2023-24 Annual Report on the Administration of the Privacy Act

1. Introduction

Purpose of the Privacy Act

The Privacy Act establishes obligations on federal government institutions to respect the privacy rights of individuals by limiting the collection, use and disclosure of personal information. It also provides individuals with the right of access to their personal information and the right to request the correction of that information.

In accordance with section 72 of the Privacy Act, this annual report detailing the administration of the Act was prepared, submitted and tabled in Parliament.

This annual report describes how Infrastructure Canada (INFC) administered the Privacy Act from April 1, 2023, to March 31, 2024.

Mandate of Infrastructure Canada

Infrastructure Canada’s policies, programs and investments help build sustainable, inclusive and climate-resilient communities while addressing challenges Canadians face every day, including access to:

• safe and affordable housing;
• modern and accessible public transit;
• climate-resilient infrastructure to protect communities in the face of climate change;
• safe and clean water; and
• inclusive cultural and recreational community spaces.

INFC does this by:

• investing in housing and infrastructure that fosters more inclusive and sustainable Canadian communities and supporting efforts to prevent and eliminate chronic homelessness;
• collaborating with all orders of government, Indigenous communities and key stakeholders to create world-class, modern public infrastructure, reliable public transit systems and affordable housing;
• working with Indigenous partners, Crown corporations, other levels of government and the private sector to address housing needs and deliver major infrastructure projects, and leveraging alternative financing and investment options to promote economic growth;
• supporting climate-ready structural and natural infrastructure projects to mitigate the impacts of natural disasters triggered by climate change and help communities adapt and build resilience; and
• conducting research and economic analysis and collecting data to identify community priorities and supporting long-term planning toward a net-zero,  low-carbon and climate-resilient future.

INFC is not reporting on behalf of a non-operational subsidiary or non-operational institution.

2. Organizational structure

Departmental organization

At the end of the fiscal year, INFC was overseen by the Minister of Housing, Infrastructure and Communities. The Minister was supported by the Deputy Minister of Infrastructure and Communities, who in turn was supported by the Assistant Deputy Ministers of Policy and Results, Communities and Infrastructure Programs, Corporate Services, Transformation, Community Policy and Programs, and Investment, Partnerships and Innovation, as well as the Directors General of Communications and the Corporate Secretariat, and the Chief Audit and Evaluation Executive.

The Infrastructure Canada portfolio includes responsibilities with respect to the Jacques Cartier and Champlain Bridges Incorporated, the Windsor-Detroit Bridge Authority, the Canada Infrastructure Bank, Canada Mortgage and Housing Corporation, and federal interests in the Toronto Waterfront Revitalization Corporation.

Structure of the Access to Information and Privacy (ATIP) Office

The ATIP Office at INFC is led by the Director of ATIP and Executive Correspondence, who reports to the Director General of the Corporate Secretariat. At the end of the reporting period, the ATIP Office was comprised of eight members: the director, three team leaders, two ATIP analysts and three casuals split between the ATIP Operations and the Privacy Policy Teams.

INFC follows the hybrid work model. While on-site, the majority of employees work in the Ottawa Office, with one employee working in the Montreal Office. The ATIP Office did not have any consultants during fiscal year 2023-24.

The work of the Office under the Act involves:

• processing Privacy Act requests and related activities;
• processing consultations received from other institutions;
• providing advice and guidance to employees and senior officials on privacy‑related matters;
• developing privacy-related instruments to ensure sound privacy management practices and clearly defined responsibilities throughout the Department;
• developing and delivering training to departmental employees; and
• representing INFC in engagements with the Treasury Board of Canada Secretariat (TBS), the Office of the Privacy Commissioner of Canada and other government institutions regarding the application of the ATIP legislation.

There was no service agreement under section 73.1 of the Privacy Act for INFC during this reporting period.

3. Delegation order

The delegation order in effect at the end of this reporting period was signed in May 2021. Under this order, full authority to exercise the powers, duties and functions of the Deputy Minister for all sections of the Act is delegated to all Assistant Deputy Ministers, the Chief Audit and Evaluation Executive, the Director General of Communications, the Director of ATIP and Executive Correspondence, and the Manager of ATIP. The ATIP Team Leaders are delegated the ability to notify requesters where access is requested and notify of an extension to the time limits of a request.

See Annex A for a copy of the signed delegation order.

4. Performance overview 2023-24

The Statistical Report on the Privacy Act is prepared by government institutions to assist TBS in analyzing trends and exercising oversight. INFC’s 2023-24 annual statistical report is provided in Annex B and Annex C (Supplemental Statistical Report).

Overview of 2023-24 requests under the Privacy Act

The analysis in this section compares data found in INFC’s 2023-24 Statistical Report on the Privacy Act with data from 2020-21 to produce a four-year trend analysis.

