Information contained in this publication or product may be used and reproduced, in part or in whole, and by any means, for personal or public non-commercial purposes, without charge or further permission, unless otherwise specified, provided that you do the following:

• exercise due diligence in ensuring the accuracy of the materials reproduced
• indicate both the complete title of the materials reproduced, as well as the author organization
• indicate that the reproduction is a copy of an official work published by the Government of Canada and that the reproduction has not been produced in affiliation with or with the endorsement of the Government of Canada

Commercial reproduction and distribution is prohibited, except with written permission from Public Services and Procurement Canada (PSPC). For more information, please contact PSPC at questions@tpsgc-pwgsc.gc.ca.

The official symbols of the Government of Canada, including the Canada wordmark and flag symbol may not be reproduced, whether for commercial or non-commercial purposes.

© Her Majesty the Queen in Right of Canada, represented by the Minister of Public Services and Procurement, 2020.

Aussi disponible en français.

ISSN 2562-623X

On this page

• Introduction
• Purpose of the acts
  • Access to Information Act
  • Privacy Act
• About Public Services and Procurement Canada
• Delegation of authority
• Organizational structure
• Performance for 2019 to 2020
  • Requests received
  • Pages reviewed
  • Sources of requests under the Access to Information Act
  • Informal access requests under the Access to Information Act
  • Exemptions
  • Exclusions
  • Disclosure of personal information under subsection 8(2)
  • Consultations
  • Extensions
  • Completion times
  • Fees
  • Disposition
  • Impact of COVID-19
• Complaints and audits
• Monitoring compliance
• Appeal to the Federal Court
• Privacy impact assessments
• Material privacy breaches
• Initiatives
• Policies, guidelines and procedures
• Training and awareness
• Annex A: Delegation of authorities charts for the Access to Information Act and the Privacy Act
• Annex B: Statistical report on the Access to Information Act
• Annex C: Statistical report on the Privacy Act
• Annex D: 2019 to 2020 Supplemental statistical report on requests affected by COVID-19 measures

Introduction

Public Services and Procurement Canada is pleased to present to Parliament its annual report on the administration of the Access to Information Act (ATIA) and the Privacy Act (PA).This integrated report describes the activities that support compliance with both acts for the fiscal year commencing April 1, 2019 and ending March 31, 2020.

Section 94 of the Access to Information Act, section 72 of the Privacy Act and section 20 of the Service Fees Act require that the head of every federal government institution submit an annual report to Parliament on the administration of the Access to Information Act and the Privacy Act during the fiscal year.

In the spirit of efficiency, ease of access and continuous improvement, PSPC is responding to this obligation by submitting an integrated annual report.

Purpose of the acts

Access to Information Act

The purpose of the Access to Information Act is to enhance the accountability and transparency of federal institutions in order to promote an open and democratic society and to enable public debate on the conduct of those institutions. In furtherance of that purpose, part 1 extends the present laws of Canada to provide a right of access to information in records under the control of a government institution in accordance with the principles that government information should be available to the public, that necessary exceptions to the right of access should be limited and specific, and that decisions on the disclosure of government information should be reviewed independently of government, and part 2 sets out requirements for the proactive publication of information.

Privacy Act

The purpose of the Privacy Act is to extend the present laws of Canada that protect the privacy of individuals with respect to personal information about themselves held by a government institution and that provide individuals with a right of access to that information. The Privacy Act protects an individual's privacy by preventing others from having unlawful access to personal information. It also grants an individual specific rights regarding the collection, use and disclosure of this information.

About Public Services and Procurement Canada

Public Services and Procurement Canada, formerly Public Works and Government Services Canada, derives its mandate from the Department of Public Works and Government Services Act of 1996, which established the department as a common service provider. As such, the department plays an important role in the daily operations of the Government of Canada as a key provider of services for federal departments and agencies. The department supports others in the achievement of their mandated objectives as their central purchasing agent, linguistic authority, real property manager, treasurer, accountant, integrity adviser, and pay and pension administrator.

Headquartered in the National Capital Region, PSPC has regional offices in Alberta, British Columbia, Nova Scotia, Ontario, Quebec, as well as in Washington, DC, United States, and Koblenz, Germany.

Delegation of authority

Pursuant to section 95(1) of the Access to Information Act and section 73(1) of the Privacy Act, the Minister of Public Services and Procurement has delegated the power, duties and functions of the administration of the acts to the Access to Information and Privacy (ATIP) director and managers (with the exception of paragraph 8(2)(m) of the Privacy Act). Certain administrative functions are also delegated to ATIP managers, team leaders and senior analysts to accelerate request processing.

The new PSPC delegation instrument was signed on August 26, 2019, with a separate matrix for ATIP delegation. An excerpt of the new delegation of authorities approved by the minister, pertaining to delegation under the acts is attached as Annex A: Delegation of authorities charts for the Access to Information Act and Privacy Act.

Organizational structure

The Access to Information and Privacy (ATIP) Directorate is responsible for the administration of the Access to Information Act and the Privacy Act within PSPC. The ATIP director acts as the department's ATIP coordinator. The directorate is overseen by the Director General of the Corporate Secretariat and Accessibility Sector (CSAS), who is also the department's Chief Privacy Officer (CPO).

In the 2019 to 2020 fiscal year, 54.59 full-time equivalent (FTE) employees administered the acts with the support of consultant services composed of 9.93 FTEs and casual employees composed of 3.57 FTEs, for a total complement of 68.09 FTEs.

Access to Information and Privacy reporting structure at Public Services and Procurement Canada

Text version

Chart summary

This organizational chart displays a hierarchy beginning with the ATIP coordinator of PSPC at the top. Directly below the ATIP coordinator are 4 units who report to the coordinator:

• the administration team carries out administrative functions for the ATIP directorate, including scanning of requests, indexing documents and ensuring the maintenance of ATIP software
• the operations team processes requests received under the Access to Information Act and the Privacy Act, and liaises with the offices of the Information and Privacy commissioners to resolve complaints
• the privacy management team advises and supports the department in the management of privacy risk, ensuring compliance with privacy legislation and related policy instruments
• the governance, policy and outreach team develops ATIP policies and procedures, provides advice, is responsible for proactive publications, delivers training and promotes awareness

Below these units there is another level for ATIP liaison officers, who coordinate the retrieval, review and submission of information held by their branch or region in response to ATIP requests.

The Access to Information Act and Privacy Act now allow for the provision of services by a government institution to another government institution that is presided over by the same minister. In fiscal year 2019 to 2020, PSPC did not have any such service agreement under section 96 of the Access to Information Act and section 73.1 of the Privacy Act.

