Privacy Regulations

Privacy Regulations His Excellency the Governor General in Council, on the recommendation of the Minister of Justice and the Treasury Board, pursuant to subsection 77(1) of the Privacy Act, is pleased hereby to make the annexed Regulations with respect to privacy. [Repealed, SOR/2018-39, s. 2] In these Regulations, Access to Personal Information Request Form means the form prescribed by the designated Minister pursuant to paragraph 71(1)(c) of the Act for the purpose of requesting access to personal information under the control of a government institution; (formule de demande d’accès à des renseignements personnels) Act means the Privacy Act; (Loi) appropriate officer means the officer of the government institution whose title and address is published pursuant to subparagraphs 11(1)(a)(iii) and 11(1)(b)(ii) of the Act; (fonctionnaire compétent) Correction Request Form means the form prescribed by the designated Minister pursuant to paragraph 71(1)(c) of the Act for the purpose of requesting, under subsection 12(2) of the Act, a correction of personal information under the control of a government institution. (formule de demande de correction) Notation Request Form[Revoked, SOR/85-1092, s. 1] The government institutions or parts of government institutions for the purpose of paragraph (e) of the definition personal information in section 3 of the Act are those set out in Schedule I to these Regulations. Personal information concerning an individual that has been used by a government institution for an administrative purpose shall be retained by the institution for at least two years following the last time the personal information was used for an administrative purpose unless the individual consents to its disposal; and where a request for access to the information has been received, until such time as the individual has had the opportunity to exercise all his rights under the Act. Notwithstanding subsection (1) where personal information is under the control of a government institution at a post abroad, the head of the post or the senior officer in charge thereof may order the destruction of the information in an emergency in order to prevent the removal of the information from the control of the institution. [Revoked, SOR/88-123, s. 1] The investigative bodies for the purposes of paragraph 8(2)(e) of the Act are those listed in Schedule II; paragraph 22(1)(a) of the Act are those listed in Schedule III; and section 23 of the Act are those listed in Schedule IV. Personal information that has been transferred to the control of the Library and Archives of Canada by a government institution for archival or historical purposes may be disclosed to any person or body for research or statistical purposes where the information is of such a nature that disclosure would not constitute an unwarranted invasion of the privacy of the individual to whom the information relates; the disclosure is in accordance with paragraph 8(2)(j) or (k) of the Act; 110 years have elapsed following the birth of the individual to whom the information relates; or in cases where the information was obtained through the taking of a census or survey, 92 years have elapsed following the census or survey containing the information. The head of a government institution shall retain for a period of at least two years following the date on which a request for access to personal information is received by the institution under paragraph 8(2)(e) of the Act a copy of every request received; and a record of any information disclosed pursuant to such a request. A request for access to personal information under paragraph 12(1)(a) or (b) of the Act shall be made by completing an Access to Personal Information Request Form in respect of each personal information bank that is the subject of the request, or each class of personal information that is not contained in a personal information bank and forwarding the form to the appropriate officer. An individual who makes a request for access to personal information pursuant to subsection (1) shall provide adequate identification to the government institution before access to the information is provided and may be required to present himself in person. Where access to personal information is given to an individual by means of an opportunity to examine the information, the head of the institution shall provide reasonable facilities for the examination; and set a time for the examination that is convenient for the institution and the individual. The rights or actions provided for under the Act and these Regulations may be exercised or performed on behalf of a minor or an incompetent person by a person authorized by or pursuant to the law of Canada or a province to administer the affairs or estate of that person; on behalf of a deceased person by a person authorized by or pursuant to the law of Canada or a province to administer the estate of that person, but only for the purpose of such administration; and on behalf of any other individual by any person authorized in writing to do so by the individual. Where an individual who is given access under paragraph 12(1)(a) of the Act to personal information that has been used, is being used or is available for use for an administrative purpose believes there is an error or omission in the personal information, the individual may forward to the appropriate officer a Correction Request Form in respect of each personal information bank containing the information requesting correction of the personal information; requesting that any person or body to whom the personal information has been disclosed within the two years immediately preceding the date that the request for correction is received be notified of any correction made pursuant to paragraph (a); and requesting that any government institution to which the personal information has been disclosed within the two years immediately preceding the date that the request for correction is received be notified of any correction made pursuant to paragraph (a) and to make the correction on every copy of the personal information under its control. Where a correction to personal information is made pursuant to a request by an individual under paragraph (1)(a), the head of the government institution that has control of the personal information shall, within thirty days after the receipt by the appropriate officer of the Correction Request Form forwarded by the individual, notify the individual that the correction has been made; notify any person or body referred to in paragraph (1)(b) that the correction has been made; and notify the appropriate officer of any government institution referred to in paragraph (1)(c) that the correction has been made and that the officer is required to make the correction on every copy of the personal information under the control of the institution. Where the appropriate officer referred to in paragraph (2)(c) receives a notice referred to in that paragraph, the officer shall make the correction required by the notice. Where a request by an individual under paragraph (1)(a) to correct personal information is refused in whole or in part, the head of the government institution that has control of the personal information shall, within