For Federal institutions - Office of the Privacy Commissioner of Canada

<!DOCTYPE html>   <html class="secondary no-js" lang="en" dir="ltr">  <head> <meta charset="utf-8" />  <title>For Federal institutions - Office of the Privacy Commissioner of Canada</title> <meta content="width=device-width, initial-scale=1" name="viewport" />  <meta name="dcterms.title" content="For Federal institutions" /> <meta name="dcterms.creator" content="Office of the Privacy Commissioner of Canada" /> <meta name="dcterms.issued" title="W3CDTF" content="2024-03-20" /> <meta name="dcterms.modified" title="W3CDTF" content="2024-03-20" /> <meta name="dcterms.language" title="ISO639-2" content="eng" /> <meta name="referrer" content="same-origin" />   <link href="/wet/gcweb-opc/assets/favicon.ico" rel="icon" type="image/x-icon" /> <link rel="stylesheet" href="/wet/gcweb-opc/css/theme.min.css" />    <noscript><link rel="stylesheet" href="/wet/wet-boew/css/noscript.min.css" /></noscript> <link rel="stylesheet" href="/css/opc-style.css" />  <link rel="stylesheet" href="/cms-css/feedback.css" /> <script type="text/javascript"> var _paq = (function (paq) { var removeTrailingSlash = function(site) { // if site has an end slash (like: www.example.com/), // then remove it and return the site without the end slash return site.replace(/\/$/, ''); // Match a forward slash / at the end of the string ($) } // Push the english url in lower case for consistent results var u = "/m/"; var url = removeTrailingSlash(window.location.href).toLowerCase(); var ipsource = 'external'; paq.push(['setCustomDimension', '2', url]); paq.push(['setCustomDimension', '3', ipsource]); paq.push(['setCustomUrl', url]); paq.push(['enableLinkTracking']); paq.push(['trackPageView']); paq.push(['trackVisibleContentImpressions']); paq.push(['setTrackerUrl', u + 'm.php']); paq.push(['setSiteId', '1']); var d = document, g = d.createElement('script'), s = d.getElementsByTagName('script')[0]; g.type = 'text/javascript'; g.async = true; g.defer = true; g.src = u + 'm.js'; s.parentNode.insertBefore(g, s); return paq; })(window._paq || []); </script> </head> <body class="secondary" vocab="http://schema.org/" typeof="WebPage"> <section aria-label="Skip to"> <ul id="wb-tphp"> <li class="wb-slc"> <a class="wb-sl" href="#wb-cont">Skip to main content</a> </li> <li class="wb-slc visible-sm visible-md visible-lg"> <a class="wb-sl" href="#wb-info">Skip to "About this site"</a> </li> </ul> </section> <header role="banner"> <div id="wb-bnr" class="container"> <section id="wb-lng" class="visible-md visible-lg text-right" aria-labelledby="lang-section"> <h2 id="lang-section" class="wb-inv">Language selection</h2> <div class="row"> <div class="col-md-12"> <ul class="list-inline margin-bottom-none"> <li><a lang="fr" hreflang="fr" href="/fr/pour-les-institutions-federales/">Français</a></li> </ul> </div> </div> </section> <div class="row"> <div class="brand col-xs-8 col-sm-9 col-md-5"> <a href="/en"> <img class="visible-print-block" src="/wet/gcweb-opc/assets/opc-blk-en.png" alt=""> <img src="/wet/gcweb-opc/assets/opc-wht-en.png" class="hidden-print img img-responsive" alt="OPC Logo" /> <span class="wb-inv"> Office of the Privacy Commissioner of Canada</span> </a> </div> <section class="wb-mb-links col-xs-4 col-sm-3 visible-sm visible-xs" id="wb-glb-mn" aria-labelledby="search-menu-section"> <h2 id="search-menu-section">Search and menus</h2> <ul class="list-inline text-right chvrn"> <li> <a href="#mb-pnl" title="Search and menus" aria-controls="mb-pnl" class="overlay-lnk" role="button"> <span class="glyphicon glyphicon-search"> <span class="glyphicon glyphicon-th-list"> <span class="wb-inv">Search and menus</span> </span> </span> </a> </li> </ul> <div id="mb-pnl"></div> </section> <section id="wb-srch" class="col-xs-7 text-right visible-md visible-lg" aria-labelledby="search-section"> <h2 id="search-section">Search</h2> <form action="/en/search" class="form-inline" enctype="multipart/form-data" method="post" name="cse-search-box" role="search"> <div class="form-group"> <label for="wb-srch-q" class="wb-inv">Search