Performance for 2019 to 2020

Requests received

Access to information requests received and completed

Text version

Chart summary: Access to information requests received and completed

• 2015 to 2016: 863 requests received, 886 requests completed
• 2016 to 2017: 1,295 requests received, 1,163 requests completed
• 2017 to 2018: 1,202 requests received, 969 requests completed
• 2018 to 2019: 1,144 requests received, 1,178 requests completed
• 2019 to 2020: 628 requests received, 827 requests completed

The department received a total of 628 requests pursuant to the Access to Information Act in the 2019 to 2020 reporting period, which represents a decrease of 45% compared to the previous year. The total number of requests received in this reporting period has been the lowest volume in the last 5 years. This is mainly due to a decrease in requests received regarding the Phoenix pay system and coincides with the implementation of proactive disclosure. The compliance rate was 62.5% for the reporting period, due to the fact that PSPC focused efforts on the reduction of its backlog by dedicating resources to the processing of late files. Of all closed access requests, 28% were from the backlog of requests accumulated throughout the years.

The majority of the access to information requests received by the department during 2019 to 2020 related to contracts and briefing notes on various topics. Of the 827 files closed during the reporting period, 79 files related to the topic of defence and marine procurement. Given the nature of the information they contain, these files are generally voluminous, highly technical, sensitive and extremely complex. The ATIP Directorate dedicates a team of knowledgeable and experienced employees to the processing of these requests.

Privacy requests received and completed

Text version

Chart summary: Privacy requests received and completed

• 2015 to 2016: 255 requests received, 241 requests completed
• 2016 to 2017: 485 requests received, 245 requests completed
• 2017 to 2018: 583 requests received, 685 requests completed
• 2018 to 2019: 559 requests received, 570 requests completed
• 2019 to 2020: 495 requests received, 472 requests completed

PSPC received a total of 495 privacy requests in the 2019 to 2020 reporting period, which represents a decrease of 11% from the previous year. The overall compliance rate for privacy requests was 92% for the reporting period, a significant increase from the 77% compliance rate from the previous reporting period. This is due to a decreased number of requests received and the successful implementation of an electronic transfer of records from regions. The requests were mainly related to pension and pay files, labour relations matters, employment, staffing and security records.

Pages reviewed

Text version

Table 1: Chart summary: Pages reviewed

Fiscal year	Pages reviewed for requests under the Access to Information Act	Pages reviewed for requests under the Privacy Act
2015 to 2016	215,000	41,000
2016 to 2017	241,000	103,000
2017 to 2018	210,000	257,000
2018 to 2019	225,000	271,000
2019 to 2020	466,000	147,000

In 2019 to 2020, PSPC reviewed 465,971 pages for requests received under the Access to Information Act, which represents a 107% increase from the previous fiscal year. During the reporting period, PSPC reviewed 147,379 pages for requests received under the Privacy Act, which represents a 46% decrease from the previous reporting period.

As of April 1, 2019, the department's backlog related to the Access to Information Act consisted of 343 requests. In 2019 to 2020, 234 of these requests were closed representing 367,435 pages reviewed. The department also initiated the management of a smaller backlog of 6 requests pursuant to the Privacy Act, which represents over 295,000 pages to be reviewed. The department has worked closely with the Office of the Information Commissioner of Canada (OIC) and the Office of the Privacy Commissioner of Canada (OPC) in addressing these backlogs.

Sources of requests under the Access to Information Act

As with the previous fiscal year, during the 2019 to 2020 reporting period PSPC received the majority (78.82%) of its requests under the Access to Information Act from 3 sources: members of the public (34%), the media (22%) and private sector businesses (22%). 2019 to 2020 saw a decrease in the percentage of requesters who declined to identify themselves from the previous year.

Sources of requests

Text version

Chart summary: Sources of requests

• Media: 141 requests (22.45%)
• Public: 215 requests (34.24%)
• Business: 139 requests (22.13%)
• Declined to Identify: 93 requests (14.81%)
• Organization: 26 requests (4.14%)
• Academia: 14 requests (2.23%)

Informal access requests under the Access to Information Act

PSPC publishes summaries of completed access to information requests, pertaining to records that do not contain personal or third party information on the Open Government Portal. Members of the public can then submit informal requests for a copy of previously released information without having to pay the application fee.

In fiscal year 2019 to 2020, PSPC processed 331 informal access to information requests, which represents an increase of 6% from the 311 informal requests processed during the 2018 to 2019 reporting period.

Exemptions

Access to Information Act

The department invoked exemptions on 484 requests (59%), and all information was disclosed in 135 requests (16%). The remaining 208 (25%) were either abandoned, transferred or no records existed.

The majority of exemptions invoked by PSPC fell under 3 sections of the Access to Information Act:

• section 19(1), which protects personal information, was used in 313 files (50%)
• paragraph 20(1)(b), which protects confidential financial, commercial, scientific or technical information belonging to a third party, was used in 144 files (23%)
• paragraph 20(1)(c), which protects information the disclosure of which could result in material financial loss or prejudice the competitive position of a third party, was used in 195 files (31%)

Of note, more than one section (exemption) can be applied to a specific request.

Privacy Act

The department invoked exemptions on 157 requests (33%), and all information was disclosed in 201 requests (43%). The remaining 114 requests (24%) were either abandoned or no records existed.

The majority of exemptions invoked by PSPC fell under 3 sections of the Privacy Act:

• section 26, which protects personal information, was used in 143 files (33%)
• paragraph 22(1)(b), which addresses law enforcement and criminal investigations, was used in 7 files (1%)
• section 27, which protects solicitor-client privilege information, was used in 5 files (1%)

Of note, more than one section (exemption) can be applied to a specific request.

Exclusions

The Access to Information Act and the Privacy Act do not apply to or exclude certain types of information, specifically records that are already available to the public (section 68 of the Access to Information Act) and confidence of the Queen's Privy Council (section 69 of the Access to Information Act and section 70 of the Privacy Act).

Overall in the 2019 to 2020 reporting period, PSPC applied exclusions to records requested under the Access to Information Act on 5 occasions pursuant to section 68, and cited section 69 in 204 exclusions.

No exclusions were applied under the Privacy Act during the reporting period.

Disclosure of personal information under subsection 8(2)

In accordance with subsection 8(2) of the Privacy Act, under certain circumstances, a government institution may disclose personal information under its control without the consent of the individual to whom the information relates.

Fourteen disclosures of personal information were made during the reporting period under the Privacy Act pursuant to paragraph 8(2)(e), releasing the information to investigative bodies regarding 14 individuals. There was no disclosure made under paragraph 8(2)(m)—public interest or benefit to individual—of the Privacy Act during fiscal year 2019 to 2020.

Consultations

PSPC responded to 390 consultations from other government institutions and organizations for records relating to the department's activities. These consultations totalled 23,733 pages, with 385 files (23,617 pages) relating to the Access to Information Act and 5 files (116 pages) relating to the Privacy Act.

A total of 93% of consultation files were responded to within 60 days against 46% for formal requests.

Of the 385 access to information consultations, 79 files (21%) were on the topic of defence with a higher level of sensitivity and complexity requiring more time and resources to review.

Extensions

Section 9 of the Access to Information Act permits the statutory time limits to be extended if consultations are necessary or if the request is for a larger volume of records, and if processing it within the original time limit would unreasonably interfere with the operations of the department.

PSPC invoked a total of 501 extensions during the 2019 to 2020 reporting period. Extensions were required in 227 instances in order to allow consultations with other government institutions. In 208 files, third party consultations were necessary and extensions taken accordingly. Extensions were required in 66 cases where the request necessitated a search through a large volume of records, which otherwise would have interfered with operations.

