CINXE.COM
Privacy Management Framework Overview - Canada.ca
<!doctype html> <html class="no-js" dir="ltr" lang="en" xmlns="http://www.w3.org/1999/xhtml"> <head prefix="og: http://ogp.me/ns#"> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <meta charset="utf-8"/> <title>Privacy Management Framework Overview - Canada.ca</title> <meta content="width=device-width,initial-scale=1" name="viewport"/> <link rel="schema.dcterms" href="http://purl.org/dc/terms/"/> <link rel="canonical" href="https://www.canada.ca/en/revenue-agency/corporate/security/privacy-management-framework-overview.html"/> <link rel="alternate" hreflang="en" href="https://www.canada.ca/en/revenue-agency/corporate/security/privacy-management-framework-overview.html"/> <link rel="alternate" hreflang="fr" href="https://www.canada.ca/fr/agence-revenu/organisation/securite/sommaire-du-cadre-de-gestion-de-la-protection-des-renseignements-personnels.html"/> <meta name="description" content="Discover how the Canada Revenue Agency (CRA) safeguards personal information with its Privacy Management Framework, outlining key principles and strategies for managing privacy and data protection across the Agency."/> <meta name="keywords" content="CRA privacy management, personal information protection, privacy guiding principles, canadian data security, CRA data handling, privacy compliance CRA, data risk management, CRA privacy governance, privacy breach management"/> <meta name="author" content="Canada Revenue Agency"/> <meta name="dcterms.title" content="Privacy Management Framework Overview"/> <meta name="dcterms.description" content="Discover how the Canada Revenue Agency (CRA) safeguards personal information with its Privacy Management Framework, outlining key principles and strategies for managing privacy and data protection across the Agency."/> <meta name="dcterms.creator" content="Canada Revenue Agency"/> <meta name="dcterms.language" title="ISO639-2/T" content="eng"/> <meta name="dcterms.issued" title="W3CDTF" content="2022-05-16"/> <meta name="dcterms.modified" title="W3CDTF" content="2024-06-26"/> <meta name="dcterms.spatial" content="Canada"/> <meta name="dcterms.type" content="transparency - other"/> <meta name="dcterms.identifier" content="Canada_Revenue_Agency"/> <meta prefix="fb: https://www.facebook.com/2008/fbml" property="fb:pages" content="378967748836213, 160339344047502, 184605778338568, 237796269600506, 10860597051, 14498271095, 209857686718, 160504807323251, 111156792247197, 113429762015861, 502566449790031, 312292485564363, 1471831713076413, 22724568071, 17294463927, 1442463402719857, 247990812241506, 730097607131117, 1142481292546228, 1765602380419601, 131514060764735, 307780276294187, 427238637642566, 525934210910141, 1016214671785090, 192657607776229, 586856208161152, 1146080748799944, 408143085978521, 490290084411688, 163828286987751, 565688503775086, 460123390028, 318424514044, 632493333805962, 370233926766473, 173004244677, 1562729973959056, 362400293941960, 769857139754987, 167891083224996, 466882737009651, 126404198009505, 135409166525475, 664638680273646, 169011506491295, 217171551640146, 182842831756930, 1464645710444681, 218822426028, 218740415905, 123326971154939, 125058490980757, 1062292210514762, 1768389106741505, 310939332270090, 285960408117397, 985916134909087, 655533774808209, 1522633664630497, 686814348097821, 230798677012118, 320520588000085, 103201203106202, 273375356172196, 61263506236, 353102841161, 1061339807224729, 1090791104267764, 395867780593657, 1597876400459657, 388427768185631, 937815283021844, 207409132619743, 1952090675003143, 206529629372368, 218566908564369, 175257766291975, 118472908172897, 