website</label> <input id="wb-srch-q" list="wb-srch-q-ac" class="wb-srch-q form-control" name="t" type="search" value="" size="27" maxlength="150" placeholder="Search priv.gc.ca" /> <datalist id="wb-srch-q-ac">   </datalist> </div> <div class="form-group submit"> <button type="submit" id="wb-srch-sub" class="btn btn-primary btn-small" name="wb-srch-sub"><span class="glyphicon-search glyphicon"></span><span class="wb-inv">Search</span></button> </div> <input name='ufprt' type='hidden' value='B9192E157952FCE286AA12BA4C16275B07B1FECE6A947B8F16B85361E77CEF589F11A4C283266CC01105ED6AD340141DEAB1DBA8F5E992D28078E75665B7F0A5545D644C850836832205A74D103582A236FF06759732C572B4F8611E4D6D31D25CE4AD7AF5B231A413C5691CD5CBAE65AE7C802CF93CE23B8A31B9B2FBBCF559' /></form> </section> </div> </div> <nav id="wb-sm" data-ajax-replace="/ajax/sitemenu-en" data-trgt="mb-pnl" class="wb-menu visible-md visible-lg" typeof="SiteNavigationElement" aria-labelledby="topics-menu-section"> <div class="container nvbar"> <h2 id="topics-menu-section">Topics menu</h2> <div class="row"> <ul class="list-inline menu"> <li><a href="/en/for-individuals/" class="item">For individuals</a></li> <li><a href="/en/for-businesses/" class="item">For businesses</a></li> <li><a href="/en/for-federal-institutions/" class="item">For federal institutions</a></li> <li><a href="/en/report-a-concern/" class="item">Report a concern</a></li> <li><a href="/en/opc-actions-and-decisions/" class="item">OPC actions and decisions</a></li> <li><a href="/en/about-the-opc/" class="item">About the OPC</a></li> </ul> </div> </div> </nav> <nav id="wb-bc" property="breadcrumb" aria-labelledby="you-are-here"> <h2 id="you-are-here">You are here:</h2> <div class="container"> <div class="row"> <ol class="breadcrumb"> <li><a href="/en/">Home</a></li> </ol> </div> </div> </nav> </header> <main property="mainContentOfPage" class="container"> <div class="row"> <div class="col-md-12"> <h1 id="wb-cont">For federal institutions</h1> </div> <div class="col-md-8 pull-left"> </div> <div class="col-md-4 pull-right"> <img src="/media/3862/federal_landing.png" class="img-responsive" alt="" /> </div> <section class="col-md-8" aria-label="Main content"> <div class="row"> <div class="col-md-12">  <section class="alert alert-info"> <h4>New online <abbr title="Privacy Impact Assessment">PIA</abbr> submission form!</h4>  <p>Federal institutions can now use our new <a href="/en/privacy-topics/privacy-impact-assessments/submit-pia/" title="submit-pia">online Privacy Impact Assessment (<abbr>PIA</abbr>) submission form</a> to submit approved <abbr title="Privacy Impact Assessments">PIAs</abbr> and related documents to the Office of the Privacy Commissioner of Canada.</p> </section> <p>The federal government needs personal information to deliver effective programs and services, and to shape sound public policies. However, individuals also need to be confident that their personal information will be protected and handled appropriately.</p> <p>The <a href="/en/privacy-topics/privacy-laws-in-canada/the-privacy-act/" title="The Privacy Act"><em>Privacy Act</em></a> governs the personal information handling practices of federal institutions. It limits the collection, use, sharing, and disclosure of individuals’ personal information. It also gives individuals the <a href="/en/privacy-topics/accessing-personal-information/accessing-your-personal-information/" title="Accessing your personal information">right to access</a> and request the correction of personal information about themselves that is held by the federal government.</p> <p>The <a href="https://www.canada.ca/en/treasury-board-secretariat/index.html">Treasury Board of Canada Secretariat (<abbr>TBS</abbr>)</a> is responsible for preparing policy instruments concerning the operation of the <em>Privacy Act</em> and its regulations. This includes issuing <a href="https://www.tbs-sct.canada.ca/pol/doc-eng.aspx?id=12510">directives and guidelines related to the <em>Privacy Act</em></a>.