Section 15 of the Privacy Act permits the statutory time limits to be extended if consultations are necessary, if translation is required, or if the request is for a large volume of records and processing it within the original time limits would unreasonably interfere with the operations of the department.

PSPC invoked 40 extensions during the 2019 to 2020 reporting period. Of these, 31 were deemed necessary to allow the department to search for or through a large volume of records or to respond to the influx of records, which interfered with operations. A further 9 files required extensions to allow for consultations prior to responding. The department did not invoke any extensions for the purpose of translation.

Completion times

Access to information requests

Text version

Table 2: Chart summary: Access to information requests

Completion time	Access to information requests
Within 30 days	39.18%
31 to 60 days	7.86%
61 to 120 days	15.48%
121 days or more	37.48%

Privacy requests

Text version

Table 3: Chart summary: Privacy requests

Completion time	Privacy requests
Within 30 days	81.57%
31 to 60 days	12.50%
61 to 120 days	2.75%
121 days or more	3.18%

PSPC's overall compliance rate for the 2019 to 2020 reporting period was 62.5% for requests under the Access to Information Act and 91.7% for requests under the Privacy Act. These compliance rates represent all files that were completed either within the initial 30 days or within an extension period taken for reasons of volume or consultations.

The percentage of requests under the Access to Information Act completed within the initial 30 days was 39.18%. Given the nature of PSPC's mandate as a service provider and central purchasing agent, the department is often required to perform consultations in order to seek input from other institutions and complete all required actions on a file. Therefore, a large number of PSPC's access to information files require extensions beyond the 30-day legislative period.

The percentage of requests under the Privacy Act completed within the initial 30 days was 81.57%, which represents an increase of 12.97% from fiscal year 2018 to 2019. This was achieved by increasing resources to process and support privacy requests.

Fees

The Access to Information Act requires a $5 application fee to make a request. Based on requests completed during 2019 to 2020, PSPC collected $2,405 in application fees. In accordance with the Interim Directive on the Administration of the Access to Information Act, issued on May 5, 2016, and the changes to the Access to Information Act that came into force on June 21, 2019, PSPC waived all fees prescribed by the act and regulations, other than the $5 application fee set out in paragraph 7(1)(a) of the regulations. PSPC also waived or refunded a total of $735 in application fees. The total operating cost of the ATIP program at PSPC for fiscal year 2019 to 2020 was $6,312,033.

Disposition

Approximately 80% of all requests made pursuant to the Access to Information Act completed during the 2019 to 2020 reporting period were either disclosed in part (62.35%) or fully disclosed (18.02%). Additionally, 17.49% of requests were abandoned.

Access to information request disposition

Text version

Chart summary: Access to information request disposition

• All disclosed: 135 requests (18.02%)
• Disclosed in part: 467 requests (62.35%)
• Request abandoned: 131 requests (17.49%)
• All exempted/all excluded, neither confirmed nor denied: 16 requests (2.14%)

Approximately 82.68% of all requests made pursuant to the Privacy Act completed during the 2019 to 2020 reporting period were either disclosed in part (36.26%) or fully disclosed (46.42%). Additionally, 17.32% of requests were abandoned.

Privacy request disposition

Text version

Chart summary: Privacy request disposition

• All disclosed: 201 requests (46.42%)
• Disclosed in part: 157 requests (36.26%)
• Request abandoned: 75 requests (17.32%)
• All exempted/all excluded, neither confirmed nor denied: No request (0%)

Impact of COVID-19

Exceptional measures have been taken by PSPC to support the government's response to COVID-19. Concurrently, as with all other departments, PSPC employees were sent home in March 2020 for their safety and advised to work from home, whenever possible. Initially, due to network access challenges, this shift to remote work significantly limited PSPC's ability to process requests made under the Access to Information Act and the Privacy Act. Consequently, PSPC placed all access and privacy requests on hold until the situation stabilized, and the department fully resumed regular operations. As this report is for the period ending March 31, 2020, the mitigating measures developed and implemented by the ATIP Directorate to adapt to the pandemic will be presented in the 2020 to 2021 Annual Report.

The statistical report on requests affected by COVID-19 measures is attached as Annex D: 2019 to 2020 Supplemental Statistical Report on requests affected by COVID-19 measures.

Complaints and audits

Access to Information Act

During the 2019 to 2020 reporting period, PSPC was notified of 39 complaints received by the Office of the Information Commissioner of Canada. This represents 7.7% of all requests completed during this period. The majority of complaints were related to delays or to the exemptions or exclusions applied.

During the reporting period, the ATIP Directorate processed and closed 57 complaint investigations. Of these, 18 were deemed well founded, 14 were deemed not well founded and 11 were discontinued, while 14 were settled or resolved to the satisfaction of the requester.

During the 2019 to 2020 reporting period, no audits were undertaken under the Access to Information Act. PSPC has worked collaboratively with the OIC by holding regular meetings to ensure prompt resolution of issues on common files.

Privacy Act

During the 2019 to 2020 reporting period, the department was notified of 5 privacy complaints received by the Office of the Privacy Commissioner of Canada. The majority of complaints were related to delays and missing records. PSPC will proactively reach out to the OPC to ensure PSPC respects its obligations, manages complaints and addresses any issues or complaints that may be raised.

During the reporting period, the ATIP Directorate processed and closed 18 complaint investigations. Of these, 3 were deemed well founded, one was deemed not well founded and 14 were deemed settled and resolved.

During the 2019 to 2020 reporting period, no audits were undertaken under the Privacy Act.

Monitoring compliance

The ATIP Directorate provides a weekly "snapshot" report to senior executives that contains statistics on the number of requests received and processed, as well as the current compliance rate under the Access to Information Act. There is also a weekly summary report of upcoming requests soon to be disclosed under the act.

During the 2019 to 2020 reporting period, the ATIP Directorate produced quarterly dashboards intended to further support monitoring and increasing compliance within the department, including branch performance and complaints.

Appeal to the Federal Court

During the 2019 to 2020 fiscal year, one new application was filed with the Federal Court of Canada against Public Services and Procurement Canada pursuant to section 44 of the Access to Information Act. Section 44 allows a third party, to whom the head of a government institution must give notice regarding the disclosure of a record, to apply to the Court for a review of the matter. This file is not concluded yet.

Privacy impact assessments

In the course of fulfilling its mandate as a service provider, PSPC collects, retains, uses and discloses personal information. The ATIP Directorate's Privacy Management Unit provides advice and guidance to program officials throughout the Privacy Impact Assessment (PIA) process for programs and activities, in accordance with the Treasury Board Interim Directive on Privacy Impact Assessments.

During the 2019 to 2020 fiscal year, PSPC did not complete any PIAs.

Summaries of all completed privacy impact assessments are posted on PSPC's Internet site.

