Health Canada Privacy Act Annual Report 2017-2018
Table of Contents
- Introduction
- Privacy Delivery and Governance
- Delegation of Authority
- Requests under the Privacy Act - Statistical Figures, Interpretation and Explanation
- Training and Awareness
- Recent Privacy Initiatives
- New and/or Revised Institution-Specific Privacy-Related Policies, Guidelines and Procedures
- Key Issues Raised as a Result of Privacy Complaints and/or Investigations
- Monitoring Compliance
- Privacy Breaches
- Privacy Impact Assessments Completed
- Disclosures made Pursuant to Paragraph 8(2)(E) of the Privacy Act
- Disclosures made Pursuant to Paragraph 8(2)(m) of the Privacy Act
- Appendix A: Access to Information Act and Privacy Act – Delegation Order
- Appendix B: Statistical Report on the Privacy Act
- Appendix C: Health Canada On Behalf Of Indigenous Services Canada - Statistical Report
Introduction
I. Privacy Act
The Privacy Act (the Act) gives Canadian citizens and permanent residents of Canada the right of access to information about themselves held by the federal government with certain specific and limited exceptions. The Act protects an individual's privacy by setting out provisions related to the collection, retention, accuracy, disposal, use and disclosure of personal information.
The Act requires the head of every federal government institution to submit an annual report to Parliament on the administration of the Act following the close of each fiscal year. This annual report is prepared and is being tabled before each House of Parliament in accordance with section 72 of the Act. This report summarizes how Health Canada has fulfilled its privacy responsibilities during the fiscal year 2017-2018.
II. About Health Canada
Health Canada (HC) is the federal department responsible for helping the people of Canada maintain and improve their health.
HC is committed to improving the lives of all of Canada's people and to making this country's population among the healthiest in the world as measured by longevity, lifestyle and effective use of the public health care system.
By working with others in a manner that fosters the trust of Canadians, HC strives to:
- Prevent and reduce risks to individual health and the overall environment;
- Promote healthier lifestyles;
- Ensure high quality health services that are efficient and accessible;
- Integrate renewal of the health care system with longer term plans in the areas of prevention, health promotion and protection;
- Reduce health inequalities in Canadian society; and
- Provide health information to help Canadians make informed decisions.
HC has regional offices in British Columbia, Alberta, Saskatchewan, Manitoba, Ontario, Quebec, and the Atlantic and Northern Regions.
For more information about HC, please visit our website at:
https://www.canada.ca/en/health-canada.html
Privacy Delivery and Governance
Privacy protection and the appropriate management of personal information, including personal health information, are extremely important for Canadians and HC. The Department takes its role in the management of personal information seriously and has taken steps to raise awareness and implement processes to comply with the Privacy Act. These are outlined in this report.
Privacy Act requirements are led out of the Privacy Management Division and the Access to Information and Privacy Management Division. Both Divisions are housed in the Planning, Integration and Management Services Directorate of the Corporate Services Branch at HC.
In 2017–2018, the Act was administered at HC by 16.04 full-time equivalent (FTE) employees with the support of 1.40 FTEs in consultant services, as well as part-time and casual employees of 0.79 FTEs for a total resource complement of 18.23 FTEs. These figures include administrative support, management, reporting, monitoring and policy resources, and overhead cost which contribute to the overall support of the operations of the application of the Act.
I. Privacy Management Division
The Privacy Management Division (PMD) strengthens capacity and expertise supporting HC's programs that collect, use, disclose, retain and dispose of personal information.
The Division's key areas of work include:
- Developing corporate privacy policies, guidelines and practices that promote a culture of privacy;
- Actively promoting privacy awareness through both on-line and in-person training;
- Integrating privacy considerations into the investment planning process;
- Working with programs to complete, monitor and report on privacy impact assessments and privacy breaches;
- Reviewing Memorandum to Cabinet and Treasury Board submissions to ensure privacy requirements are met;
- Coordinating HC annual input into Info Source, including the development and registration of Personal Information Banks;
- Liaising with the Office of the Privacy Commissioner of Canada on privacy aspects of new and proposed programs, legislation/regulations, policies, privacy impact assessments, breaches and complaints;
- Monitoring privacy policies, practices; and
- Liaising with other federal departments, agencies, provincial ministries of health and other key partners regarding privacy issues within the health portfolio to provide informed advice to clients.
