Canadian Dental Care Plan (CDCP): Member Portal Services

Description

This PIA evaluates the privacy implications of the CDCP's Member Portal Services. Health Canada is responsible for delivering the CDCP and has contracted Sun Life to administer the program. On April 1st, 2025, Sun Life introduced a new service to CDCP members, which includes the launch of a Member Portal. This service provides members with a convenient way to access their benefits, claims, and documentation for themselves and their minor dependents.

Why a Privacy Impact Assessment was completed

Section C.2.2.9 of the Treasury Board of Canada (TBS) Directive on Privacy Practices requires Health Canada to complete a Privacy Impact Assessment (PIA) prior to undertaking a new program or activity that could involve the creation, use, disclosure, retention or disposal of personal information.

Additional information

Health Canada identified five (5) risks in this PIA. Mitigating these risks involves providing a privacy notice that complies with TBS Directive on Privacy Practices, updating the CDCP personal information bank (PIB) to fully describe the activity, conducting an annual review of the personal information relating to the dependent(s) of a portal user to ensure access remains necessary, reminding members who are turning 18 years old to apply for their own CDCP coverage and Sun Life providing Health Canada with additional information about the personal information relating to one of the systems used in this activity. Health Canada has developed an action plan to address these risks, with a target completion date by the end of the 2025-2026 fiscal year.

In addition, 2 mitigations identified in the CDCP Phase 3 PIA are still in progress and will further strengthen privacy protection for this activity. This includes finalizing retention and disposition plans and employee completion of privacy training.

Related Personal Information Banks

The relevant PIB for this activity is the CDCP PIB – HC PPU 440.

For more information about this Privacy Impact Assessment

If you would like more information about this Privacy Impact Assessment (PIA) please contact DentalEnquiries-DemandesDentaires@hc-sc.gc.ca.