Percentage of requests responded to within legislated timelines

One of the key measures of INFC ATIP’s performance is the number of requests closed within legislated timelines. In 2023-24, INFC closed 27 requests within the legislated timelines, giving an overall compliance rate of 100% for this reporting period. INFC maintained a 100% compliance rate for the past three consecutive fiscal years, despite processing more than 13 times the number of files this fiscal year in comparison to last fiscal year, demonstrating exemplary performance in responding to privacy requests and closing files within legislated timelines.

Table 1 compares the number of requests closed within legislated timelines for the past four fiscal years.

Table 1: Number of requests closed within legislated timelines

	2020-21	2021-22	2022-23	2023-24
Number of requests closed	4	7	2	27
Number of requests closed within legislated timelines	3	7	2	27
Percentage of requests closed within legislated timelines	75%	100%	100%	100%

Overview on completion times of closed requests

Section 14 of the Privacy Act requires institutions to provide a response to the requester within 30 days of receipt of the request or to notify the requester that an extension is required. Of the 27 requests completed during the reporting period, 23 (85%) were completed within 30 days, and four requests (15%) were completed in 31 to 60  days.

For a comparison of processing times over the past four fiscal years, please refer to Table 2 below.

Table 2: Processing time for completed requests

Processing time	Number of requests
	2020-21	2021-22	2022-23	2023-24
1 to 30 days	2	7	2	23
31 to 60 days	1	0	0	4
61 to 120 days	1	0	0	0

Overview of active requests broken down by fiscal year in which they were received

At the end of the fiscal year, one active request received in 2023-24 was carried forward into 2024-25. The request was still within legislated timelines, as shown in the table below. The Department consistently strives to meet the legislated timelines by concentrating efforts to expedite the retrieval of records and effectively coordinate consultations with stakeholders.

Table 3: Number of open Privacy Act requests outstanding from previous reporting periods

Open Requests that were Received in the Fiscal Year	Open Requests that are Within Legislated Timelines as of March 31, 2024	Open Requests that are Beyond Legislated Timelines as of March 31, 2024	Total
Received in 2023-24	1	0	1
Received in 2022-23	0	0	0
Total	1	0	1

Overview of complaints outstanding from previous reporting periods

In 2023-24, INFC did not receive any new complaints nor have any active complaints outstanding as of the last day of the reporting period.

Reasons for extensions

The Act recognizes that some requests may require more than 30 days to process. Therefore, section 15 of the Act allows institutions to extend the time limit by a maximum of 30 days. In 2023-24, four extensions were taken under section 15(1)(i) and section 15(a)(ii) of the Act. Table 4 shows the reasons for extensions over the past four fiscal years.

Table 4: Reasons for extensions

	2020-21	2021-22	2022-23	2023-24
Interference with operations 15(a)(i)	2	0	0	4
Consultations 15(a)(ii)	0	0	0	4
Translation or conversion 15(b)	0	0	0	0

Consultations from other government institutions and organizations

When other institutions and organizations retrieve information that concerns or originates from INFC in response to Privacy Act requests, they may consult the INFC ATIP Office for recommendations on release. Other government institutions are defined as federal institutions subject to the Act. Other organizations include the governments of provinces, territories and municipalities, and of other countries.

INFC received one consultation request and reviewed 31 pages in 2023-24. In the previous three fiscal years, INFC did not receive any consultation requests.

Percentage of completed requests for which records were all disclosed and disclosed in part

During the reporting period, INFC disclosed, in part, 18 privacy requests (67%) and disclosed, in full, seven requests (26%). Of the two remaining requests, one was abandoned by the applicant, and no records existed for the other. Table 5 compares the percentage of requests all disclosed and disclosed in part for the past four fiscal years.

Table 5: Percentage of requests all disclosed and disclosed in part

	2020-21	2021-22	2022-23	2023-24
Percentage of requests all disclosed	0 (0%)	0 (0%)	0 (0%)	7 (26%)
Percentage of requests disclosed in part	3 (75%)	4 (57%)	1 (50%)	18 (67%)
Total	3 (75%)	4 (57%)	1 (50%)	25 (93%)

5. Training and awareness

Institution-specific training was offered in a variety of formats to best suit the needs of employees across the Department. Employees are encouraged to complete the Canada School of Public Service (CSPS) course, Access to Information and Privacy Fundamentals, prior to attending any INFC internal training sessions. As of this fiscal year, this CSPS course was added to the INFC mandatory training list, and it must be completed within six months of the start date of employment with INFC, and/or when starting in a supervisor, manager or executive role.

The ATIP Office has been offering and delivering Processing ATIP Requests and the institution-specific privacy training in both official languages three times per year to all INFC employees, in addition to one‑on‑one coaching for new branch ATIP contacts and customized group sessions, as requested, to maintain consistent and up-to-date approaches to privacy functions across the Department.

During 2023-24, six sessions of the 90-minute INFC training course, Processing ATIP Requests, were delivered by the ATIP Office to 726 employees. This training continues to be offered three times a year to all employees in both official languages. All of these sessions contained a privacy component. This represents a 36% increase in the number of attendees this year, compared to the 533 attendees last fiscal year. This was attributed to the continued advertising of the training through a department‑wide email invitation and the ease of attending the training via MS Teams.