Material privacy breaches

During the 2019 to 2020 fiscal year, PSPC reported 6 material privacy breaches to the OPC and the Treasury Board of Canada Secretariat (TBS). All 6 were appropriately managed in accordance with Treasury Board Guidelines for Privacy Breaches. A breach is deemed "material" if it involves sensitive personal information and/or could reasonably be expected to cause serious injury or harm to the individual, or involves a larger number of affected individuals.

Two breaches occurred from the erroneous mailing of tax forms.

One breach occurred from the erroneous mailing of an onboarding package.

One breach occurred when one individual's pay file was lost while being transported by a courier service.

A breach occurred when a box of T4A's was lost.

A breach occurred from the erroneous mailing of an Excel spreadsheet sent to the chief financial officers and heads of human resources of 62 departments.

PSPC makes use of a privacy breach protocol, first established in 2015 and updated in 2017, to guide the department's responses to privacy breaches, including communications with affected individuals and implementation of mitigation measures. This protocol is currently under review with the intention of creating new associated tools. Furthermore, PSPC has implemented the use of a new internal tool, the privacy breach risk matrix, in order to consistently determine materiality and risk of injury to the individual.

Initiatives

To improve internal processes and client service in its administration of the Access to Information Act and the Privacy Act, PSPC undertook the following initiatives during the 2019 to 2020 fiscal year:

• implemented the Protected B parallel environment:
  • this network has been certified and accredited to communicate sensitive data up to and including Protected B level
  • this initiative has enabled the ATIP Directorate users to work on access to information files and consultation files with other departments both from the ATIP office and from their homes
• prepared an environmental scan for phase I of the Transparency and Openness Strategy for PSPC:
  • this environmental scan has drawn together research into transparency and openness at the departmental, federal, provincial, and international levels to identify innovative approaches to transparency and openness, which should be further explored in phase II (fiscal year 2020 to 2021)
  • this strategy is intended to complement existing departmental open data strategies as well as the new requirements that were set out in Bill C-58
• implemented a strategy to reduce the backlog by:
  • reorganizing access to information files
  • changing the prioritization of active files
  • dedicating resources to the closure of late files
• implemented a privacy management tracking system to:
  • ensure that all types of requests including privacy breaches, are actioned in a timely matter and modified the existing privacy breach report that is provided weekly to the Privacy Oversight Committee to include more details and facilitate the understanding of the information included
• centralized the process and the management of material privacy breaches by:
  • having the ATIP Directorate act as a single window, that decision was taken by the Chief Privacy Officer in order to obtain an efficient management of files and reduce processing delays

Policies, guidelines and procedures

Proactive publication

Bill C-58, an act to amend the Access to Information Act and the Privacy Act and to make consequential amendments to other acts received royal assent and came into force on June 21, 2019. The most significant change brought by Bill C-58 was to amend the Access to Information Act to include legislative requirements for mandatory proactive publication of certain records produced by government institutions.

PSPC's ATIP Directorate was identified as the coordinator for the implementation of Bill C-58 within the department.

In fiscal year 2019 to 2020, PSPC undertook the following activities aligned to the legislative requirements for proactive publication under part 2 of the Access to Information Act:

• the departmental Bill C-58 Working Group, originally established in the summer of 2018, continued to meet regularly to prepare for and guide C-58 implementation. The working group is composed of representatives from the ATIP Directorate as well as various key enabling functions, content coordinators and content creators from across the department
• new templates and guidance documents were developed to support content creation with proactive publication, accessibility, and disclosure in mind in order to guide PSPC employees in the preparation of records in an easily reviewable and accessible manner in both official languages
• a proactive publication "sherpa" (a role held by the ATIP Directorate) was established to help support collaboration between diverse centres of expertise necessary to support the implementation of proactive publication
• as a result of the activities outlined above, PSPC successfully produced the following proactive publications under part 2 of the Access to Information Act during the 2019 to 2020 fiscal year:
  • 1 package of briefing materials prepared by a government institution following the appointment of the minister, for the purpose of enabling the minister to assume the powers, duties and functions of her office pursuant to paragraph 74(a)
  • 1 package of question period notes prepared by a government institution for the minister and that were in use on the last sitting day of the House of Commons in December 2019 pursuant to paragraph 74(c)
  • 4 quarterly reports of contracts over $10,000 pursuant to sections 77 and 86
  • 4 quarterly reports of position reclassifications pursuant to section 85
  • 4 quarterly reports of grants and contributions over $25,000 pursuant to section 87
  • 5 reports tabled in Parliament pursuant to section 84
  • 10 monthly lists of memoranda prepared by a government institution for the minister or deputy ministers in the previous month pursuant to paragraphs 74(b) and 88(b)
  • 10 monthly reports of travel and hospitality expenses incurred by the minister, ministerial advisers and staff, senior officers or employees pursuant to sections 75, 76, 82 and 83

Training and awareness

Through delivery of training and awareness activities, PSPC continues to work toward developing an institution-wide familiarity with the Access to Information Act and the Privacy Act and the obligations that arise from these 2 pieces of legislation.

During the 2019 to 2020 reporting period, the ATIP Directorate added Bill C-58 awareness sessions and continued the foundational training, both in person and online.

PSPC delivered the following training or sessions:

• 8 Bill C-58 awareness sessions, reaching 211 employees. These information sessions had as their goal, to provide employees with an overview of Bill C-58, and explain how it changes the way PSPC employees should work to respond to new requirements
• 44 classroom training sessions on the "Access to Information and Privacy Fundamentals" course to PSPC employees including 7 sessions in the Atlantic Region reaching 131 in the East Coast and 744 people in the National Capital Region for a total of 875 people
• 1 personalized ATIP fundamentals course with a privacy focus was given to 354 PSPC employees working at the Phoenix Call Centre (pay administration) and in the MyHR resource team. This course was made mandatory by these teams to ensure employees (client service officers, human resources (HR) advisors and administrative assistants) dealing with personal information are aware of the key components of the law including privacy basics and sharing and communicating personal information to avoid privacy breaches

Data Privacy Day

Data Privacy Day is an international effort held annually on January 28 to create awareness about the importance of respecting privacy, safeguarding personal data and enabling trust. It commemorates the signing of the first legally binding international treaty dealing with privacy and data protection in 1981.

The ATIP Directorate marked Data Privacy Day 2020 by organizing an event that included engaging speakers and a panel discussion. This event was organized in cooperation with departmental experts (PSPC, OIC and the TBS) in information management, inviting employees to learn about privacy pertaining to PSPC, as well as why it is important to protect our own information, along with best practices to protect the personal information that employees handle every day.

Right to Know Week

International Right to Know Day originated at an international meeting of access to information advocates in 2002. Now celebrated annually on September 28, by approximately 40 countries and 60 non-governmental organizations, it has been expanded into a week-long event in Canada with the purpose of raising awareness about the right of individuals to access government information while promoting freedom of information as essential to both democracy and good governance.

This year's Right to Know Week took place from September 23 to September 29, 2019. PSPC's ATIP coordinator organized a kiosk on September 26 to highlight the importance of the right of access in Canadian society and challenges faced within the federal ATIP industry. PSPC's employees had the opportunity to raise questions about ATIP-related subjects and learn tips on how to find resources on the Canada.ca website in order to make an access to information request.