</p> <p>The Office of the Privacy Commissioner of Canada (<abbr>OPC</abbr>) oversees compliance with the <em>Privacy Act </em>and aims to <a href="/en/privacy-topics/privacy-laws-in-canada/the-privacy-act/privacy-act-compliance-help/" title="Privacy Act compliance help">help federal institutions improve their personal information handling practices</a>.</p> <p>From this page, you can find information and resources designed to help federal institutions protect privacy. If you need more help, you can contact the <abbr title="Office of the Privacy Commissioner of Canada">OPC</abbr>’s <a href="/en/about-the-opc/what-we-do/advisory-services-federal-institutions/" title="Advisory-services-federal-institutions">Government Advisory</a> team to get practical advice and guidance.</p> <div class="row"> <div class="col-md-12 wb-eqht"> <div class="row"> <section class="col-lg-6 col-sm-6 mrgn-bttm-md"> <p class="grid"><a href="/en/privacy-topics/privacy-laws-in-canada/the-privacy-act/"><em>Privacy Act</em></a></p> <p>Legislation, processes, guidance, investigations</p> </section> <section class="col-lg-6 col-sm-6 mrgn-bttm-md"> <p class="grid"><a href="/en/privacy-topics/privacy-laws-in-canada/the-privacy-act/privacy-act-compliance-help/"><em>Privacy Act</em> compliance help</a></p> <p>Guidance, access to information, disclosures, public safety</p> </section> </div> <div class="row"> <section class="col-lg-6 col-sm-6 mrgn-bttm-md"> <p class="grid"><a href="/en/privacy-topics/federal-government-privacy/respond-to-privacy-breaches-at-your-federal-institution/" title="Respond to privacy breaches at your federal institution">Breach reporting</a></p> <p>Guidelines, reporting forms</p> </section> <section class="col-lg-6 col-sm-6 mrgn-bttm-md"> <p class="grid"><a href="/en/privacy-topics/privacy-impact-assessments/">Privacy Impact Assessments</a></p> <p><abbr title="Privacy Impact Assessments">PIAs</abbr>, expectations, guide, process, tips, submit online</p> </section> </div> <div class="row"> <section class="col-lg-6 col-sm-6 mrgn-bttm-md"> <p class="grid"><a href="/en/privacy-topics/surveillance/police-and-public-safety/" title="Police and public safety">Police and public safety</a></p> <p>Facial recognition, video surveillance, mega events, body-worn cameras</p> </section> <section class="col-lg-6 col-sm-6 mrgn-bttm-md"> <p class="grid"><a href="/en/for-federal-institutions/privacy-act-bulletins/">Privacy Act Bulletins</a></p> <p>Lessons learned, best practices and other important privacy news, trends and information</p> </section> </div> <div class="row"> <section class="col-lg-6 col-sm-6 mrgn-bttm-md"> <p class="grid"><a href="/en/privacy-topics/technology/artificial-intelligence/">Artificial intelligence</a></p> <p>Guidance, privacy protection and <abbr title="artificial intelligence">AI</abbr> technologies</p> </section> <section class="col-lg-6 col-sm-6 mrgn-bttm-md"> <p class="grid"><a href="/en/privacy-topics/accessing-personal-information/obligations-for-organizations/02_05_d_50/">Guidance on deemed denials under the <em>Privacy Act</em></a></p> <p>Exceptions to access rights, timeliness, complaints</p> </section> </div> <div class="row"> <section class="col-lg-6 col-sm-6 mrgn-bttm-md"> <p class="grid"><a href="/en/privacy-topics/employers-and-employees/outsourcing/02_05_d_57_os_02/">Outsourcing for government departments</a></p> <p>Guidance, relevant investigations</p> </section> <section class="col-lg-6 col-sm-6 mrgn-bttm-md"> <p class="grid"><a href="/en/privacy-topics/employers-and-employees/02_05_d_67_tips/">Key privacy protection tips for federal human resources professionals</a></p> <p>Tips, investigations</p> </section> </div> <div class="row"> <section class="col-lg-6 col-sm-6 mrgn-bttm-md"> <p class="grid"><a href="/en/privacy-topics/surveillance/police-and-public-safety/02_05_d_29/">Public interest disclosures</a></p> <p>Guidance, disclosures without consent, <span>paragraph</span> 8(2)(m), notify <abbr title="Office of the Privacy Commissioner of Canada">OPC</abbr>, <abbr title="Public Interest Disclosure portal">PID portal</abbr></p> </section> <section class="col-lg-6 col-sm-6 mrgn-bttm-md"> <p