767088219985590, 478573952173735, 465264530180856, 317418191615817, 428040827230778, 222493134493922, 196833853688656, 194633827256676, 252002641498535, 398018420213195, 265626156847421, 202442683196210, 384350631577399, 385499078129720, 178433945604162, 398240836869162, 326182960762584, 354672164565195, 375081249171867, 333050716732105, 118996871563050, 240349086055056, 119579301504003, 185184131584797, 333647780005544, 306255172770146, 369589566399283, 117461228379000, 349774478396157, 201995959908210, 307017162692056, 145928592172074, 122656527842056"> <script type="text/javascript" src="https://www.canada.ca/public/4a968ba310e5637a73786685a4729cdd129476e35554" ></script><script src="//assets.adobedtm.com/be5dfd287373/abb618326704/launch-3eac5e076135.min.js"></script> <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.15.4/css/all.css" integrity="sha256-mUZM63G8m73Mcidfrv5E+Y61y7a12O5mW4ezU3bxqW4=" crossorigin="anonymous"/> <link rel="stylesheet" href="/etc/designs/canada/wet-boew/css/theme.min.css"/> <link href="/etc/designs/canada/wet-boew/assets/favicon.ico" rel="icon" type="image/x-icon"/> <noscript><link rel="stylesheet" href="/etc/designs/canada/wet-boew/css/noscript.min.css"/></noscript> <script>!function(a){var e="https://s.go-mpulse.net/boomerang/",t="addEventListener";if("False"=="True")a.BOOMR_config=a.BOOMR_config||{},a.BOOMR_config.PageParams=a.BOOMR_config.PageParams||{},a.BOOMR_config.PageParams.pci=!0,e="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="KBFUZ-C9D7G-RB8SX-GRGEN-HGMC9",function(){function n(e){a.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!a.BOOMR||!a.BOOMR.version&&!a.BOOMR.snippetExecuted){a.BOOMR=a.BOOMR||{},a.BOOMR.snippetExecuted=!0;var i,_,o,r=document.createElement("iframe");if(a[t])a[t]("load",n,!1);else if(a.attachEvent)a.attachEvent("onload",n);r.src="javascript:void(0)",r.title="",r.role="presentation",(r.frameElement||r).style.cssText="width:0;height:0;border:0;display:none;",o=document.getElementsByTagName("script")[0],o.parentNode.insertBefore(r,o);try{_=r.contentWindow.document}catch(O){i=document.domain,r.src="javascript:var d=document.open();d.domain='"+i+"';void(0);",_=r.contentWindow.document}_.open()._l=function(){var a=this.createElement("script");if(i)this.domain=i;a.id="boomr-if-as",a.src=e+"KBFUZ-C9D7G-RB8SX-GRGEN-HGMC9",BOOMR_lstart=(new Date).getTime(),this.body.appendChild(a)},_.write("<bo"+'dy onload="document._l();">'),_.close()}}(),"".length>0)if(a&&"performance"in a&&a.performance&&"function"==typeof a.performance.setResourceTimingBufferSize)a.performance.setResourceTimingBufferSize();!function(){if(BOOMR=a.BOOMR||{},BOOMR.plugins=BOOMR.plugins||{},!BOOMR.plugins.AK){var e=""=="true"?1:0,t="",n="bdpnbeqxe4gnwz2k5exa-f-0fe45eebe-clientnsv4-s.akamaihd.net",i="false"=="true"?2:1,_={"ak.v":"39","ak.cp":"789605","ak.ai":parseInt("231651",10),"ak.ol":"0","ak.cr":4,"ak.ipv":4,"ak.proto":"http/1.1","ak.rid":"ac78705a","ak.r":47863,"ak.a2":e,"ak.m":"dscb","ak.n":"essl","ak.bpcip":"8.222.208.0","ak.cport":51462,"ak.gh":"23.54.158.74","ak.quicv":"","ak.tlsv":"tls1.2","ak.0rtt":"","ak.0rtt.ed":"","ak.csrc":"-","ak.acc":"reno","ak.t":"1732962606","ak.ak":"hOBiQwZUYzCg5VSAfCLimQ==Xy1/5s1Fdcb6zwSuQRcJUxNlsg9ewunHkuVPPkQW5QQgVXYz/OF9Pg43ZfphTm/Y0zRC0rZO6a9wEaqB+sVehCDrpQweOdjwZ27y7GmCrfx9DWrcOEsmotxyhyoR3jZd2i/+jNPjhJMTGdjqhJrL8gdgc9601OOPlmFNnADNfqg+/4AtOpFYlxwdNNBEIOxPl3+snK1fzNpLSCnSgOykOT6VqA11e6BftPU97PxBkdmTQsrZjAQy3uuzp4V3XVAIUu6gwDsWYLfvIV1tFMRh6sC+cxnsxUxfuQ2vZ/3TX/3jcZBxAUdKxro2wudNqF6U6dBTIbFD3q0zGgW+JwHEbrt9ObT7jz6L1PKnjkfYHmpGmEimDaPp2I5i0qX7poEWPC8t1Ovh6O+nXk+F6FSZKn370VUUeKhgXMQjwG+vw44=","ak.pv":"790","ak.dpoabenc":"","ak.tf":i};if(""!