Annex A: Delegation of authorities charts for the Access to Information Act and Privacy Act

Table 4: Access to Information Act and its regulations

Position titles	Access to Information Act	Access to Information Regulations
Department minister and senior executives
Minister	Full	Full
Deputy Minister	Full	Full
Department Policy, Planning and Communications Branch
Assistant Deputy Minister, Policy, Planning and Communications Branch	Full	Full
Director General	Full	Full
Director	Full	Full
Manager	Restrictedtable 4 note 1	Full
Supervisor/senior advisor	Restrictedtable 4 note 2	Restrictedtable 4 note 3
Officer	Restrictedtable 4 note 4	Not applicable (n/a)
Table 4 Notes Table 4 Note 1 Managers may exercise full authorities delegated under the Access to Information Act with the exception of section 6.1. Return to table 4 note 1 referrer Table 4 Note 2 Supervisors/senior advisors may fully exercise only the following sections of the Access to Information Act: 4(2.1), 7, 8(1), 9, 11(2), 19, 20, 23, 24(1), 25, 27(1), 27(4), 28(1)(b), 28(2), 28(4), 33. Return to table 4 note 2 referrer Table 4 Note 3 Supervisors/senior advisors may fully exercise only sections 6(1) and 8 of the Access to Information Regulations with the exception of section 8.1 Return to table 4 note 3 referrer Table 4 Note 4 Officers may fully exercise only the following sections of the Access to Information Act: 4(2.1), 9, 27(1), 27(4). Return to table 4 note 4 referrer

Table 5: Privacy Act and its regulations

Position titles	Privacy Act	Privacy Regulations
Department minister and senior executives
Minister	Full	Full
Deputy Minister	Full	Full
Department Policy, Planning and Communications Branch
Assistant Deputy Minister, Policy, Planning and Communications Branch	Full	Full
Director General	Full	Full
Director	Full	Full
Manager	Restrictedtable 5 note 1	Full
Supervisor/senior advisor	Restrictedtable 5 note 2	Restrictedtable 5 note 3
Officer	Restrictedtable 5 note 4	n/a
Table 5 Notes Table 5 Note 1 Managers may exercise full authorities delegated under the Privacy Act with the exception of paragraph 8(2)(m). Return to table 5 note 1 referrer Table 5 Note 2 Supervisors/senior advisors may fully exercise only the following sections of the Privacy Act: 14, 15, 26 and 27. Return to table 5 note 2 referrer Table 5 Note 3 Supervisors/senior advisors may fully exercise only section 9 of the Privacy Regulations. Return to table 5 note 3 referrer Table 5 Note 4 Officers may fully exercise only section 15 of the Privacy Act. Return to table 5 note 4 referrer

Annex B: Statistical report on the Access to Information Act

Name of institution: Public Services and Procurement Canada.

Reporting period: April 1, 2019, to March 31, 2020.

Section 1: Requests under the Access to Information Act

Table 6: 1.1 Number of requests

Type	Number of requests
Received during reporting period	628
Outstanding from previous reporting period	508
Total	1,136
Closed during reporting period	827
Carried over to next reporting period	309

Table 7: 1.2 Sources of requests

Source	Number of requests
Media	141
Academia	14
Business (private sector)	139
Organization	26
Public	215
Decline to identify	93
Total	628

Table 8: 1.3 Informal requests: Completion time

1 to 15 days	16 to 30 days	31 to 60 days	61 to 120 days	121 to 180 days	181 to 365 days	More than 365 days	Total
66	102	105	58	0	0	0	331

Section 2: Decline to act on vexatious, made in bad faith or abuse of right requests

Table 9: 2.1: Type and number of requests

Type	Number of requests
Outstanding from previous reporting period	0
Sent during reporting period	0
Total	0
Approved by the information commissioner during reporting period	0
Declined by the information commissioner during reporting period	0
Carried over to the next reporting period	0

Section 3: Requests closed during the reporting period

3.1 Disposition and completion time

Table 10: 3.1 Disposition and completion time of requests under the Access to Information Act

Disposition of requests	Completion time
	1 to 15 days	16 to 30 days	31 to 60 days	61 to 120 days	121 to 180 days	181 to 365 days	More than 365 days	Total
All disclosed	10	74	25	18	1	2	5	135
Disclosed in part	11	66	32	101	51	58	149	468
All exempted	1	5	2	1	0	0	3	12
All excluded	0	2	0	1	0	1	0	4
No records exist	27	39	3	2	0	0	0	71
Request transferred	5	1	0	0	0	0	0	6
Request abandoned	71	12	3	5	1	2	37	131
Neither confirmed nor denied	0	0	0	0	0	0	0	0
Decline to act with the approval of the information commissioner	0	0	0	0	0	0	0	0
Total	125	199	65	128	53	63	194	827

3.2 Exemptions

Table 11: 3.2 Exemptions applied pursuant to the Access to Information Act

Section	Number of requests
13(1)(a)	11
13(1)(b)	1
13(1)(c)	0
13(1)(d)	1
13(1)(e)	0
14	0
14(a)	2
14(b)	0
15(1)	37
15(1)—International Affairs	5
15(1)—Defence	13
15(1)—Subversive activities	1
16(1)(a)(i)	0
16(1)(a)(ii)	0
16(1)(a)(iii)	0
16(1)(b)	0
16(1)(c)	5
16(1)(d)	0
16(2)	19
16(2)(a)	0
16(2)(b)	0
16(2)(c)	47
16(3)	0
16.1(1)(a)	0
16.1(1)(b)	0
16.1(1)(c)	0
16.1(1)(d)	0
16.2(1)	0
16.3	0
16.31	0
16.4(1)(a)	0
16.4(1)(b)	0
16.5	0
16.6	0
17	0
18(a)	3
18(b)	56
18(c)	0
18(d)	11
18.1(1)(a)	3
18.1(1)(b)	0
18.1(1)(c)	0
18.1(1)(d)	0
19(1)	313
20(1)(a)	1
20(1)(b)	144
20(1)(b.1)	0
20(1)(c)	195
20(1)(d)	18
20.1	0
20.2	0
20.4	0
21(1)(a)	62
21(1)(b)	95
21(1)(c)	36
21(1)(d)	10
22	5
22.1(1)	0
23	88
23.1	0
24(1)	37
26	1

3.3 Exclusions

Table 12: 3.3 Exclusions applied pursuant to the Access to Information Act

Section	Number of requests
68(a)	5
68(b)	0
68(c)	0
68.1	0
68.2(a)	0
68.2(b)	0
69(1)	28
69(1)(a)	12
69(1)(b)	0
69(1)(c)	8
69(1)(d)	4
69(1)(e)	15
69(1)(f)	1
69(1)(g) re (a)	47
69(1)(g) re (b)	0
69(1)(g) re (c)	41
69(1)(g) re (d)	15
69(1)(g) re (e)	31
69(1)(g) re (f)	2
69.1(1)	0

3.4 Format of information released

Table 13: 3.4. Format of information released under the Access to Information Act