II. The Access to Information and Privacy Division
The management of requests and associated complaints under the Privacy Act is jointly led by the Access to Information and Privacy Division and the Privacy Management Division. Together, these Divisions are responsible for legislative requirements pursuant to the Act such as:
- Responding to privacy requests within the statutory time frame as well as meeting the duty to assist requesters;
- Promoting staff awareness and providing training across HC on the Act;
- Preparing the Annual Report to Parliament;
- Supporting other forms of information sharing by HC by ensuring the appropriate identification and redaction of personal information (e.g., documents for litigation, information disclosure, and relating to human resource issues); and
- Liaising with the Office of the Privacy Commissioner (OPC), Treasury Board of Canada Secretariat (TBS), other federal departments and agencies, provincial ministries of health and other key partners regarding the application of the Act to develop relevant policies, tools and guidelines.
Delegation of Authority
The most recent delegation order for the Privacy Act was signed by the Minister of Health on November 25, 2015. In keeping with Treasury Board Secretariat recommendations on best practice, the delegation order extends authorities to multiple positions including the Coordinator, the Corporate Services Branch's Assistant Deputy Minister and Director General of Planning Integration and Management Services Directorate. As appropriate, certain administrative authorities are delegated to various senior levels within the ATIP Division and Privacy Management Division to support the effective and efficient administration of the Act.
The Delegation Order is attached as Appendix A.
Requests under the Privacy Act - Statistical Figures, Interpretation and Explanation
I. Statistical Report
This section of the report includes an interpretation and explanation of the data contained in Health Canada's statistical report that summarizes ATI-related activity for the period between April 1, 2017, and March 31, 2018 (Appendix B).
In August 2017, the Prime Minister announced an action plan to dissolve Indigenous and Northern Affairs Canada (INAC) and create two departments: Indigenous Services Canada (ISC) and Crown-Indigenous Relations and Northern Affairs Canada (CIRNAC). ISC was officially created with an order on November 30, 2017, and all employees of the First Nations and Inuit Health Branch (FNIHB) of Health Canada (HC) were transferred to that new department.
Although FNIHB was transferred to ISC on November 30, 2017, through a memorandum of understanding, HC continued to provide internal services until March 31, 2018 including processing privacy requests associated with FNIHB. From November 30, 2017, until March 31, 2018, HC working on behalf of ISC, administered the requests received for FNIHB-related files. This arrangement helped support continued access to information until the transition on April 1, 2018.
HC processed six Privacy Act requests in the name of the ISC, which are included in HC's statistical report. Of those six requests, HC completed two before April 1, while the four others were transferred to ISC for completion.
II. Number of Privacy Requests and Case Load
Requests under the Privacy Act
In 2017–2018, HC processed 237 Privacy Act requests compared to 269 in 2016–2017, a 12% decrease. Many of these requests were for requesters access to medical files. HC also received a significant number of requests from current and former HC employees who wanted to obtain their personal information which can often lead to complexities in retrieving and processing their requests.
Case Load
During the 2017–2018 fiscal year, HC processed 228 of 277 active requests (82%). Active requests included 237 new requests and 40 requests carried forward from 2016–2017.
Case Load and Pages Reviewed by Fiscal Year
Fiscal Year | Number of Requests Received | Number of Requests Carried Over | Total Caseload | Number of Requests Closed | # of Pages Reviewed for Closed Files |
---|---|---|---|---|---|
2013-2014 | 627 | 48 | 675 | 596 | 86,338 |
2014-2015 | 532 | 79 | 611 | 543 | 81,385 |
2015-2016 | 531 | 68 | 599 | 549 | 36,748 |
2016-2017 | 269 | 50 | 319 | 279 | 13,305 |
2017-2018 | 237 | 40 | 277 | 228 | 8,608 |
Figure 1 - Text description
Fiscal Year | Received | Completed |
---|---|---|
2013-2014 | 627 | 596 |
2014-2015 | 532 | 435 |
2015-2016 | 531 | 549 |
2016-2017 | 269 | 279 |
2017-2018 | 277 | 228 |
Consultations Received from Other Government Institutions
In 2017–2018, HC completed a total of six consultations (114 pages) from other federal government departments. No consultations were received from institutions outside of the federal government.
Number of Consultations and Pages Reviewed from Other Federal Institutions
Federal Institutions | Number of Consultations Completed | Pages Reviewed |
---|---|---|
Public Health Agency of Canada | 1 | 69 |
Royal Canadian Mounted Police | 2 | 36 |
Veterans Affairs Canada | 2 | 9 |
Canadian Border Services Agency | 1 | 1 |
Total | 6 | 114 |
III. Disposition of Requests Completed
Completed requests were classified as follows:
Disposition of Requests Completed by Percentage
Disposition of Requests | Requests Completed by Percentage |
---|---|
All disclosed | 9% |
Disclosed in part | 27% |
No records exist | 18% |
Request abandoned | 47% |
A large percentage of Privacy Act requests made to HC are abandoned, mainly due to the requester's confusion surrounding the mandate of the Department and the information that it holds. Most of these "abandoned" requests concerned personal medical records that fall under provincial jurisdiction and are not held by HC. Requesters are advised of these details.