==t)_["ak.ruds"]=t;var o={i:!1,av:function(e){var t="http.initiator";if(e&&(!e[t]||"spa_hard"===e[t]))_["ak.feo"]=void 0!==a.aFeoApplied?1:0,BOOMR.addVar(_)},rv:function(){var a=["ak.bpcip","ak.cport","ak.cr","ak.csrc","ak.gh","ak.ipv","ak.m","ak.n","ak.ol","ak.proto","ak.quicv","ak.tlsv","ak.0rtt","ak.0rtt.ed","ak.r","ak.acc","ak.t","ak.tf"];BOOMR.removeVar(a)}};BOOMR.plugins.AK={akVars:_,akDNSPreFetchDomain:n,init:function(){if(!o.i){var a=BOOMR.subscribe;a("before_beacon",o.av,null,null),a("onbeacon",o.rv,null,null),o.i=!0}return this},is_complete:function(){return!0}}}}()}(window);</script></head> <body vocab="http://schema.org/" typeof="WebPage" resource="#wb-webpage"> <div class="newpar new section"> </div> <div class="par iparys_inherited"> <div class="global-header"><nav><ul id="wb-tphp"> <li class="wb-slc"><a class="wb-sl" href="#wb-cont">Skip to main content</a></li> <li class="wb-slc"><a class="wb-sl" href="#wb-info">Skip to "About government"</a></li> </ul></nav> <header> <div id="wb-bnr" class="container"> <div class="row"> <section id="wb-lng" class="col-xs-3 col-sm-12 pull-right text-right"> <h2 class="wb-inv">Language selection</h2> <div class="row"> <div class="col-md-12"> <ul class="list-inline mrgn-bttm-0"> <li> <a lang="fr" href="/fr/agence-revenu/organisation/securite/sommaire-du-cadre-de-gestion-de-la-protection-des-renseignements-personnels.html"> <span class="hidden-xs" translate="no">Français</span> <abbr title="Français" class="visible-xs h3 mrgn-tp-sm mrgn-bttm-0 text-uppercase" translate="no">fr</abbr> </a> </li> </ul> </div> </div> </section> <div class="brand col-xs-9 col-sm-5 col-md-4" property="publisher" resource="#wb-publisher" typeof="GovernmentOrganization"> <a href="/en.html" property="url"> <img src="/etc/designs/canada/wet-boew/assets/sig-blk-en.svg" alt="Government of Canada" property="logo"/> <span class="wb-inv"> / <span lang="fr">Gouvernement du Canada</span> </span> </a> <meta property="name" content="Government of Canada"/> <meta property="areaServed" typeof="Country" content="Canada"/> <link property="logo" href="/etc/designs/canada/wet-boew/assets/wmms-blk.svg"/> </div> <section id="wb-srch" class="col-lg-offset-4 col-md-offset-4 col-sm-offset-2 col-xs-12 col-sm-5 col-md-4"> <h2>Search</h2> <form action="/en/revenue-agency/search.html" method="get" name="cse-search-box" role="search"> <div class="form-group wb-srch-qry"> <label for="wb-srch-q" class="wb-inv">Search Canada.ca</label> <input id="wb-srch-q" list="wb-srch-q-ac" class="wb-srch-q form-control" name="q" type="search" value="" size="34" maxlength="170" placeholder="Search CRA"/> <datalist id="wb-srch-q-ac"> </datalist> </div> <div class="form-group submit"> <button type="submit" id="wb-srch-sub" class="btn btn-primary btn-small" name="wb-srch-sub"><span class="glyphicon-search glyphicon"></span><span class="wb-inv">Search</span></button> </div> </form> </section> </div> </div> <hr/> <div class="container"><div class="row"> <div class="col-md-8"> <nav class="gcweb-menu" typeof="SiteNavigationElement"> <h2 class="wb-inv">Menu</h2> <button type="button" aria-haspopup="true" aria-expanded="false"><span class="wb-inv">Main </span>Menu <span class="expicon glyphicon glyphicon-chevron-down"></span></button> <ul role="menu" aria-orientation="vertical" data-ajax-replace="/content/dam/canada/sitemenu/sitemenu-v2-en.html"> <li role="presentation"><a role="menuitem" tabindex="-1" href="https://www.canada.ca/en/services/jobs.html">Jobs and the workplace</a></li> <li role="presentation"><a role="menuitem" tabindex="-1" href="https://www.canada.ca/en/services/immigration-citizenship.html">Immigration