Paper	Electronic	Other
92	511	0

3.5 Complexity

Table 14: 3.5.1 Relevant pages processed and disclosed under the Access to Information Act

Number of pages processed	Number of pages disclosed	Number of requests
465,971	203,811	750

Table 15: 3.5.2 Relevant pages processed and disclosed by size of requests under the Access to Information Act

Disposition	Less than 100 pages processed		101 to 500 pages processed		501 to 1000 pages processed		1001 to 5000 pages processed		More than 5000 pages processed
	Number of request	Pages disclosed	Number of request	Pages disclosed	Number of request	Pages disclosed	Number of request	Pages disclosed	Number of request	Pages disclosed
All disclosed	115	1,975	14	3,052	2	571	3	4,251	1	109
Disclosed in part	211	5,323	138	26,557	46	19,640	58	86,215	15	56,118
All exempted	8	0	2	0	0	0	1	0	1	0
All excluded	4	0	0	0	0	0	0	0	0	0
Request abandoned	130	0	1	0	0	0	0	0	0	0
Neither confirmed nor denied	0	0	0	0	0	0	0	0	0	0
Total	468	7,298	155	29,609	48	20,211	62	90,466	17	56,227

Table 16: 3.5.3 Other complexities for access to information requests

Disposition	Consultation required	Assessment of fees	Legal advice sought	Other	Total
All disclosed	40	0	0	54	94
Disclosed in part	341	0	0	243	584
All exempted	6	0	0	1	7
All excluded	2	0	0	2	4
Request abandoned	25	0	0	14	39
Neither confirmed nor denied	0	0	0	0	0
Total	414	0	0	314	728

3.6 Closed requests

Table 17: 3.6.1 Number of requests closed within legislated timelines under the Access to Information Act

Type	Requests closed within legislated timelines
Number of requests closed within legislated timelines	517
Percentage of requests closed within legislated timelines (%)	62.5

3.7 Deemed refusals

Table 18: 3.7.1 Reasons for not meeting legislated timelines under the Access to Information Act

Number of requests closed past the statutory deadline	Principal reason
	Workload	External consultation	Internal consultation	Other
310	176	61	7	66

Table 19: 3.7.2 Requests closed beyond legislated timelines under the Access to Information Act (including any extension taken)

Number of days past deadline	Number of requests past deadline where no extension was taken	Number of requests past deadline where an extension was taken	Total
1 to 15 days	6	8	14
16 to 30 days	7	7	14
31 to 60 days	9	9	18
61 to 120 days	12	13	25
121 to 180 days	11	13	24
181 to 365 days	18	40	58
More than 365 days	28	129	157
Total	91	219	310

3.8 Requests for translation

Table 20: 3.8.1 Requests for translation under the Access to Information Act

Translation requests	Accepted	Refused	Total
English to French	0	0	0
French to English	0	0	0
Total	0	0	0

Section 4: Extensions

Table 21: 4.1 Reasons for extensions and disposition of requests

Disposition of requests where an extension was taken	9(1)(a) Interference with operations	9(1)(b) Consultation		9(1)(c) Third-party notice
		Section 69	Other
All disclosed	1	0	19	13
Disclosed in part	54	35	145	174
All exempted	1	1	4	2
All excluded	0	1	1	0
No records exist	0	0	1	1
Request abandoned	10	4	16	18
Total	66	41	186	208

Table 22: 4.2 Length of extensions

Length of extensions	9(1)(a) Interference with operations	9(1)(b) Consultation		9(1)(c) Third-party notice
		Section 69	Other
30 days or less	22	0	26	5
31 to 60 days	17	4	50	94
61 to 120 days	14	26	62	68
121 to 180 days	7	11	28	24
181 to 365 days	4	0	18	13
More than 365 days	2	0	2	4
Total	66	41	186	208

Section 5: Fees

Table 23: 5.1 Fees collected and waived or refunded

Fee type	Fee collected		Fee waived or refunded
	Number of requests	Amount	Number of requests	Amount
Application	481	$2,405	147	$735
Other Fees	0	$0	0	$0
Total	481	$2,405	147	$735

Section 6: Consultations received from other institutions and organizations

Table 24: 6.1 Consultations received from other Government of Canada institutions and organizations

Consultations	Other Government of Canada institutions	Number of pages to review	Other organizations	Number of pages to review
Received during reporting period	370	22839	12	473
Outstanding from the previous reporting period	34	834	2	55
Total	404	23673	14	528
Closed during the reporting period	372	23199	13	418
Pending at the end of the reporting period	32	474	1	110

Table 25: 6.2 Recommendations and completion time for consultations received from other Government of Canada institutions

Recommendation	Number of days required to complete consultation requests
	1 to 15 days	16 to 30 days	31 to 60 days	61 to 120 days	121 to 180 days	181 to 365 days	More than 365 days	Total
Disclose entirely	92	138	44	4	0	0	0	278
Disclose in part	5	11	26	9	5	2	2	60
Exempt entirely	0	1	0	0	0	0	0	1
Exclude entirely	0	0	0	0	0	0	0	0
Consult other institution	2	4	3	3	0	0	0	12
Other	13	6	1	0	1	0	0	21
Total	112	160	74	16	6	2	2	372

Table 26: 6.3 Recommendations and completion time for consultations received from other organizations

Recommendation	Number of days required to complete consultation requests
	1 to 15 days	16 to 30 days	31 to 60 days	61 to 120 days	121 to 180 days	181 to 365 days	More than 365 days	Total
Disclose entirely	4	7	0	0	0	0	0	11
Disclose in part	0	0	1	0	0	0	0	1
Exempt entirely	0	0	0	0	0	0	0	0
Exclude entirely	0	0	0	0	0	0	0	0
Consult other institution	0	0	0	0	0	0	0	0
Other	1	0	0	0	0	0	0	1
Total	5	7	1	0	0	0	0	13

Section 7: Completion time of consultations on cabinet confidences

Table 27: 7.1 Requests with Legal Services

Number of days	Fewer than 100 pages processed		101 to 500 pages processed		501 to 1000 pages processed		1001 to 5000 pages processed		More than 5000 pages processed
	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed
1 to 15	8	151	2	153	0	0	0	0	0	0
16 to 30	20	381	1	196	1	698	1	1,321	0	0
31 to 60	17	323	3	122	1	575	0	0	0	0
61 to 120	10	304	1	394	2	1,074	2	339	0	0
121 to 180	1	78	2	361	1	3	0	0	0	0
181 to 365	2	87	0	0	0	0	0	0	0	0
More than 365	3	14	0	0	0	0	0	0	0	0
Total	61	1,338	9	1,226	5	2,350	3	1,660	0	0

Table 28: 7.2 Requests with Privy Council Office

Number of days	Fewer Than 100 pages processed		101 to 500 pages processed		501 to 1000 pages processed		1001 to 5000 pages processed		More than 5000 pages processed
	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed
1 to 15	0	0	0	0	0	0	0	0	0	0
16 to 30	0	0	0	0	0	0	0	0	0	0
31 to 60	0	0	0	0	0	0	0	0	0	0
61 to 120	0	0	0	0	0	0	0	0	0	0
121 to 180	0	0	0	0	0	0	0	0	0	0
181 to 365	0	0	0	0	0	0	0	0	0	0
More than 365	0	0	0	0	0	0	0	0	0	0
Total	0	0	0	0	0	0	0	0	0	0