class="grid"><a href="/en/privacy-topics/investigations/gd_exp_pa/"><em>Privacy Act</em> investigation process</a></p> <p>Process, obligations, timing</p> </section> </div> <p><a href="/en/privacy-topics/" class="btn btn-primary btn-lg pull-right">See all topics</a></p> </div> </div> </div> </div> </section> <div class="col-md-4 pull-right mrgn-tp-sm"> <section class="box box-opc box-opc-primary" aria-labelledby="rightSideSection"> <h2 id="rightSideSection" class="h1 title">Frequently asked questions</h2> <p>This list highlights advice and information related to privacy issues that employees of federal institutions frequently ask about when they <a href="/en/contact-the-opc/" title="Contact the OPC">contact us</a>.</p> <p><strong>How can an institution report a privacy breach to the <abbr title="Office of the Privacy Commissioner of Canada">OPC</abbr>?</strong></p> <p>Use our <a href="#" title="pb-pa_form">breach reporting form for federal institutions</a>.</p> <p><strong>What does the <abbr title="Office of the Privacy Commissioner of Canada">OPC</abbr> expect in a <abbr title="Privacy Impact Assessment">PIA</abbr>?</strong></p> <p>See our <a href="/en/privacy-topics/privacy-impact-assessments/gd_exp_202003/" title="gd_exp_202003">Guide for Submitting Privacy Impact Assessments to the <abbr title="Office of the Privacy Commissioner of Canada">OPC</abbr></a>.</p> <p><strong>How can an institution submit a <abbr title="Privacy Impact Assessment">PIA</abbr> to the <abbr title="Office of the Privacy Commissioner of Canada">OPC</abbr>?</strong></p> <p>You can use our <a href="/en/privacy-topics/privacy-impact-assessments/submit-pia/" title="submit-pia" data-anchor="#">secure online form</a> to submit your <abbr title="Privacy Impact Assessments">PIAs</abbr> and additional documents.</p> <p><strong>Can an institution release personal information without a person’s consent?</strong></p> <p>The <em>Privacy Act</em> sets out circumstances in which government institutions may disclose personal information in the public interest without consent. Go to our page on <span><a href="/en/privacy-topics/surveillance/police-and-public-safety/02_05_d_29/" title="02_05_d_29">public interest disclosures</a></span>.</p> <p><strong>How can an institution notify the <abbr title="Office of the Privacy Commissioner of Canada">OPC</abbr> about a public interest disclosure?</strong></p> <p>You can use our <a href="/en/privacy-topics/surveillance/police-and-public-safety/02_05_d_29/#toc4" title="02_05_d_29" data-anchor="#toc4">public interest disclosure form</a> to submit your notification.</p> <p><strong>What does the <abbr title="Office of the Privacy Commissioner of Canada">OPC</abbr> expect from institutions making representations in relation to a complaint?</strong></p> <p>See the explanation of the government institution’s role in: <span><a href="/en/privacy-topics/investigations/gd_exp_pa/" title="gd_exp_pa_201503">What to expect during a complaint investigation under the <em>Privacy Act</em></a></span></p> <p><strong>How does the <abbr title="Office of the Privacy Commissioner of Canada">OPC</abbr> interpret and apply the <em>Privacy Act</em>?</strong></p> <p>We publish summaries and reports from our <a href="/en/opc-actions-and-decisions/investigations/investigations-into-federal-institutions/" title="Investigations into federal institutions">investigations into federal institutions</a>. These offer concrete examples of how the <abbr title="Office of the Privacy Commissioner of Canada">OPC</abbr> enforces the <em>Privacy Act</em>.</p> </section> </div> </div> <div class="pagedetails"> <div class="row mrgn-tp-sm"> <div class="col-sm-6 col-md-5 col-lg-5" id="reportAProblem"> <i18n-host locale="en"> <feedback-problem feedback-api="https://api.priv.gc.ca/feedback/api/feedback" content-id="1163" version-id="265413"></feedback-problem> </i18n-host> </div> <div class="col-sm-6 col-md-4 col-md-push-3 col-lg-5 col-lg-push-2"></div> </div> <dl id="wb-dtmd"> <dt>Date modified: </dt> <dd><time property="dateModified">2024-03-20</time></dd> </dl> </div> </main> <footer id="wb-info"> <nav class="container visible-sm visible-md visible-lg wb-navcurr" aria-labelledby="footer-links"> <h2 class="wb-inv" id="footer-links">About this site</h2> <div class="row"> <div class="col-md-3"> <section aria-labelledby="about-opc-section"> <h3 id="about-opc-section">About the OPC</h3> <p>The Privacy Commissioner of Canada is an Agent of Parliament whose mission is to protect and promote privacy rights.