IV. Exemptions Invoked
Sections 18 through 28 of the Act set out the exemptions intended to protect information pertaining to a particular public or private interest. Section 26 "personal information of other individuals" accounted for 83% of the all exemptions invoked in 2017–2018.
Principal Exemptions Applied
Exemptions | Number of Times Applied |
---|---|
Section 26 – Information about another individual | 60 |
Section 27 – Solicitor-client privilege | 7 |
Section 25 – Safety of individuals | 4 |
Section 21 – International affairs and defence | 1 |
V. Exclusions Cited
The Act does not apply to personal information that is available to the public (section 69), nor does it apply to confidences of the Queen's Privy Council (section 70), with some exceptions. Requests containing proposed exclusions under section 70 require consultation with the Department of Justice, and potentially the Privy Council Office. In 2017–2018, HC did not exclude any information under either section 69 or 70.
VI. Completion Time
HC was able to respond within 30 days or less in 72% of the completed requests. Of the remaining requests, 13% were completed in 31 to 60 days, 8% in 61 to 120 days, and 7% in 121 days or more.
VII. Extensions
Legal extensions were invoked in 17 cases (8%) of the total 228 requests completed.
VIII. Translation
There were no requests for translation of records responsive to Privacy Act requests in 2017–2018.
IX. Format of Information Released
Of requests that were fully or partially disclosed, 36 were sent out in paper format and 46 requests were released electronically.
HC's imaging software allows the Department to respond to privacy requests using Portable Document Format (PDF). It is anticipated that the use of electronic formats for the release of information will continue to grow in future years.
X. Corrections and Notations
There were no requests for the correction or the notation of personal information during this fiscal year.
XI. Costs
HC spent a total of $1,781,552 responding to requests related to the Act. Of this total, salaries accounted for $1,489,965 and administration costs accounted for $292,587; most of the administration costs were used to retain temporary help to address the complexity of requests.
Training and Awareness
Training, Orientation and Awareness for HC Employees
HC continues to offer privacy training through 'Privacy 101' sessions. General Privacy awareness training was provided to 91 employees during the year. These sessions provide participants with a high-level understanding of the Privacy Act and its requirements relating to the processing of requests for information under the Privacy Act, the "need to know" principle, and general obligations regarding the collection, use, retention, disclosure and retention of personal information.
Several new training sessions were delivered in 2017–2018, notably, a session on authorized communications and privacy impact assessments (PIAs) and a new session on privacy breaches designed to facilitate the management and prevention of such breaches. In total, 60 participants attended these additional training sessions. Furthermore, an online learning tool, which HC created, called Privacy Basics continued to be used in 2017–2018. The total of online learning participants in this course during the year was 472 from HC and 2411 from other departments. In all, 549 HC employees received Privacy Act training.
HC management continued to increase employee awareness on the protection of privacy and their responsibilities according to the Privacy Act by providing targeted information sessions: for example, promoting Privacy Awareness Week in October, during which, general awareness-raising communications and messages were sent out internally. Tweets on Privacy Awareness Week activities were shared approximately 8,000 times. The Privacy Management Division's Twitter feed had 245 followers by the end of the fiscal year.
Recent Privacy Initiatives
In March 2018, the Privacy Management Division and the ATIP Division participated in an orientation session on integrating new HC employees. The session introduced employees to the main services they could need in the context of their work. Personnel from both divisions gave an overview of the meaning of privacy, why employees must manage it appropriately, the importance of detailed research while meeting reasonable deadlines and the inner workings involved when requests are processed. Thirty-six people participated in the session.
HC is pursuing a plan to add capacity to this function going forward.
New and/or Revised Institution-Specific Privacy-Related Policies, Guidelines and Procedures
I. Privacy Management Division
Privacy Management Division again gave an introductory course on the main requirements for collecting, using, retaining, communicating and withdrawing personal information and specific modules on monitoring the protection of privacy, managing privacy breaches and PIAs. The training was very popular with 2,411 government-wide participants completing it during the fiscal year.
II. Other Initiatives
Governance and Outreach
There is an ongoing focus on engagement through meetings with employees across the Department, central agencies and other government departments. For example, in 2017–2018, three (3) meetings of the Health Partnership Privacy Committee (HPPC) were held to promote privacy issues. As a director-level forum with representation from all areas of HC, the HPPC generates discussion and approval of privacy guidance, practices and tools, collaborates in ensuring that privacy compliance requirements are met, and makes recommendations to senior management.