Section 8: Complaints and investigations

Table 29: 8.1: Number of complaints and investigation notices received

Section 32 Notice of intention to investigate	Subsection 30(5) Ceased to investigate	Section 35 Formal representations	Section 37 Reports of finding received	Section 37 Reports of finding containing recommendations issued by the Information Commissioner	Section 37 Reports of finding containing orders issued by the Information Commissioner
39	9	37	34	0	0

Section 9: Court actions

Table 30: 9.1 Court actions on complaints received before June 21, 2019 and on-going

Section 41 (before June 21, 2019)	Section 42	Section 44
0	0	1

Table 31: 9.2 Court actions on complaints received after June 21, 2019 and on-going
Section 41 (after June 21, 2019)

Complainant (1)	Institution (2)	Third Party (3)	Privacy Commissioner (4)	Total
0	0	0	0	0

Section 10: Resources related to the Access to Information Act

Table 32: 10.1 Costs

Expenditures	Amount
Salaries	$2,892,043
Overtime	$17,985
Goods and services: professional services contracts ($1,322,311) other ($321,339)	$1,643,650
Total	$4,553,678

Table 33: 10.2 Human resources

Resources	Person years dedicated to access to information activities
Full-time employees	37.21
Part-time and casual employees	1.89
Regional staff	0.00
Consultants and agency personnel	8.24
Students	0.00
Total	47.34

Annex C: Statistical report on the Privacy Act

Name of institution: Public Services and Procurement Canada.

Reporting period: April 1, 2019, to March 31, 2020.

Section 1: Requests under the Privacy Act

Table 34: 1.1 Number of requests

Type	Number of requests
Received during reporting period	495
Outstanding from previous reporting period	53
Total	548
Closed during reporting period	472
Carried over to next reporting period	76

Section 2: Requests closed during the reporting period

2.1 Disposition and completion time

Table 35: 2.1 Disposition and completion time of requests under the Privacy Act

Disposition of requests	Completion time
	1 to 15 days	16 to 30 days	31 to 60 days	61 to 120 days	121 to 180 days	181 to 365 days	More than 365 days	Total
All disclosed	17	150	32	1	0	1	0	201
Disclosed in part	12	93	27	12	4	6	3	157
All exempted	0	0	0	0	0	0	0	0
All excluded	0	0	0	0	0	0	0	0
No records exist	25	14	0	0	0	0	0	39
Request abandoned	70	4	0	0	0	1	0	75
Neither confirmed nor denied	0	0	0	0	0	0	0	0
Total	124	261	59	13	4	8	3	472

2.2 Exemptions

Table 36: 2.2 Exemptions applied pursuant to the Privacy Act

Section	Number of requests
18(2)	0
19(1)(a)	0
19(1)(b)	0
19(1)(c)	0
19(1)(d)	1
19(1)(e)	0
19(1)(f)	0
20	0
21	0
22(1)(a)(i)	0
22(1)(a)(ii)	0
22(1)(a)(iii)	0
22(1)(b)	7
22(1)(c)	0
22(2)	0
22.1	1
22.2	0
22.3	1
22.4	0
23(a)	0
23(b)	0
24(a)	0
24(b)	0
25	2
26	143
27	5
27.1	0
28	0

2.3 Exclusions

Table 37: 2.3 Exclusions applied pursuant to the Privacy Act

Section	Number of requests
69(1)(a)	0
69(1)(b)	0
69.1	0
70(1)	0
70(1)(a)	0
70(1)(b)	0
70(1)(c)	0
70(1)(d)	0
70(1)(e)	0
70(1)(f)	0
70.1	0

2.4 Format of information released

Table 38: 2.4 Format of information released under the Privacy Act

Paper	Electronic	Other
33	325	0

2.5 Complexity

Table 39: 2.5.1 Relevant pages processed and disclosed under the Privacy Act

Number of pages processed	Number of pages disclosed	Number of requests
147,379	125,992	433

Table 40: 2.5.2 Relevant pages processed and disclosed by size of requests under the Privacy Act

Disposition	Less than 100 pages processed		101 to 500 pages processed		501 to 1,000 pages processed		1,001 to 5,000 pages processed		More than 5,000 pages processed
	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed
All disclosed	97	3,402	74	20,211	22	15,901	8	9,892	0	0
Disclosed in part	36	1,376	54	10,927	33	21,554	34	42,729	0	0
All exempted	0	0	0	0	0	0	0	0	0	0
All excluded	0	0	0	0	0	0	0	0	0	0
Request abandoned	75	0	0	0	0	0	0	0	0	0
Neither confirmed nor denied	0	0	0	0	0	0	0	0	0	0
Total	208	4,778	128	31,138	55	37,455	42	52,621	0	0

Table 41: 2.5.3 Other complexities for privacy requests

Disposition	Consultation required	Legal advice sought	Interwoven information	Other	Total
All disclosed	3	0	0	0	3
Disclosed in part	8	0	0	0	8
All exempted	0	0	0	0	0
All excluded	0	0	0	0	0
Request abandoned	0	0	0	0	0
Neither confirmed nor denied	0	0	0	0	0
Total	11	0	0	0	11

2.6 Closed requests

Table 42: 2.6.1 Number of requests closed within legislated timelines under the Privacy Act

Type	Requests closed within legislated timelines
Number of requests closed within legislated timelines	433
Percentage of requests closed within legislated timelines (%)	91.7

2.7 Deemed refusals

Table 43: 2.7.1 Reasons for not meeting legislated timelines under the Privacy Act

Number of requests closed past the statutory deadline	Principal reason
	Workload	External consultation	Internal consultation	Other
39	24	1	0	14

Table 44: 2.7.2 Requests closed beyond legislated timelines under the Privacy Act (including any extension taken)

Number of days past deadline	Number of requests past deadline where no extension was taken	Number of requests past deadline where an extension was taken	Total
1 to 15 days	13	2	15
16 to 30 days	1	1	2
31 to 60 days	2	3	5
61 to 120 days	2	4	6
121 to 180 days	0	4	4
181 to 365 days	2	3	5
More than 365 days	1	1	2
Total	21	18	39

2.8 Requests for translation

Table 45: 2.8 Requests for translation under the Privacy Act

Translation requests	Accepted	Refused	Total
English to French	0	0	0
French to English	0	0	0
Total	0	0	0

Section 3: Disclosures under subsections 8(2) and 8(5)

Table 46: Number of disclosures

Paragraph 8(2)(e)	Paragraph 8(2)(m)	Subsection 8(5)	Total
14	0	0	14

Section 4: Requests for correction of personal information and notations

Table 47: Disposition for correction requests received

Disposition for correction requests received	Number
Notations attached	0
Requests for correction accepted	0
Total	0

