages

Large volume of requests

Documents are difficult to obtain

Cabinet Confidence Section (Section 70)

External

Internal

1 to 15 days

0

0

0

0

0

0

0

0

16 to 30 days

1

1

0

0

0

0

0

0

31 days or greater

0

Total

1

1

0

0

0

0

0

0

Section 6: Consultations Received From Other Institutions and Organizations

6.1 Consultations received from other Government of Canada institutions and other organizations

Consultations

Other Government of Canada Institutions

Number of Pages to Review

Other Organizations

Number of Pages to Review

Received during the reporting period

0

0

0

0

Outstanding from the previous reporting period

0

0

0

0

Total

0

0

0

0

Closed during the reporting period

0

0

0

0

Carried over to the next reporting period

0

0

0

0

6.2 Recommendations and completion time for consultations received from other Government of Canada institutions

Recommendation

Number of Days Required to Complete Consultation Requests

1 to 15 Days

16 to 30 Days

31 to 60 Days

61 to 120 Days

121 to 180 Days

181 to 365 Days

More Than 365 Days

Total

All disclosed

0

0

0

0

0

0

0

0

Disclosed in part

0

0

0

0

0

0

0

0

All exempted

0

0

0

0

0

0

0

0

All excluded

0

0

0

0

0

0

0

0

Consult other institution

0

0

0

0

0

0

0

0

Other

0

0

0

0

0

0

0

0

Total

0

0

0

0

0

0

0

0

6.3 Recommendations and completion time for consultations received from other organizations

Recommendation

Number of days required to complete consultation requests

1 to 15 Days

16 to 30 Days

31 to 60 Days

61 to 120 Days

121 to 180 Days

181 to 365 Days

More Than 365 Days

Total

All disclosed

0

0

0

0

0

0

0

0

Disclosed in part

0

0

0

0

0

0

0

0

All exempted

0

0

0

0

0

0

0

0

All excluded

0

0

0

0

0

0

0

0

Consult other institution

0

0

0

0

0

0

0

0

Other

0

0

0

0

0

0

0

0

Total

0

0

0

0

0

0

0

0

Section 7: Completion Time of Consultations on Cabinet Confidences

7.1 Requests with Legal Services

Number of Days

Fewer Than 100 Pages Processed

101-500 Pages Processed

501-1000 Pages Processed

1001-5000 Pages Processed

More than 5000 Pages Processed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

1 to 15

0

0

0

0

0

0

0

0

0

0

16 to 30

0

0

0

0

0

0

0

0

0

0

31 to 60

0

0

0

0

0

0

0

0

0

0

61 to 120

0

0

0

0

0

0

0

0

0

0

121 to 180

0

0

0

0

0

0

0

0

0

0

181 to 365

0

0

0

0

0

0

0

0

0

0

More than 365

0

0

0

0

0

0

0

0

0

0

Total

0

0

0

0

0

0

0

0

0

0

7.2 Requests with Privy Council Office

Number of Days

Fewer Than 100 Pages Processed

101‒500 Pages Processed

501-1000 Pages Processed

1001-5000 Pages Processed

More than 5000 Pages Processed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

Number of Requests

Pages Disclosed

1 to 15

0

0

0

0

0

0

0

0

0

0

16 to 30

0

0

0

0

0

0

0

0

0

0

31 to 60

0

0

0

0

0

0

0

0

0

0

61 to 120

0

0

0

0

0

0

0

0

0

0

121 to 180

0

0

0

0

0

0

0

0

0

0

181 to 365

0

0

0

0

0

0

0

0

0

0

More than 365

0

0

0

0

0

0

0

0

0

0

Total

0

0

0

0

0

0

0

0

0

0

Section 8: Complaints and Investigations Notices Received

Section 31

Section 33

Section 35

Court action

Total

0

0

0

0

0

Section 9: Privacy Impact Assessments (PIA) and Personal Information Banks (PIB)

9.1 Privacy Impact Assessments

Number of PIA(s) completed

2

9.2 Personal Information Banks

Personal Information Banks

Active

Created

Terminated

Modified

0

0

0

0

Section 10: Material Privacy Breaches

Number of material privacy breaches reported to TBS

0

Number of material privacy breaches reported to OPC

0

Section 11: Resources Related to the Privacy Act

11.1 Costs

Expenditures

Amount

Salaries

$84,471

Overtime

$0

Goods and Services

$715

  • Professional services contracts
$0
  • Other
$715

Total

$85,186

11.2 Human Resources

Resources

Person Years Dedicated to Privacy Activities

Full-time employees

0.920

Part-time and casual employees

0.120

Regional staff

0.000

Consultants and agency personnel

0.000

Students

0.000

Total

1.040

Annex C: 2020-21 Supplemental Statistical Report

Supplemental Statistical Report on the Access to Information Act and Privacy Act

Name of institution: Infrastructure Canada

Reporting period: 2020-04-01 to 2021-03-31

Section 1: Capacity to Receive Requests

1.1 Enter the number of weeks your institution was able to receive ATIP requests through the different channels.

Number of Weeks

Able to receive requests by mail

52

Able to receive requests by email

52

Able to receive requests through the digital request service

52

Section 2: Capacity to Process Records

2.1 Enter the number of weeks your institution was able to process paper records in different classification levels.

No Capacity

Partial Capacity

Full Capacity

Total

Unclassified Paper Records

0

0

52

52

Protected B Paper Records

0

0

52

52

Secret and Top Secret Paper Records

0

0

52

52

2.2 Enter the number of weeks your institution was able to process electronic records in different classification levels.

No Capacity

Partial Capacity

Full Capacity

Total

Unclassified Electronic Records

0

0

52

52

Protected B Electronic Records

0

0

52

52

Secret and Top Secret Electronic Records

0

0

52

52