Health Information Privacy Group
HC continues to participate as a member of the Canada Health Infoway's Federal-Provincial Territorial Health Information Privacy Working Group focused on privacy issues related to the development digital health services in Canada. In 2017–2018, HC participated in 2 in person meetings as well as one (1) conference call.
Key Issues Raised as a Result of Privacy Complaints and/or Investigations
I. Complaints to the Privacy Commissioner
Twelve section 31, Privacy Act complaints were received on HC's processing of Privacy Act requests. OPC personnel sent nine section 33, Privacy Act notices to HC. Those notices provide HC authorities with the opportunity to make formal representations on active investigations. Last, five letters of finding (section 35) regarding complaints were received from the OPC.
II. Types of Complaints and their Disposition Completed
During 2017–2018, five investigations into complaints that related to the processing of Privacy Act requests were completed and closed by the OPC. All five findings were well-founded.
HC processed three informal complaints through the OPC early resolution process. Observations were shared with OPC personnel, the complaints were well-founded and the files were closed.
The Department reviews the outcomes of all OPC investigations, and where appropriate, incorporates lessons learned into business processes.
III. Applications/Appeals Submitted to the Federal Court/Federal Court of Appeal
There were no applications or appeals submitted to the Federal Court or the Federal Court of Appeal during fiscal year 2017–2018.
IV. Health Canada Responses to Recommendations raised by other Agents of Parliament
There were no recommendations raised by other Agents of Parliament during fiscal year 2017–2018.
V. Privacy Audits
There were no privacy audits concluded during fiscal year 2017–2018 for HC.
Monitoring Compliance
The ATIP Division has undertaken the production of weekly, monthly and quarterly reporting to senior management in order to monitor performance within HC. Similarly, PMD produces quarterly reports on privacy breaches and privacy impact assessments.
Privacy Breaches
During the 2017–2018 fiscal year, HC reported 32 privacy breaches affecting individuals. Most of these breaches concerned low-sensitivity information. None of the breaches were considered serious.
Privacy Impact Assessments Completed
Five privacy impact assessments were completed during the 2017–2018 fiscal year. Below are the PIAs listed with a brief description along with a hyperlink to the PIA on the HC website where available. For additional information regarding PIAs not yet posted to the HC website, please send your request to: hc.privacy-vie.privee.sc@canada.ca
- ATIP Division's Ricoh case management system: A PIA was launched on the subject of new case management systems to determine and mitigate risks to privacy in processing personal information for the purposes of access to information, Privacy Act requests and advice on the privacy policy for HC.
- Medical Marijuana Registration Program: This PIA reviewed the risks to privacy associated with the processing of personal information in the [Medical Marijuana Registration Program], including the exchange of personal information with third parties. The PIA also dealt with the risks to privacy with the connected Jira software, which processes requests and information in certificates.
- Vision care benefit, NIHB: This PIA was conducted to review the decision-making process for those applying for the vision care benefit under HC's Non-Insured Health Benefits (NIHB) Program.
- Special Access Program (SAP): This PIA was conducted in the context of updating a 2009 PIA assessing the risks to privacy related to SAP operational activities containing the processing of personal information, specifically, SAP management of personal information related to the processing of special access requests (SARs) and the response for status update requests for processing SARs.
- Grants and Contribution Information Management System (GCIMS): This PIA was conducted to identify risks to privacy associated with the personal information used in the GCIMS, which will support the administration of HC grant and contribution programs and services.
Disclosures made Pursuant to Paragraph 8(2)(E)
There was one disclosure made pursuant to paragraph 8(2)(e) of the Privacy Act.
Disclosures made Pursuant to Paragraph 8(2)(m)
There were two communications in terms of paragraph 8(2)(m) of the Privacy Act and two written notices to the OPC in accordance with paragraph 8(5).
Appendix A: Access to Information Act and Privacy Act – Delegation Order
Delegation of Authority
Access to Information Act and Privacy Act
I, the Minister of Health, pursuant to section 73 of the Access to Information Act and section 73 of the Privacy Act, hereby designate the persons holding the positions set out in the Delegation of Authority Schedule attached hereto, or the persons occupying on an acting basis those positions, to exercise the powers, duties and functions of the Minister responsible for Health Canada, under the provisions of the Act and related regulations set out in the schedule opposite each position. This designation supersedes all previous delegation orders.