As part of INFC’s internal Privacy Policy, all employees must attend privacy training every three years. In 2023-24, six sessions of the institution-specific privacy training covering policies, procedures and legal responsibilities under the Privacy Act were delivered to a total of 691 employees.

In addition to the general ATIP training, ad hoc training was provided to the Data Science team and the Corporate Services Branch ATIP Contacts. Both sessions contained a privacy component and were tailored to meet the specific content needs and schedules of attendees. Ten employees from INFC’s Data Science team attended the session and four employees from Corporate Services Branch attended the ATIP Contact Session. Ad hoc sessions on privacy considerations for the use of videorecording and transcription on MS Teams were also delivered throughout the fiscal year to a total of 64 employees.

Information related to training offered by the ATIP Office can be accessed by all employees through our INFRAnet webpage. This page includes resources on the INFC Privacy Policy, principles of privacy protection, privacy breach management, the INFC Directive and frequently asked questions.

The ATIP Office ensures that all employees are informed of any updates to privacy policies and directives related to the administration of the Act through regular internal newsletter articles, updating our internal-facing ATIP INFRAnet page and engaging with employees who have functional or delegated responsibilities under the Act to provide targeted guidance and advice as needed.

Lastly, employees in the ATIP Office with functional and delegated responsibilities under the Act regularly participate in training and information sessions offered by TBS and the ATIP community to keep up-to-date on policies and procedures related to the administration of the Act.

6. Policies, guidelines and procedures

The ATIP Office continued to update privacy policies, guidelines and procedures, and ensured alignment with TBS updates made during this reporting period.

The INFC Privacy Policy approved in 2021 and the INFC Directive on Privacy Practices first published in 2022-23 lay out the foundation for sound privacy management practices and clearly defined responsibilities throughout the Department.

INFC continues to utilize the policy tool outlining privacy considerations on the use of video recording and transcription on MS Teams. This ensures that employees are aware of their obligations under the Act prior to the collection of personal information. The ATIP Office periodically reviews and removes access permissions for employees who have the video recording and transcription feature enabled on MS Teams (when no longer needed) to mitigate risks and ensure compliance under the Act.

The INFC ATIP Office takes privacy breaches very seriously. Training and guidance on how to mitigate and manage privacy breaches is available to all employees via our INFC Directive on Privacy Practices, as well as during our formal training courses. Following a confirmed privacy breach, it is INFC’s practice to recommend that all employees involved in the breach attend a privacy training course to better understand their role in protecting personal information and preventing future breaches. The ATIP Office tracks and analyses the types of privacy breaches that have occurred in our institution in order to find trends so we may implement targeted solutions to prevent similar breaches.

The ATIP Office works in collaboration with Information Management (IM) on an ongoing email cleanup campaign across the Department, which encourages staff to take time to review their email inbox on a regular basis and sort out the emails of business value from the transitory information. The IM landing page is available for employees to review policies and directives related to email management and access tools to help maintain a tidy inbox. This helps to ensure that personal information of a transitory nature is not kept longer than necessary.

The ATIP Office continues to update its internal procedures including, but not limited to, analyst resources, reporting requirements and roles and responsibility documentation in order to comply with new TBS policies and directives, and on an as-needed basis.

INFC did not receive authority for any new collections or consistent uses of Social Insurance Numbers during this reporting period.

7. Initiatives and projects to improve privacy

INFC implemented initiatives to improve access to personal information and privacy within the institution, including technological improvement to modernize the delivery of services and facilitate the processing of requests. The ATIP Office migrated to version four of the ATIP Online Request Service this past fiscal year, allowing INFC to communicate directly with requesters through the portal.

INFC began the procurement process for a new ATIP processing software, and is on track to transition to this new software in the next fiscal year. The new software is expected to improve the overall efficiency of ATIP Operations, reduce the administrative burden on the ATIP Office and improve overall processing times.

The ATIP Office tested the use of Adobe Premiere Pro in fiscal year 2022-23. This software is able to process video and audio records requested under the Act. INFC continues to maintain these licenses in the event it receives a request for audio and/or video records.

INFC is committed to privacy practices that advance Indigenous reconciliation, including responding to requests in a timely manner, providing interim responses for large volume requests, processing a large variety of document formats, keeping open lines of communication with requesters, and applying limited exemptions to the records. In alignment with the Access to Information and Privacy Implementation Notice 2023-01: Advancing Reconciliation with Indigenous Peoples by Providing Culturally Appropriate Services, INFC included the recommended courses in the learning and development plans for the entire ATIP team this past fiscal year. These courses are also mandatory for all new members to the ATIP Office.

8. Key issues and actions taken on complaints

No complaints were received or concluded during the reporting period.