thirty days after the receipt by the appropriate officer of the Correction Request Form forwarded by the individual, attach a notation to the personal information reflecting that a correction was requested but was refused in whole or in part; notify the individual that the request for correction has been refused in whole or in part and set out the reasons for the refusal, the notation under paragraph (a) has been attached to the personal information, and the individual has the right under the Act to make a complaint to the Privacy Commissioner; notify any person or body referred to in paragraph (1)(b) that the notation under paragraph (a) has been attached to the personal information; and notify the appropriate officer of any government institution referred to in paragraph (1)(c) that the notation under paragraph (a) has been attached to the personal information and that the officer is required to attach such a notation to every copy of the personal information under the control of the institution. Where the appropriate officer referred to in paragraph (4)(d) receives a notice referred to in that paragraph, the officer shall comply with that notice. The classes of investigations for the purpose of paragraph 22(3)(c) of the Act are the classes of investigations set out in Schedule V. Where an individual has requested personal information relating to the physical or mental health of the individual, the head of the government institution that has control of the information may authorize the disclosure of the information to a duly qualified medical practitioner or psychologist in order that the practitioner or psychologist may provide an opinion as to whether disclosure of the information would be contrary to the best interests of the individual. Personal information disclosed to a duly qualified medical practitioner or psychologist under subsection (1) shall not be disclosed by the duly qualified medical practitioner or psychologist to any other person, except to a duly qualified medical practitioner or psychologist for the purposes of the opinion referred to in subsection (1), without the consent of the individual to whom the information relates. An individual who is given access to personal information relating to his physical or mental health may be required by the head of the government institution that has control of the information to examine the information in person and in the presence of a duly qualified medical practitioner or psychologist so that the practitioner or psychologist may explain or clarify the information to the individual. Canada Council for the Arts Canadian Institute for International Peace and Security Health Services and Promotion Branch, Department of National Health and Welfare Medical Research Council National Museums of Canada Natural Sciences and Engineering Research Council Social Sciences and Humanities Research Council Social Services Branch, Department of National Health and Welfare [Repealed, SOR/2018-39, s. 3] [Repealed, SOR/2010-146, s. 4] Boards of Inquiry, Department of National Defence Office of Controlled Substances, Healthy Environments and Consumer Safety Branch, Department of Health [Revoked, SOR/85-965, s. 1] [Repealed, SOR/2013-115, s. 2] Canadian Forces Military Police Canadian Forces National Counter-Intelligence Unit Canadian Security Intelligence Service Canadian Transportation Accident Investigation and Safety Board [Repealed, SOR/2013-115, s. 3] Clemency and Record Suspension Division, Parole Board of Canada Collections Directorate, Collections and Verification Branch, Canada Revenue Agency Conservation and Protection Directorate, Department of Fisheries and Oceans Criminal Investigations Directorate, International, Large Business and Investigations Branch, Canada Revenue Agency Integrity Operations Directorate, Integrity Services Branch, Department of Employment and Social Development [Repealed, SOR/2013-115, s. 4] Inland Enforcement Division, Canada Border Services Agency Intelligence and Targeting Operations Directorate, Canada Border Services Agency International and Large Business Directorate, International, Large Business and Investigations Branch, Canada Revenue Agency Enforcement Directorate, Office of the Commissioner of Canada Elections Law Enforcement Branch, Parks Canada Agency Non-Filer Programs Division, Debt Management Compliance Directorate, Collections and Verification Branch, Canada Revenue Agency Personnel Security Service, Department of Foreign Affairs, Trade and Development Preventive Security and Intelligence Branch, Correctional Service of Canada Review and Analysis Division, Charities Directorate, Legislative Policy and Regulatory Affairs Branch, Canada Revenue Agency Royal Canadian Mounted Police Security Intelligence Review Committee Security and Investigative Services, Canada Post Corporation Passport Entitlement and Investigations Division, Department of Citizenship and Immigration Criminal Investigations Division, Canada Border Services Agency Scientific Research and Experimental Development Directorate, Domestic Compliance Programs Branch, Canada Revenue Agency Small and Medium Enterprises Directorate, Domestic Compliance Programs Branch, Canada Revenue Agency Trust Accounts Programs Division, Debt Management Compliance Directorate, Collections and Verification Branch, Canada Revenue Agency [Repealed, SOR/2013-115, s. 9] Director of Investigation and Research, Department of Consumer and Corporate Affairs [Repealed, SOR/2018-39, s. 10] [Repealed, SOR/2013-115, s. 11] Directorate of Security, Department of National Defence [Repealed, SOR/2013-115, s. 13] Investigations by a Fact Finding Board established by the Department of Transport to investigate air traffic control where it has been alleged that due to a system deficiency flight safety may have been jeopardized; or less than the minimum required separation between aircraft may have existed. Investigations by a Flight Service Station Review Committee established by the Department of Transport to investigate reported occurrences relating to aviation safety where procedures or action or a lack thereof, systems failure, or other causes have brought the reliability of a Flight Service Station or the Flight Service Station System into question. Canadian Forces flight safety accident investigations other than those conducted in the form of a board of inquiry or summary investigation under the National Defence Act. Investigations by or under the authority of the Canadian Forces Fire Marshall for the purpose of determining the cause of a fire, other than those conducted in the form of a board of inquiry or summary investigation under the National Defence Act. Investigations by an investigative body set out in Schedule IV for the purpose of reviewing or updating a security clearance referred to in paragraph 23(a) or (b) of the Act that was granted to an individual. Investigation by an investigative body set out in Schedule IV for the purpose of granting, reviewing or updating a security clearance required by an international organization established by the governments of states or any institution of such an organization. Investigations by the Special Inquiries Unit of the Inspector General’s Branch of the Correctional Service of Canada.