</p> <ul class="list-unstyled"> <li><a href="/en/about-the-opc/who-we-are/">Who we are</a></li> <li><a href="/en/about-the-opc/what-we-do/">What we do</a></li> <li><a href="/en/about-the-opc/opc-operational-reports/">OPC operational reports</a></li> <li><a href="/en/accessibility/">Accessibility</a></li> <li><a href="/en/about-the-opc/publications/">Publications</a></li> <li><a href="/en/about-the-opc/working-at-the-opc/">Working at the OPC</a></li> </ul> </section> </div> <div class="col-md-3"> <section aria-labelledby="opc-news-section"> <h3 id="opc-news-section">OPC news</h3> <p>Get updates about the OPC’s announcements and activities, as well as the events in which we participate.</p> <ul class="list-unstyled"> <li><a href="/en/opc-news/news-and-announcements/">News and announcements</a></li> <li><a href="/en/opc-news/privacy-events/">Privacy events</a></li> <li><a href="/en/opc-news/speeches-and-statements/">Speeches</a></li> </ul> </section> </div> <div class="col-md-3"> <section aria-labelledby="respect-section"> <h3 id="respect-section">Your privacy</h3> <p><strong>We respect your privacy</strong></p> <p>Read our <a href="/en/privacy-and-transparency-at-the-opc/pp/">Privacy policy</a> and <a href="/en/privacy-and-transparency-at-the-opc/terms-and-conditions-of-use/">Terms and conditions of use</a> to find out more about your privacy and rights when using the <a href="/">priv.gc.ca</a> website or contacting the Office of the Privacy Commissioner of Canada.</p> </section> <section aria-labelledby="transparency-section"> <h3 id="transparency-section">Transparency</h3> <ul class="list-unstyled"> <li><a href="/en/privacy-and-transparency-at-the-opc/proactive-disclosure/">Proactive disclosure</a></li> </ul> </section> </div> <div class="col-md-3"> <section aria-labelledby="contact-us-section"> <h3 id="contact-us-section">Contact us</h3> <p>If you have a question, concerns about your privacy or want to file a complaint against an organization, we are here to help.</p> <a href="/en/contact-the-opc/" role="button" class="btn btn-default active">Contact the OPC</a> </section> <section aria-labelledby="stay-connected-section"> <h3 id="stay-connected-section">Stay connected</h3> <ul class="list-unstyled"> <li><span class="fa fa-comments"></span> <a href="/en/blog">OPC Blog</a></li> <li><span class="fa fa-linkedin-square"></span> <a href="https://www.linkedin.com/company/office-of-the-privacy-commissioner-of-canada">OPC LinkedIn</a></li> <li><span class="fa fa-rss-square"></span> <a href="/en/rss-feeds/">OPC RSS feeds</a></li> <li><span class="opc-icon"><img src="/wet/gcweb-opc/assets/x.svg" alt="X Account" title="X Account"/> </span> <a href="https://x.com/PrivacyPrivee">OPC @XAccount</a></li> <li><span class="fa fa-youtube"></span> <a href="https://www.youtube.com/user/PrivacyComm">OPC YouTube channel</a></li> </ul> </section> </div> </div> </nav> <div class="brand"> <div class="container"> <div class="row "> <div class="col-md-6"> <img src="/wet/gcweb-opc/assets/opc-blk-en.png" alt="OPC Logo" class="img img-responsive" /> <span class="wb-inv">Office of Privacy Commissioner of Canada</span> </div> <div class="col-md-6 tofpg text-right"> <a href="#wb-cont">Top of Page <span class="fa fa-arrow-circle-up"></span></a> </div> </div> </div> </div> </footer>  <script src="/wet/wet-boew/js/jquery/2.1.4/jquery.min.js"></script> <script src="/wet/wet-boew/js/wet-boew.min.js"></script>   <script src="/wet/gcweb-opc/js/theme.min.js"></script> <script src="/lib/feedbackform.client/dist/feedback.js"></script> </body> </html>

CINXE.COM

For Federal institutions - Office of the Privacy Commissioner of Canada