9. Material privacy breaches

A privacy breach is defined by TBS as the improper or unauthorized access to creation, collection, use, disclosure, retention or disposal of personal information. A material privacy breach is defined by TBS as a privacy breach that could reasonably be expected to create a real risk of significant harm to an individual.

One material privacy breach was reported to the Office of the Privacy Commissioner of Canada (OPC) and to TBS during the reporting period involving personal information held by BGRS and SIRVA Canada while providing relocation services under contract to the Government of Canada. The breach impacted current and former Government of Canada employees, members of the Canadian Armed Forces and the Royal Canadian Mounted Police personnel. This breach was reported to the OPC and TBS, out of an abundance of caution. Further investigation determined that, while working for INFC, no individual was impacted by the breach. However, credit monitoring services were provided to INFC employees who were affected by the breach while working for other government departments. INFC will continue to monitor the situation and will implement any recommendations provided by TBS or the OPC, where appropriate.

10. Privacy impact assessments

Privacy impact assessments (PIAs) are risk management tools to determine whether privacy risks are present in new or existing departmental programs, initiatives or projects that collect, use and retain personal information. PIAs promote transparency and accountability, and contribute to continued public confidence in the way the Government manages personal information. INFC conducts PIAs to develop an informed assessment of the privacy risks associated with new initiatives and to inform recommendations to mitigate any identified privacy risks to an acceptable level.

During the reporting period, one new PIA was completed on the Access to Information and Privacy Request Processing Software which includes a suite of features bundled into one software solution to support INFC in managing their ATIP requests. The PIA Summary is available online here: Privacy Impact Assessment on the Access to Information and Privacy Request Processing Software Solution.

11. Public interest disclosures

Paragraph 8(2)(m) permits the disclosure of personal information where, in the opinion of the head of the institution, the public interest in disclosure clearly outweighs any invasion of privacy that could result from the disclosure, or the disclosure would clearly benefit the individual to whom the information relates. No disclosure was made under paragraph 8(2)(m) of the Privacy Act during the reporting period.

12. Monitoring compliance

INFC makes every effort to meet statutory deadlines and actively monitors the time taken to process requests. Monitoring begins as soon as a request is received by the ATIP Office, entered into the case management system and assigned to an ATIP analyst. Deadlines are tracked and monitored electronically, highlighting files nearing completion or targeted deadlines. The analysts and management monitor the time taken to process personal information requests on an ongoing basis. Statistics on the active caseload are provided to, and analyzed by, the Director of ATIP and Executive Correspondence on a weekly basis. Any required action is taken as a result of this analysis to ensure timely access to documents requested.

Instrumental to ensuring INFC’s compliance with the legislation, the ATIP Office maintained positive working relationships with the program areas by engaging in early discussions of requests, providing guidance when needed and sending weekly status reports to the offices that report directly to the Deputy Minister (Assistant Deputy Ministers, Directors General of Communications and the Corporate Secretariat, and the Chief Audit and Evaluation Executive) highlighting the requests in retrievals, under consultation and in approvals.

INFC limits consultations to complex and sensitive records in situations where the subject‑matter expertise resides with another department or another level of government. Consultations are used to obtain expert advice and recommendations enabling INFC to assess whether requested information must be protected. In many instances, these are now sent as courtesy consultations, and INFC severs the sensitive information prior to sending. Whenever possible, INFC officials exercise their delegated authority to exempt and disclose records under the terms of the Act, without adding time for unnecessary consultations. The monitoring of the consultation process occurs on an as-needed basis and is the responsibility of the Director of ATIP and Executive Correspondence.

INFC does not receive frequently requested types of information that could be made available by other means; however, the Director of ATIP and Executive Correspondence continues to monitor for patterns in incoming requests on a yearly basis.

During the reporting period, the ATIP Office developed internal guidelines to address privacy when contracting with third parties. Internal consultations have been initiated and will continue to be carried out in the next fiscal year. Our objective is to ensure that contracts involving personal information will be flagged at the earliest stage possible so our office may assist in mitigating privacy risks as well as warrant that relevant privacy clauses are included in contracts. This occurs at the director level on an as needed basis.

Annexes

• Annex A: Privacy Act Delegation Order
• Annex B: 2023-24 Statistical Report on the Privacy Act
• Annex C: 2023-24 Supplemental Statistical Report

Annex A: Privacy Act Delegation Order

Access to Information Act and Privacy Act Delegation Order / Arrêté de délégation en vertu de la Loi sur l'accès à l'information et de la Loi sur la protection des renseignements personnels

The Deputy Minister of Infrastructure and Communities, pursuant to section 95(1) of the Access to Information Act and section 73(1) of the Privacy Act, hereby designates the persons holding the positions set out in the schedule hereto, or the persons occupying on an acting basis those positions, to exercise the powers, duties and functions of the Deputy Minister as the head of Infrastructure and Communities, under the provisions of the Act and related regulations set out in the schedule opposite each position. This designation replaces all previous delegation orders.