The Honourable Jane Philpott MP
Minister of Health
Nov 25, 2015
Delegation of Authority Schedule / Annexe de délégation de pouvoirs
Position | Access to Information Act and Regulations | Privacy Act and Regulations |
---|---|---|
Assistant Deputy Minister, Corporate Services Branch HC/PHAC |
Full authority | Full authority |
Director General, Planning, Integration and Management Services, Corporate Services Branch HC/PHAC |
Full authority | Full authority |
Director (Coordinator), Access to Information and Privacy HC/PHAC |
Full authority | Full authority except Sections/Articles 8(2)(j), 8(2)(m), 8(5), 9(1), 9(4), 10 |
Deputy Director, Access to Information and Privacy | Full authority | Full authority except Sections/Articles 8(2)(j), 8(2)(m), 8(5), 9(1), 9(4), 10 |
Director, Privacy Management Division | nil | Full authority except Sections/Articles 14-28 inclusively/inclusivement |
Chief, Access to Information and Privacy | Full authority except: : 35(2), 52(2)(b), 52(3), 72 Regulations: Sections: Full authority |
Full authority except: 8(2)(j), 8(2)(m), 8(4), 8(5), 9(1), 9(4), 10, 33(2) 51(2)(b), 51(3), 72(1) Regulations: Sections: Full authority except: 7 |
Team Leader, Access to Information and Privacy | Sections: 4(2.1), 7, 8(1), 9(1), 9(2), 10(1), 10(2), 11(2), 11(3), 11(4), 11(5), 11(6), 12(2)(b), 12(3)(b), 19, 25, 27(1), 27(4), 33, 43(1), 44(2) Regulations: Sections: Full authority |
Sections: 14, 15, 16, 17(2)(b), 17(3)(b), 26, 31 Regulations: Sections: 9, 11(2), 13(1), 14 |
Senior Analyst, Access to Information and Privacy | Sections: 4(2.1), 7, 9(2), 27(1), 27(4), 33 Regulations: Sections: 5 |
Regulations: Sections: 9, 11(2) |
Analyst, Access to Information and Privacy | Sections: 4(2.1), 7, 9(2) Regulations: Sections: 5 |
Regulations: Sections: 9, 11(2) |
Appendix B: Statistical Report on the Privacy Act
TBS/SCT 350-63
Name of institution: Health Canada
Reporting period: 2017-04-01 to 2018-03-31
Part 1: Requests Under the Privacy Act
Requests Under the Privacy Act
Requests | Number of Requests |
---|---|
Received during reporting period | 237 |
Outstanding from previous reporting period | 40 |
Total | 277 |
Closed during reporting period | 228 |
Carried over to next reporting period | 49 |
Part 2: Requests Closed During the Reporting Period
2.1 Disposition and completion time
Disposition of Requests | Completion Time | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
All disclosed | 2 | 5 | 7 | 4 | 0 | 1 | 0 | 20 |
Disclosed in part | 4 | 19 | 14 | 13 | 4 | 4 | 4 | 62 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
No records exist | 24 | 11 | 2 | 2 | 0 | 1 | 0 | 40 |
Request abandoned | 87 | 12 | 6 | 0 | 0 | 0 | 1 | 106 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 117 | 47 | 29 | 20 | 4 | 6 | 5 | 228 |
2.2 Exemptions
Section | Number of Requests |
---|---|
18(2) | 0 |
19(1)(a) | 0 |
19(1)(b) | 0 |
19(1)(c) | 0 |
19(1)(d) | 0 |
19(1)(e) | 0 |
19(1)(f) | 0 |
20 | 0 |
21 | 1 |
22(1)(a)(i) | 0 |
22(1)(a)(ii) | 0 |
22(1)(a)(iii) | 0 |
22(1)(b) | 0 |
22(1)(c) | 0 |
22(2) | 0 |
22.1 | 0 |
22.2 | 0 |
22.3 | 0 |
23(a) | 0 |
23(b) | 0 |
24(a) | 0 |
24(b) | 0 |
25 | 4 |
26 | 60 |
27 | 7 |
28 | 0 |
2.3 Exclusions
Section | Number of Requests |
---|---|
69(1)(a) | 0 |
69(1)(b) | 0 |
69.1 | 0 |
70(1) | 0 |
70(1)(a) | 0 |
70(1)(b) | 0 |
70(1)(c) | 0 |
70(1)(d) | 0 |
70(1)(e) | 0 |
70(1)(f) | 0 |
70.1 | 0 |
2.4 Format of information released
Disposition | Paper | Electronic | Other formats |
---|---|---|---|
All disclosed | 10 | 10 | 0 |
Disclosed in part | 26 | 36 | 0 |
Total | 36 | 46 | 0 |
2.5 Complexity
2.5.1 Relevant pages processed and disclosed
Disposition of Requests | Number of Pages Processed | Number of Pages Disclosed | Number of Requests |
---|---|---|---|
All disclosed | 490 | 492 | 20 |
Disclosed in part | 7667 | 7396 | 62 |
All exempted | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 |
Request abandoned | 451 | 0 | 106 |
Neither confirmed nor denied | 0 | 0 | 0 |
Total | 8608 | 7888 | 188 |
2.5.2 Relevant pages processed and disclosed by size of requests
Disposition | Less Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed | 1001-5000 Pages Processed | More Than 5000 Pages Processed | |||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | |
All disclosed | 18 | 231 | 2 | 261 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 39 | 1708 | 21 | 4448 | 2 | 1240 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 105 | 0 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 162 | 1939 | 24 | 4709 | 2 | 1240 | 0 | 0 | 0 | 0 |
2.5.3 Other complexities