and citizenship</a></li> <li role="presentation"><a role="menuitem" tabindex="-1" href="https://travel.gc.ca/">Travel and tourism</a></li> <li role="presentation"><a role="menuitem" tabindex="-1" href="https://www.canada.ca/en/services/business.html">Business and industry</a></li> <li role="presentation"><a role="menuitem" tabindex="-1" href="https://www.canada.ca/en/services/benefits.html">Benefits</a></li> <li role="presentation"><a role="menuitem" tabindex="-1" href="https://www.canada.ca/en/services/health.html">Health</a></li> <li role="presentation"><a role="menuitem" tabindex="-1" href="https://www.canada.ca/en/services/taxes.html">Taxes</a></li> <li role="presentation"><a role="menuitem" tabindex="-1" href="https://www.canada.ca/en/services/environment.html">Environment and natural resources</a></li> <li role="presentation"><a role="menuitem" tabindex="-1" href="https://www.canada.ca/en/services/defence.html">National security and defence</a></li> <li role="presentation"><a role="menuitem" tabindex="-1" href="https://www.canada.ca/en/services/culture.html">Culture, history and sport</a></li> <li role="presentation"><a role="menuitem" tabindex="-1" href="https://www.canada.ca/en/services/policing.html">Policing, justice and emergencies</a></li> <li role="presentation"><a role="menuitem" tabindex="-1" href="https://www.canada.ca/en/services/transport.html">Transport and infrastructure</a></li> <li role="presentation"><a role="menuitem" tabindex="-1" href="https://www.international.gc.ca/world-monde/index.aspx?lang=eng">Canada and the world</a></li> <li role="presentation"><a role="menuitem" tabindex="-1" href="https://www.canada.ca/en/services/finance.html">Money and finances</a></li> <li role="presentation"><a role="menuitem" tabindex="-1" href="https://www.canada.ca/en/services/science.html">Science and innovation</a></li> </ul> </nav> </div> <div class="col-xs-offset-6 col-xs-6 col-md-offset-0 col-md-4"> <section id="wb-so"> <h2 class="wb-inv">Sign in</h2> <a class="btn btn-primary" href="/en/revenue-agency/services/e-services/cra-login-services.html"><span class="visible-xs">Sign in</span><span class="hidden-xs">CRA sign in</span></a> </section> </div> </div></div> <nav id="wb-bc" property="breadcrumb"><h2 class="wb-inv">You are here:</h2><div class="container"><ol class="breadcrumb"> <li><a href='/en.html'>Canada.ca</a></li> <li><a href='/en/revenue-agency.html'>Canada Revenue Agency (CRA)</a></li> <li><a href='/en/revenue-agency/corporate/security.html'>Security and privacy of your information with the CRA</a></li> </ol></div></nav> </header> </div> </div> <main property="mainContentOfPage" resource="#wb-main" typeof="WebPageElement" class="container"> <div class="mwstitle section"> <h1 property="name" id="wb-cont" dir="ltr"> Privacy Management Framework overview</h1> </div> <div class="mwsbodytext text parbase section"> <p>The Canada Revenue Agency (CRA) understands that Canadians want to know that their personal information is protected.</p> <p>The CRA is one of the largest holders of personal information in the Government of Canada. Making sure this personal information is properly managed and protected is one of the Agency’s top priorities.</p> <p>To demonstrate our commitment to protecting personal information, the CRA has developed the <a href="/en/revenue-agency/corporate/security/privacy-management-framework.html">Privacy Management Framework</a>. This report explains how the CRA manages privacy and includes: </p> </div> <div class="mwsbodytext text parbase section"> <h2>Our privacy guiding principles</h2> <p>The CRA has established <a href="/en/revenue-agency/corporate/security/privacy-management-framework.html#privacyguidingprinciples">five privacy guiding principles</a>:</p> <ol> <li>We value and respect the client data in our possession and help our clients clearly understand how and why we are using it.