En vertu de l'article 95(1) de la Loi sur l'accès à l'information et de l'article 73(1) de la Loi sur la protection des renseignements personnels, la sous-ministre de l'Infrastructure et des Collectivités délègue aux titulaires des postes mentionnés à l'annexe ci-après, ainsi qu'aux personnes occupant à titre intérimaire lesdits postes, les attributions dont elle est, en qualité de responsable de l'Infrastructure et des Collectivités, investie par les dispositions de la Loi ou de son règlement mentionnées en regard de chaque poste. Le présent document remplace et annule tout arrêté antérieur.

Schedule / Annexe

Position / Poste	Access to Information Act and Regulations / Loi sur l'accès à l'information et Règlement	Privacy Act and Regulations / Loi sur la protection des renseignements personnels et Règlement
Assistant Deputy Ministers / Sous-ministre adjoint (e)	Full authority / Autorité absolue	Full authority/ Autorité absolue
Chief Audit and Evaluation Executive / Dirigeant (e) principal (e) de la vérification et de l'évaluation	Full authority / Autorité absolue	Full authority / Autorité absolue
Director General of Communications / Directeur (trice) général (e) des communications	Full authority / Autorité absolue	Full authority / Autorité absolue
Director, ATIP and Executive Correspondence / Directeur (trice) de l'AIPRP et de la correspondance de la haute direction	Full authority / Autorité absolue	Full authority / Autorité absolue
Manager, ATIP (PM 06) / Gestionnaire d'AIPRP (PM 06)	Full authority / Autorité absolue	Full authority / Autorité absolue
ATIP Team Lead (PM-05) / Chef d'équipe de l'AIPRP (PM-05)	7(a) Notice where access requested / Notification 9 Extension of time limits / Prorogation du délai 11(2) Waiver of fees / Dispense des frais	14(a) Notice where access requested / Notification 15 Extension of time limits / Prorogation du délai

Kelly Gillis

Deputy Minister of Infrastructure and Communities / Sous-ministre de l'Infrastructure et des Collectivités

Signed and dated:

May 18, 2021

Annex B: 2023-24 Statistical Report on the Privacy Act

Statistical Report on the Privacy Act

Name of institution: Infrastructure Canada

Reporting period: 2023-04-01 to 2024-03-31

Section 1: Requests Under the Privacy Act

1.1 Number of requests received

		Number of Requests
Received during reporting period		26
Outstanding from previous reporting periods		2
Outstanding from previous reporting period	2
Outstanding from more than one reporting period	0
Total		28
Closed during reporting period		27
Carried over to next reporting period		1
Carried over within legislated timeline	1
Carried over beyond legislated timeline	0

1.2 Channels of requests

Source	Number of Requests
Online	1
E-mail	25
Mail	0
In person	0
Phone	0
Fax	0
Total	26

Section 2: Informal requests

2.1 Number of informal requests

		Number of Requests
Received during reporting period		0
Outstanding from previous reporting periods		0
Outstanding from previous reporting period	0
Outstanding from more than one reporting period	0
Total		0
Closed during reporting period		0
Carried over to next reporting period		0

2.2 Channels of informal requests

Source	Number of Requests
Online	0
E-mail	0
Mail	0
In person	0
Phone	0
Fax	0
Total	0

2.3 Completion time of informal requests

Completion Time
1 to 15 Days	16 to 30 Days	31 to 60 Days	61 to 120 Days	121 to 180 Days	181 to 365 Days	More Than 365 Days	Total
0	0	0	0	0	0	0	0

2.4 Pages released informally

Less Than 100 Pages Released		100-500 Pages Released		501-1000 Pages Released		1001-5000 Pages Released		More Than 5000 Pages Released
Number of Requests	Pages Released	Number of Requests	Pages Released	Number of Requests	Pages Released	Number of Requests	Pages Released	Number of Requests	Pages Released
0	0	0	0	0	0	0	0	0	0

Section 3: Requests Closed During the Reporting Period

3.1 Disposition and completion time

Disposition of Requests	Completion Time
	0 to 15 Days	16 to 30 Days	31 to 60 Days	61 to 120 Days	121 to 180 Days	181 to 365 Days	More Than 365 Days	Total
All disclosed	3	4	0	0	0	0	0	7
Disclosed in part	3	11	4	0	0	0	0	18
All exempted	0	0	0	0	0	0	0	0
All excluded	0	0	0	0	0	0	0	0
No records exist	1	0	0	0	0	0	0	1
Request abandoned	1	0	0	0	0	0	0	1
Neither confirmed nor denied	0	0	0	0	0	0	0	0
Total	8	15	4	0	0	0	0	27

3.2 Exemptions

Section	Number of Requests	Section	Number of Requests	Section	Number of Requests
18(2)	0	22(1)(a)(i)	0	23(a)	0
19(1)(a)	0	22(1)(a)(ii)	0	23(b)	0
19(1)(b)	0	22(1)(a)(iii)	0	24(a)	0
19(1)(c)	0	22(1)(b)	0	24(b)	0
19(1)(d)	0	22(1)(c)	0	25	0
19(1)(e)	0	22(2)	0	26	18
19(1)(f)	0	22.1	0	27	1
20	0	22.2	0	27.1	0
21	0	22.3	0	28	0
		22.4	0