Disposition | Consultation Required | Legal Advice Sought | Interwoven Information | Other | Total |
---|---|---|---|---|---|
All disclosed | 3 | 0 | 0 | 2 | 5 |
Disclosed in part | 6 | 1 | 0 | 3 | 10 |
All exempted | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 |
Neitder confirmed nor denied | 0 | 0 | 0 | 0 | 0 |
Total | 9 | 1 | 5 | 5 | 15 |
2.6 Deemed refusals
2.6.1 Reasons for not meeting statutory deadline
Number of Requests Closed Past the Statutory Deadline | Principal Reason | |||
---|---|---|---|---|
Workload | External Consultation | Internal Consultation | Other | |
57 | 40 | 2 | 2 | 13 |
2.6.2 Number of days past deadline
Number of Days Past Deadline | Number of Requests Past Deadline Where No Extension Was Taken | Number of Requests Past Deadline Where An Extension Was Taken | Total |
---|---|---|---|
1 to 15 days | 16 | 3 | 19 |
16 to 30 days | 7 | 0 | 7 |
31 to 60 days | 10 | 1 | 11 |
61 to 120 days | 6 | 3 | 9 |
121 to 180 days | 0 | 1 | 1 |
181 to 365 days | 4 | 2 | 6 |
More than 365 days | 2 | 2 | 4 |
Total | 45 | 12 | 57 |
2.7 Requests for translation
Translation Requests | Accepted | Refused | Total |
---|---|---|---|
English to French | 0 | 0 | 0 |
French to English | 0 | 0 | 0 |
Total | 0 | 0 | 0 |
Part 3: Disclosures Under Subsections 8(2) and 8(5)
Disclosures Under Subsections 8(2) and 8(5)
Paragraph 8(2)(e) | Paragraph 8(2)(m) | Subsection 8(5) | Total |
---|---|---|---|
1 | 2 | 2 | 5 |
Part 4: Requests for Correction of Personal Information and Notations
Part 4: Requests for Correction of Personal Information and Notations
Disposition for Correction Requests Received | Number |
---|---|
Notations attached | 0 |
Requests for correction accepted | 0 |
Total | 0 |
Part 5: Extensions
5.1 Reasons for extensions and disposition of requests
Disposition of Requests Where an Extension Was Taken | 15(a)(i) Interference With Operations | 15(a)(ii) Consultation | 15(b) Translation or Conversion | |
---|---|---|---|---|
Section 70 | Other | |||
All disclosed | 0 | 0 | 1 | 0 |
Disclosed in part | 4 | 0 | 9 | 0 |
All exempted | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 |
No records exist | 1 | 0 | 0 | 0 |
Request abandoned | 2 | 0 | 0 | 0 |
Total | 7 | 0 | 10 | 0 |
5.2 Length of extensions
Length of Extensions | 15(a)(i) Interference with operations |
15(a)(ii) Consultation |
15(b) Translation purposes |
|
---|---|---|---|---|
Section 70 | Other | |||
1 to 15 days | 0 | 0 | 0 | 0 |
16 to 30 days | 7 | 0 | 10 | 0 |
Total | 7 | 0 | 10 | 0 |
Part 6: Consultations Received From Other Institutions and Organizations
6.1 Consultations received from other Government of Canada institutions and other organizations
Consultations | Other Government of Canada Institutions | Number of Pages to Review | Other Organizations | Number of Pages to Review |
---|---|---|---|---|
Received during tde reporting period | 6 | 114 | 1 | 4 |
Outstanding from tde previous reporting period | 1 | 5 | 0 | 0 |
Total | 7 | 119 | 1 | 4 |
Closed during tde reporting period | 6 | 115 | 1 | 4 |
Pending at tde end of tde reporting period | 1 | 4 | 0 | 0 |
6.2 Recommendations and completion time for consultations received from other Government of Canada institutions
Recommendation | Number of Days Required to Complete Consultation Requests | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
All disclosed | 3 | 1 | 1 | 1 | 0 | 0 | 0 | 6 |
Disclosed in part | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Consult other institution | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Other | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 3 | 1 | 1 | 1 | 0 | 0 | 0 | 6 |
6.3 Recommendations and completion time for consultations received from other organizations
Recommendation | Number of days required to complete consultation requests | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Ddays | More Than 365 Days | Total | |
All disclosed | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Consult other institution | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Other | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 1 |
Total | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Part 7: Completion Time of Consultations on Cabinet Confidences
7.1 Requests with Legal Services
Number of Days | Fewer Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed |
1001-5000 Pages Processed |
More than 5000 Pages Processed |
|||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | |
1 to 15 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
16 to 30 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