</li> <li>We support our employees in understanding their data handling responsibilities, and we respond to our clients’ requests promptly and helpfully to drive a seamless and efficient experience.</li> <li>We put our clients at the heart of all changes and improvements to our service delivery by adopting innovative practices and including Privacy by Design principles into all that we do.</li> <li>We collaborate with our employees and integrate effective and secure client data management across the CRA to foster a holistic approach to building and maintaining client trust.</li> <li>We decide how we handle client data in line with legislative obligations and leading privacy practices and based on ethical standards.</li> </ol> </div> <div class="mwsbodytext text parbase section"> <h2>Our privacy commitment</h2> <p>The CRA’s commitment to Canadians is to appropriately manage and proactively protect personal information through collaboration across the Agency and the adoption of Privacy by Design principles. To meet this commitment, we focus on the following measures:</p> <ol> <li>Embedding the privacy guiding principles and <a href="/en/revenue-agency/corporate/security/privacy-management-framework.html#annexa">principles of Privacy by Design</a> into the development, operation and management of all programs, processes, solutions and technologies involving personal information.</li> <li>Incorporating privacy protective measures in all relationships where the CRA may be required to share information to facilitate the appropriate handling and protection of personal information.</li> <li>Taking the necessary precautions and steps to protect personal information from external and insider threats.</li> <li>Supporting employees to understand their privacy responsibilities and compliance obligations.</li> <li>Managing existing and emerging data risks, monitoring and responding to privacy compliance issues.</li> <li>Assessing and managing privacy breaches in keeping with Treasury Board of Canada Secretariat policy instruments to document and evaluate potential risks to the affected individual and mitigate them.</li> </ol> <h2>Our privacy governance structure</h2> <p>The CRA has developed a strong privacy governance structure that fosters collaboration between all branches and regions and enables the incorporation of privacy considerations into all initiatives and services. The governance structure includes a senior privacy committee, operational committees, and initiative-based working groups.</p> <p>We are committed to safeguarding the information that Canadians have entrusted to our organization. To meet your expectations, we take the necessary measures to protect personal information, enable the appropriate management of data, and promote employee responsibility for privacy.</p> <p>To learn more about how we manage privacy at the CRA, consult our <a href="/en/revenue-agency/corporate/security/privacy-management-framework.html">Privacy Management Framework</a>.