3.3 Exclusions

Section	Number of Requests	Section	Number of Requests	Section	Number of Requests
69(1)(a)	0	70(1)	0	70(1)(d)	0
69(1)(b)	0	70(1)(a)	3	70(1)(e)	2
69.1	0	70(1)(b)	0	70(1)(f)	0
		70(1)(c)	1	70.1	0

3.4 Format of information released

Paper	Electronic				Other
	E-record	Data set	Video	Audio
0	25	0	0	0	0

3.5 Complexity

3.5.1 Relevant pages processed and disclosed for paper, e-record and data set formats

Number of Pages Processed	Number of Pages Disclosed	Number of Requests
5565	3385	26

3.5.2 Relevant pages processed by request disposition for paper, e-record and data set formats by size of requests

Disposition	Less Than 100 Pages Processed		100-500 Pages Processed		501-1000 Pages Processed		1001-5000 Pages Processed		More Than 5000 Pages Processed
	Number of Requests	Pages Processed	Number of Requests	Pages Processed	Number of Requests	Pages Processed	Number of Requests	Pages Processed	Number of Requests	Pages Processed
All disclosed	7	174	0	0	0	0	0	0	0	0
Disclosed in part	4	56	11	2120	2	1825	1	1390	0	0
All exempted	0	0	0	0	0	0	0	0	0	0
All excluded	0	0	0	0	0	0	0	0	0	0
Request abandoned	1	0	0	0	0	0	0	0	0	0
Neither confirmed nor denied	0	0	0	0	0	0	0	0	0	0
Total	12	230	11	2120	2	1825	1	1390	0	0

3.5.3 Relevant minutes processed and disclosed for audio formats

Number of Minutes Processed	Number of Minutes Disclosed	Number of Requests
0	0	0

3.5.4 Relevant minutes processed per request disposition for audio formats by size of requests

Disposition	Less than 60 Minutes processed		60-120 Minutes processed		More than 120 Minutes processed
	Number of requests	Minutes Processed	Number of requests	Minutes Processed	Number of requests	Minutes Processed
All disclosed	0	0	0	0	0	0
Disclosed in part	0	0	0	0	0	0
All exempted	0	0	0	0	0	0
All excluded	0	0	0	0	0	0
Request abandoned	0	0	0	0	0	0
Neither confirmed nor denied	0	0	0	0	0	0
Total	0	0	0	0	0	0

3.5.5 Relevant minutes processed and disclosed for video formats

Number of Minutes Processed	Number of Minutes Disclosed	Number of Requests
0	0	0

3.5.6 Relevant minutes processed per request disposition for video formats by size of requests

Disposition	Less than 60 Minutes processed		60-120 Minutes processed		More than 120 Minutes processed
	Number of requests	Minutes Processed	Number of requests	Minutes Processed	Number of requests	Minutes Processed
All disclosed	0	0	0	0	0	0
Disclosed in part	0	0	0	0	0	0
All exempted	0	0	0	0	0	0
All excluded	0	0	0	0	0	0
Request abandoned	0	0	0	0	0	0
Neither confirmed nor denied	0	0	0	0	0	0
Total	0	0	0	0	0	0

3.5.7 Other complexities

Disposition	Consultation Required	Legal Advice Sought	Interwoven Information	Other	Total
All disclosed	0	0	0	0	0
Disclosed in part	2	0	5	0	7
All exempted	0	0	0	0	0
All excluded	0	0	0	0	0
Request abandoned	0	0	0	0	0
Neither confirmed nor denied	0	0	0	0	0
Total	2	0	5	0	7

3.6 Closed requests

3.6.1 Number of requests closed within legislated timelines

Number of requests closed within legislated timelines	27
Percentage of requests closed within legislated timelines (%)	100

3.7 Deemed refusals

3.7.1 Reasons for not meeting legislated timelines

Number of requests closed past the legislated timelines	Principal Reason
	Interference with operations / Workload	External Consultation	Internal Consultation	Other
0	0	0	0	0

3.7.2 Request closed beyond legislated timelines (including any extension taken)

Number of days past legislated timelines	Number of requests past legislated timeline where no extension was taken	Number of requests past legislated timeline where an extension was taken	Total
1 to 15 days	0	0	0
16 to 30 days	0	0	0
31 to 60 days	0	0	0
61 to 120 days	0	0	0
121 to 180 days	0	0	0
181 to 365 days	0	0	0
More than 365 days	0	0	0
Total	0	0	0

3.8 Requests for translation

Translation Requests	Accepted	Refused	Total
English to French	0	0	0
French to English	0	0	0
Total	0	0	0

Section 4: Disclosures Under Subsections 8(2) and 8(5)

