Privacy Impact Assessment Report

What is the Privacy Impact Assessment Policy?

• In effect since May 2, 2002, this new Government of Canada Policy is part of a toolkit designed to help departments and agencies provide Canadians with the assurance they have come to expect when they transmit their personal information to the government in-person, by telephone, by mail or on-line.
• It puts into action the principles of the Privacy Act by providing federal departments and agencies with a consistent framework to identify and resolve privacy risks during the design and redesign of programs and services.
• It prescribes a process that accurately determines the effects of a specific service delivery initiative on an individual's privacy and ensures that the appropriate steps are taken to avoid or address any risks.

Why is it needed?

• Canadians are concerned about the privacy of their personal information, particularly in the context of electronic service delivery.
• This policy reaffirms the Government of Canada's commitment to privacy and its recognition that privacy protection is vital to the success of the Government On-Line initiative.

How does it work?

• This policy makes it mandatory for all federal institutions listed in the Schedule of the Privacy Act to document, publish and maintain PIAs for all programs and services where privacy issues may be inherent.
• To ensure openness and accountability departments and agencies must provide copies of their assessments to the Privacy Commissioner and publish summaries of the results in both official languages.

Was there any consultation done for this policy?

• The policy and guidelines reflect extensive consultation with the Office of the Federal Privacy Commissioner, various stakeholder communities and policy centres including specialists in provincial governments.

How do I find out more?

• The PIA Policy and Guidelines can be found at http://www.tbs-sct.gc.ca/pubs_pol/ciopubs/pia-pefr/paip-pefr_e.asp