Section 5: Extensions

Table 48: 5.1 Reasons for extensions and disposition of requests

Number of requests where an extension was taken	15(a)(i) Interference with operations				15 (a)(ii) Consultation			15(b) Translation purposes or conversion
	Further review required to determine exemptions	Large volume of pages	Large volume of requests	Documents are difficult to obtain	Cabinet Confidence Section (Section 70)	External	Internal
40	0	18	13	0	0	0	9	0

Table 49: 5.2 Length of extensions

Length of Extensions	15(a)(i) Interference with operations				15 (a)(ii) Consultation			15(b) Translation purposes or conversion
	Further review required to determine exemptions	Large volume of pages	Large volume of requests	Documents are difficult to obtain	Cabinet Confidence Section (Section 70)	External	Internal
1 to 15 days	0	0	0	0	0	0	0	0
16 to 30 days	0	18	13	0	0	0	9	0
Total	0	18	13	0	0	0	9	0

Section 6: Consultations received from other institutions and organizations

Table 50: 6.1 Consultations received from other Government of Canada institutions and organizations

Consultations	Other Government of Canada institutions	Number of pages to review	Other organizations	Number of pages to review
Received during the reporting period	6	123	0	0
Outstanding from the previous reporting period	0	0	0	0
Total	6	123	0	0
Closed during the reporting period	5	116	0	0
Pending at the end of the reporting period	1	7	0	0

Table 51: 6.2 Recommendations and completion time for consultations received from other Government of Canada institutions

Recommendation	Number of days required to complete consultation requests
	1 to 15 days	16 to 30 days	31 to 60 days	61 to 120 days	121 to 180 days	181 to 365 days	More than 365 days	Total
All disclosed	2	3	0	0	0	0	0	5
0	0	0	0	0	0	0	0	0
All exempted	0	0	0	0	0	0	0	0
All excluded	0	0	0	0	0	0	0	0
Consult other institution	0	0	0	0	0	0	0	0
Other	0	0	0	0	0	0	0	0
Total	2	3	0	0	0	0	0	5

Table 52: 6.3 Recommendations and completion time for consultations received from other organizations

Recommendation	Number of days required to complete consultation requests
	1 to 15 days	16 to 30 days	31 to 60 days	61 to 120 days	121 to 180 days	181 to 365 days	More than 365 days	Total
All disclosed	0	0	0	0	0	0	0	0
Disclosed in part	0	0	0	0	0	0	0	0
All exempted	0	0	0	0	0	0	0	0
All excluded	0	0	0	0	0	0	0	0
Consult other institution	0	0	0	0	0	0	0	0
Other	0	0	0	0	0	0	0	0
Total	0	0	0	0	0	0	0	0

Section 7: Completion time of consultations on cabinet confidences

Table 53: 7.1 Requests with Legal Services

Number of days	Fewer than 100 pages processed		101 to 500 pages processed		501 to 1000 pages processed		1001 to 5000 pages processed		More than 5000 pages processed
	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed
1 to 15	0	0	0	0	0	0	0	0	0	0
16 to 30	0	0	0	0	0	0	0	0	0	0
31 to 60	0	0	0	0	0	0	0	0	0	0
61 to 120	0	0	0	0	0	0	0	0	0	0
121 to 180	0	0	0	0	0	0	0	0	0	0
181 to 365	0	0	0	0	0	0	0	0	0	0
More than 365	0	0	0	0	0	0	0	0	0	0
Total	0	0	0	0	0	0	0	0	0	0

Table 54: 7.2 Request with Privy Council Office

Number of days	Fewer than 100 pages processed		101 to 500 pages processed		501 to 1000 pages processed		1001 to 5000 pages processed		More than 5000 pages processed
	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed	Number of requests	Pages disclosed
1 to 15	0	0	0	0	0	0	0	0	0	0
16 to 30	0	0	0	0	0	0	0	0	0	0
31 to 60	0	0	0	0	0	0	0	0	0	0
61 to 120	0	0	0	0	0	0	0	0	0	0
121 to 180	0	0	0	0	0	0	0	0	0	0
181 to 365	0	0	0	0	0	0	0	0	0	0
More than 365	0	0	0	0	0	0	0	0	0	0
Total	0	0	0	0	0	0	0	0	0	0

Section 8: Complaints and investigations notices received

Table 55: Number of complaints and investigations notices received

Section 31	Section 33	Section 35	Court action	Total
5	6	2	0	13

Section 9: Privacy impact assessments and personal information banks

Number of privacy impact assessments (PIA)(s) completed: 0

Table 56: 9.1 Number of personal information banks

Personal information banks	Active	Created	Terminated	Modified
Total	25	0	0	0

Section 10: Material privacy breaches

Number of material privacy breaches reported to TBS: 6

Number of material privacy breaches reported to OPC: 6

Section 11: Resources related to the Privacy Act

Table 57: 11.1 Costs

Expenditures	Amount
Salaries	$1,391,649
Overtime	$0
Goods and services: professional services contracts ($250,729) other ($115,977)	$366,706
Total	$1,758,355

Table 58: 11.2 Human resources

Resources	Person years dedicated to privacy activities
Full-time employees	17.38
Part-time and casual employees	1.68
Regional staff	0.00
Consultants and agency personnel	1.69
Students	0.00
Total	20.75

Annex D: 2019 to 2020 Supplemental statistical report on requests affected by COVID-19 measures

Section 1: Supplemental statistical report on the Access to Information Act

Table 59: 1.1 Access to information requests received

Periods	Number of requests
Received from 2019-04-01 to 2020-03-13	617
Received from 2020-03-14 to 2020-03-31	11
Total	628

Table 60: 1.2 Access to information requests closed

Periods	Number of requests closed within the legislated timelines	Number of requests closed past the legislated timelines
Received from 2019-04-01 to 2020-03-13 and outstanding from previous reporting periods	517	310
Received from 2020-03-14 to 2020-03-31	0	0
Total	517	310

Table 61: 1.3 Access to information requests carried over

Periods	Number of requests
Requests received from 2019-04-01 to 2020-03-13 and outstanding from previous reporting period that were carried over to the 2020 to 2021 reporting period	298
Requests received from 2020-03-14 to 2020-03-31 that were carried over to the 2020 to 2021 reporting period	11
Total	309

Section 2: Supplemental statistical report on the Privacy Act

Table 62: 2.1 Privacy requests received

Periods	Number of requests
Received from 2019-04-01 to 2020-03-13	481
Received from 2020-03-14 to 2020-03-31	14
Total	495

Table 63: 2.2 Privacy requests closed

Periods	Number of requests closed within the legislated timelines	Number of requests closed past the legislated timelines
Received from 2019-04-01 to 2020-03-13 and outstanding from previous reporting periods	433	39
Received from 2020-03-14 to 2020-03-31	0	0
Total	433	39

Table 64: 2.3 Privacy requests carried over

Periods	Number of requests
Requests received from 2019-04-01 to 2020-03-13 and outstanding from previous reporting period that were carried over to the 2020 to 2021 reporting period	62
Requests received from 2020-03-14 to 2020-03-31 that were carried over to the 2020 to 2021 reporting period	14
Total	76