Paragraph 8(2)(e)	Paragraph 8(2)(m)	Subsection 8(5)	Total
0	0	0	0

Section 5: Requests for Correction of Personal Information and Notations

Disposition for Correction Requests Received	Number
Notations attached	0
Requests for correction accepted	0
Total	0

Section 6: Extensions

6.1 Reasons for extensions

	15(a)(i) Interference with operations				15 (a)(ii) Consultation			15(b) Translation purposes or conversion
Number of requests where an extension was taken	Further review required to determine exemptions	Large volume of pages	Large volume of requests	Documents are difficult to obtain	Cabinet ConfidenceSection (Section 70)	External	Internal
8	0	4	0	0	3	1	0	0

6.2 Length of extensions

	15(a)(i) Interference with operations				15 (a)(ii) Consultation			15(b) Translation purposes or conversion
Length of Extensions	Further review required to determine exemptions	Large volume of pages	Large volume of requests	Documents are difficult to obtain	Cabinet ConfidenceSection (Section 70)	External	Internal
1 to 15 days	0	0	0	0	0	0	0	0
16 to 30 days	0	4	0	0	3	1	0	0
31 days or greater	-	-	-	-	-	-	-	0
Total	0	4	0	0	3	1	0	0

Section 7: Consultations Received From Other Institutions and Organizations

7.1 Consultations received from other Government of Canada institutions and other organizations

Consultations	Other Government of Canada Institutions	Number of Pages to Review	Other Organizations	Number of Pages to Review
Received during the reporting period	1	31	0	0
Outstanding from the previous reporting period	0	0	0	0
Total	1	31	0	0
Closed during the reporting period	1	31	0	0
Carried over within negotiated timelines	0	0	0	0
Carried over beyond negotiated timelines	0	0	0	0

7.2 Recommendations and completion time for consultations received from other Government of Canada institutions

Recommendation	Number of Days Required to Complete Consultation Requests
	0 to 15 Days	16 to 30 Days	31 to 60 Days	61 to120 Days	121 to 180 Days	181 to 365 Days	More Than 365 Days	Total
Disclose entirely	0	0	0	0	0	0	0	0
Disclose in part	1	0	0	0	0	0	0	1
Exempt entirely	0	0	0	0	0	0	0	0
Exclude entirely	0	0	0	0	0	0	0	0
Consult other institution	0	0	0	0	0	0	0	0
Other	0	0	0	0	0	0	0	0
Total	1	0	0	0	0	0	0	1

7.3 Recommendations and completion time for consultations received from other organizations outside the Government of Canada

Recommendation	Number of Days Required to Complete Consultation Requests
	0 to 15 Days	16 to 30 Days	31 to 60 Days	61 to 120 Days	121 to 180 Days	181 to 365 Days	More Than 365 Days	Total
Disclose entirely	0	0	0	0	0	0	0	0
Disclose in part	0	0	0	0	0	0	0	0
Exempt entirely	0	0	0	0	0	0	0	0
Exclude entirely	0	0	0	0	0	0	0	0
Consult other institution	0	0	0	0	0	0	0	0
Other	0	0	0	0	0	0	0	0
Total	0	0	0	0	0	0	0	0

Section 8: Completion Time of Consultations on Cabinet Confidences

8.1 Requests with Legal Services

Number of Days	Fewer Than 100 Pages Processed		100-500 Pages Processed		501-1000 Pages Processed		1001-5000 Pages Processed		More than 5000 Pages Processed
	Number of Requests	Pages Disclosed	Number of Requests	Pages Disclosed	Number of Requests	Pages Disclosed	Number of Requests	Pages Disclosed	Number of Requests	Pages Disclosed
1 to 15	2	24	0	0	0	0	0	0	0	0
16 to 30	1	7	0	0	0	0	0	0	0	0
31 to 60	0	0	0	0	0	0	0	0	0	0
61 to 120	0	0	0	0	0	0	0	0	0	0
121 to 180	0	0	0	0	0	0	0	0	0	0
181 to 365	0	0	0	0	0	0	0	0	0	0
More than 365	0	0	0	0	0	0	0	0	0	0
Total	3	31	0	0	0	0	0	0	0	0

8.2 Requests with Privy Council Office

Number of Days	Fewer Than 100 Pages Processed		100‒500 Pages Processed		501-1000 Pages Processed		1001-5000 Pages Processed		More than 5000 Pages Processed
	Number of Requests	Pages Disclosed	Number of Requests	Pages Disclosed	Number of Requests	Pages Disclosed	Number of Requests	Pages Disclosed	Number of Requests	Pages Disclosed
1 to 15	0	0	0	0	0	0	0	0	0	0
16 to 30	0	0	0	0	0	0	0	0	0	0
31 to 60	0	0	0	0	0	0	0	0	0	0
61 to 120	0	0	0	0	0	0	0	0	0	0
121 to 180	0	0	0	0	0	0	0	0	0	0
181 to 365	0	0	0	0	0	0	0	0	0	0
More than 365	0	0	0	0	0	0	0	0	0	0
Total	0	0	0	0	0	0	0	0	0	0