31 to 60 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
61 to 120 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
121 to 180 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
181 to 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
More than 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
7.2 Requests with Privy Council Office
Number of Days | Fewer Than 100 Pages Processed | 101‒500 Pages Processed | 501-1000 Pages Processed |
1001-5000 Pages Processed |
More than 5000 Pages Processed |
|||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | |
1 to 15 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
16 to 30 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
31 to 60 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
61 to 120 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
121 to 180 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
181 to 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
More than 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Part 8: Complaints and Investigations Notices Received
Part 8: Complaints and Investigations Notices Received
Section 31 | Section 33 | Section 35 | Court action | Total |
---|---|---|---|---|
12 | 9 | 5 | 0 | 26 |
Part 9: Privacy Impact Assessments (PIAs)
Part 9: Privacy Impact Assessments (PIAs)
Number of PIA(s) completed | 4 |
---|
Part 10: Resources Related to the Privacy Act
10.1 Costs
Expenditures | Amount |
---|---|
Salaries | $1,478,692 |
Overtime | $10,273 |
Goods and Services | $292,587 |
|
$233 630 |
|
$58 957 |
Total | $1,781,552 |
10.2 Human Resources
Resources | Person Years Dedicated to Privacy Activities |
---|---|
Full-time employees | 16.04 |
Part-time and casual employees | 0.79 |
Regional staff | 0.00 |
Consultants and agency personnel | 1.40 |
Students | 0.00 |
Total | 18.23 |
Appendix C: Health Canada On Behalf Of Indigenous Services Canada - Statistical Report
TBS/SCT 350-63
Name of institution: Health Canada on behalf of Indigenous Services Canada
Reporting period: 2017-04-01 to 2018-03-31
Part 1: Requests Under the Privacy Act
Requests Under the Privacy Act
Requests | Number of Requests |
---|---|
Received during reporting period | 6 |
Outstanding from previous reporting period | 0 |
Total | 6 |
Closed during reporting period | 6 |
Carried over to next reporting period | 0 |
Part 2: Requests Closed During the Reporting Period
2.1 Disposition and completion time
Disposition of Requests | Completion Time | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
All disclosed | 0 | 0 | 1 | 0 | 0 | 0 | 0 | 1 |
Disclosed in part | 0 | 1 | 0 | 0 | 0 | 0 | 0 | 1 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
No records exist | 2 | 1 | 1 | 0 | 0 | 0 | 0 | 4 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 2 | 2 | 2 | 0 | 0 | 0 | 0 | 6 |
2.2 Exemptions
Section | Number of Requests |
---|---|
18(2) | 0 |
19(1)(a) | 0 |
19(1)(b) | 0 |
19(1)(c) | 0 |
19(1)(d) | 0 |
19(1)(e) | 0 |
19(1)(f) | 0 |
20 | 0 |
21 | 0 |
22(1)(a)(i) | 0 |
22(1)(a)(ii) | 0 |
22(1)(a)(iii) | 0 |
22(1)(b) | 0 |
22(1)(c) | 0 |
22(2) | 0 |
22.1 | 0 |
22.2 | 0 |
22.3 | 0 |
23(a) | 0 |
23(b) | 0 |
24(a) | 0 |
24(b) | 0 |
25 | 0 |
26 | 0 |
27 | 0 |
28 | 0 |
2.3 Exclusions
Section | Number of Requests |
---|---|
69(1)(a) | 0 |
69(1)(b) | 0 |
69.1 | 0 |
70(1) | 0 |
70(1)(a) | 0 |
70(1)(b) | 0 |
70(1)(c) | 0 |
70(1)(d) | 0 |
70(1)(e) | 0 |
70(1)(f) | 0 |
70.1 | 0 |
2.4 Format of information released
Disposition | Paper | Electronic | Other formats |
---|---|---|---|
All disclosed | 0 | 1 | 0 |
Disclosed in part | 1 | 0 | 0 |
Total | 1 | 1 | 0 |
2.5 Complexity
2.5.1 Relevant pages processed and disclosed
Disposition of Requests | Number of Pages Processed | Number of Pages Disclosed | Number of Requests |
---|---|---|---|
All disclosed | 18 | 18 | 1 |
Disclosed in part | 149 | 145 | 1 |
All exempted | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 |
Total | 167 | 163 | 2 |
2.5.2 Relevant pages processed and disclosed by size of requests
Disposition | Less Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed | 1001-5000 Pages Processed | More Than 5000 Pages Processed | |||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | |
All disclosed | 1 | 18 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 1 | 145 | 0 | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 1 | 18 | 1 | 145 | 0 | 0 | 0 | 0 | 0 | 0 |
2.5.3 Other complexities
Disposition | Consultation Required | Legal Advice Sought | Interwoven Information | Other | Total |
---|---|---|---|---|---|