</p> </div> <section class="pagedetails"> <h2 class="wb-inv">Page details</h2> <div class="row"> <div class="col-sm-8 col-md-9 col-lg-9"> <div class="wb-disable-allow" data-ajax-replace="/etc/designs/canada/wet-boew/assets/feedback/page-feedback-en.html"> </div> </div> </div> <dl id="wb-dtmd"> <dt>Date modified:</dt> <dd><time property="dateModified">2024-06-26</time></dd> </dl> </section> </main> <div class="newpar new section"> </div> <div class="par iparys_inherited"> </div> <div class="newpar new section"> </div> <div class="par iparys_inherited"> <div class="global-footer"> <footer id="wb-info"> <h2 class="wb-inv">About this site</h2> <div class="gc-contextual"><div class="container"> <nav> <h3>Canada Revenue Agency (CRA)</h3> <ul class="list-col-xs-1 list-col-sm-2 list-col-md-3"> <li><a href="/en/revenue-agency/corporate/contact-information.html">Contact the CRA</a></li> <li><a href="/en/revenue-agency/services/update-information-cra.html">Update your information</a></li> <li><a href="/en/revenue-agency/corporate/about-canada-revenue-agency-cra.html">About the CRA</a></li> </ul> </nav> </div></div> <div class="gc-main-footer"> <div class="container"> <nav> <h3>Government of Canada</h3> <ul class="list-unstyled colcount-sm-2 colcount-md-3"> <li><a href="/en/contact.html">All contacts</a></li> <li><a href="/en/government/dept.html">Departments and agencies</a></li> <li><a href="/en/government/system.html">About government</a></li> </ul> <h4><span class="wb-inv">Themes and topics</span></h4> <ul class="list-unstyled colcount-sm-2 colcount-md-3"> <li><a href="/en/services/jobs.html">Jobs</a></li> <li><a href="/en/services/immigration-citizenship.html">Immigration and citizenship</a></li> <li><a href="https://travel.gc.ca/">Travel and tourism</a></li> <li><a href="/en/services/business.html">Business</a></li> <li><a href="/en/services/benefits.html">Benefits</a></li> <li><a href="/en/services/health.html">Health</a></li> <li><a href="/en/services/taxes.html">Taxes</a></li> <li><a href="/en/services/environment.html">Environment and natural resources</a></li> <li><a href="/en/services/defence.html">National security and defence</a></li> <li><a href="/en/services/culture.html">Culture, history and sport</a></li> <li><a href="/en/services/policing.html">Policing, justice and emergencies</a></li> <li><a href="/en/services/transport.html">Transport and infrastructure</a></li> <li><a href="https://international.gc.ca/world-monde/index.aspx?lang=eng">Canada and the world</a></li> <li><a href="/en/services/finance.html">Money and finance</a></li> <li><a href="/en/services/science.html">Science and innovation</a></li> <li><a href="/en/services/indigenous-peoples.html">Indigenous peoples</a></li> <li><a href="/en/services/veterans-military.html">Veterans and military</a></li> <li><a href="/en/services/youth.html">Youth</a></li> </ul> </nav> </div> </div> <div class="gc-sub-footer"> <div class="container d-flex align-items-center"> <nav> <h3 class="wb-inv">Government of Canada Corporate</h3> <ul> <li><a href="https://www.canada.ca/en/social.html">Social media</a></li> <li><a href="https://www.canada.ca/en/mobile.html">Mobile applications</a></li> <li><a href="https://www.canada.ca/en/government/about.html">About Canada.ca</a></li> <li><a href="/en/transparency/terms.html">Terms and conditions</a></li> <li><a href="/en/revenue-agency/corporate/privacy-notice.html">Privacy</a></li> </ul> </nav> <div class="wtrmrk align-self-end"> <img src="/etc/designs/canada/wet-boew/assets/wmms-blk.svg" alt="Symbol of the Government of Canada"/> </div> </div> </div> </footer> </div> </div> <script type="text/javascript">_satellite.pageBottom();</script> <script src="//ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js" integrity="sha256-BbhdlvQf/xTY9gja0Dq3HiwQF8LaCRTXxZKRutelT44=" crossorigin="anonymous"></script> <script src="/etc/designs/canada/wet-boew/js/ep-pp.min.js"></script> <script src="/etc/designs/canada/wet-boew/js/wet-boew.min.js"></script> <script src="/etc/designs/canada/wet-boew/js/theme.min.js"></script> </body> </html>