Section 9: Complaints and Investigations Notices Received

Section 31	Section 33	Section 35	Court action	Total
0	0	0	0	0

Section 10: Privacy Impact Assessments (PIAs) and Personal Information Banks (PIBs)

10.1 Privacy Impact Assessments

Number of PIAs completed	1
Number of PIAs modified	0

10.2 Institution-specific and Central Personal Information Banks

Personal Information Banks	Active	Created	Terminated	Modified
Institution-specific	3	2	0	1
Central	0	0	0	0
Total	3	2	0	1

Section 11: Privacy Breaches

11.1 Material Privacy Breaches reported

Number of material privacy breaches reported to TBS	1
Number of material privacy breaches reported to OPC	1

11.2 Non-Material Privacy Breaches

Number of non-material privacy breaches	8

Section 12: Resources Related to the Privacy Act

12.1 Allocated Costs

Expenditures		Amount
Salaries		$280,500
Overtime		$0
Goods and Services		$6,130
Professional services contracts	$0
Other	$6,130
Total		$286,630

12.2 Human Resources

Resources	Person Years Dedicated to Privacy Activities
Full-time employees	2.890
Part-time and casual employees	0.070
Regional staff	0.000
Consultants and agency personnel	0.000
Students	0.000
Total	2.960

Note: Enter values to three decimal places.

Annex C: 2023-24 Supplemental Statistical Report

Supplemental Statistical Report on the Access to Information Act and the Privacy Act

Name of institution: Infrastructure Canada

Reporting period: 2023-04-01 to 2024-03-31

Section 1: Open Requests and Complaints Under the Access to Information Act

1.1 Enter the number of open requests that are outstanding from previous reporting periods.

Fiscal Year Open Requests Were Received	Open Requests that are Within Legislated Timelines as of March 31, 2024	Open Requests that are Beyond Legislated Timelines as of March 31, 2024	Total
Received in 2023-2024	8	0	8
Received in 2022-2023	1	0	1
Received in 2021-2022	0	0	0
Received in 2020-2021	0	0	0
Received in 2019-2020	0	0	0
Received in 2018-2019	0	0	0
Received in 2017-2018	0	0	0
Received in 2016-2017	0	0	0
Received in 2015-2016	0	0	0
Received in 2014-2015 or earlier	0	0	0
Total	9	0	9

Row 11, Col. 3 of Section 1.1 must equal Row 7, Col. 1 of Section 1.1 of the 2023-24 Statistical Report on the Access to Information Act

1.2 Enter the number of open complaints with the Information Commissioner of Canada that are outstanding from previous reporting periods.

Fiscal Year Open Complaints Were Received by Institution	Number of Open Complaints
Received in 2023-2024	1
Received in 2022-2023	0
Received in 2021-2022	1
Received in 2020-2021	1
Received in 2019-2020	1
Received in 2018-2019	0
Received in 2017-2018	0
Received in 2016-2017	0
Received in 2015-2016	0
Received in 2014-2015 or earlier	0
Total	4

Section 2: Open Requests and Complaints Under the Privacy Act

2.1 Enter the number of open requests that are outstanding from previous reporting periods

Fiscal Year Open Requests Were Received	Open Requests that are Within Legislated Timelines as of March 31, 2024	Open Requests that are Beyond Legislated Timelines as of March 31, 2024	Total
Received in 2023-2024	1	0	1
Received in 2022-2023	0	0	0
Received in 2021-2022	0	0	0
Received in 2020-2021	0	0	0
Received in 2019-2020	0	0	0
Received in 2018-2019	0	0	0
Received in 2017-2018	0	0	0
Received in 2016-2017	0	0	0
Received in 2015-2016	0	0	0
Received in 2014-2015 or earlier	0	0	0
Total	1	0	1

Row 11, Col. 3 of Section 2.1 must equal Row 7, Col. 1 of Section 1.1 of the 2023-24 Statistical Report on the Privacy Act

2.2 Enter the number of open complaints with the Privacy Commissioner of Canada that are outstanding from previous reporting periods.

Fiscal Year Open Complaints Were Received by Institution	Number of Open Complaints
Received in 2023-2024	0
Received in 2022-2023	0
Received in 2021-2022	0
Received in 2020-2021	0
Received in 2019-2020	0
Received in 2018-2019	0
Received in 2017-2018	0
Received in 2016-2017	0
Received in 2015-2016	0
Received in 2014-2015 or earlier	0
Total	0

Section 3: Social Insurance Number (SIN)

Has your institution begun a new collection or a new consistent use of the SIN in 2023-24?	No

Section 4: Universal Access under the Privacy Act

How many requests were received from confirmed foreign nationals outside of Canada in 2023-2024?	0

Row 1, Col. 1 of Section 4 must be equal to or less than Row 1, Col. 1 of Section 1.1 of the 2023-24 Statistical Report on the Privacy Act