All disclosed | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 |
Neitder confirmed nor denied | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 |
2.6 Deemed refusals
2.6.1 Reasons for not meeting statutory deadline
Number of Requests Closed Past the Statutory Deadline | Principal Reason | |||
---|---|---|---|---|
Workload | External Consultation | Internal Consultation | Other | |
0 | 0 | 0 | 0 | 0 |
2.6.2 Number of days past deadline
Number of Days Past Deadline | Number of Requests Past Deadline Where No Extension Was Taken | Number of Requests Past Deadline Where An Extension Was Taken | Total |
---|---|---|---|
1 to 15 days | 0 | 0 | 0 |
16 to 30 days | 0 | 0 | 0 |
31 to 60 days | 0 | 0 | 0 |
61 to 120 days | 0 | 0 | 0 |
121 to 180 days | 0 | 0 | 0 |
181 to 365 days | 0 | 0 | 0 |
More than 365 days | 0 | 0 | 0 |
Total | 0 | 0 | 0 |
2.7 Requests for translation
Translation Requests | Accepted | Refused | Total |
---|---|---|---|
English to French | 0 | 0 | 0 |
French to English | 0 | 0 | 0 |
Total | 0 | 0 | 0 |
Part 3: Disclosures Under Subsections 8(2) and 8(5)
Disclosures Under Subsections 8(2) and 8(5)
Paragraph 8(2)(e) | Paragraph 8(2)(m) | Subsection 8(5) | Total |
---|---|---|---|
0 | 0 | 0 | 0 |
Part 4: Requests for Correction of Personal Information and Notations
Part 4: Requests for Correction of Personal Information and Notations
Disposition for Correction Requests Received | Number |
---|---|
Notations attached | 0 |
Requests for correction accepted | 0 |
Total | 0 |
Part 5: Extensions
5.1 Reasons for extensions and disposition of requests
Disposition of Requests Where an Extension Was Taken | 15(a)(i) Interference With Operations | 15(a)(ii) Consultation | 15(b) Translation or Conversion | |
---|---|---|---|---|
Section 70 | Other | |||
All disclosed | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 |
No records exist | 1 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 |
Total | 1 | 0 | 0 | 0 |
5.2 Length of extensions
Length of Extensions | 15(a)(i) Interference with operations |
15(a)(ii) Consultation |
15(b) Translation purposes |
|
---|---|---|---|---|
Section 70 | Other | |||
1 to 15 days | 0 | 0 | 0 | 0 |
16 to 30 days | 1 | 0 | 0 | 0 |
Total | 1 | 0 | 10 | 0 |
Part 6: Consultations Received From Other Institutions and Organizations
6.1 Consultations received from other Government of Canada institutions and other organizations
Consultations | Other Government of Canada Institutions | Number of Pages to Review | Other Organizations | Number of Pages to Review |
---|---|---|---|---|
Received during tde reporting period | 0 | 0 | 0 | 0 |
Outstanding from tde previous reporting period | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 |
Closed during tde reporting period | 0 | 0 | 0 | 0 |
Pending at tde end of tde reporting period | 0 | 0 | 0 | 0 |
6.2 Recommendations and completion time for consultations received from other Government of Canada institutions
Recommendation | Number of Days Required to Complete Consultation Requests | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
All disclosed | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Consult other institution | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Other | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
6.3 Recommendations and completion time for consultations received from other organizations
Recommendation | Number of days required to complete consultation requests | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Ddays | More Than 365 Days | Total | |
All disclosed | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Consult other institution | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Other | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Part 7: Completion Time of Consultations on Cabinet Confidences
7.1 Requests with Legal Services
Number of Days | Fewer Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed |
1001-5000 Pages Processed |
More than 5000 Pages Processed |
|||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | |
1 to 15 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
16 to 30 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
31 to 60 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
61 to 120 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
121 to 180 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
181 to 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
More than 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
7.2 Requests with Privy Council Office
Number of Days | Fewer Than 100 Pages Processed | 101‒500 Pages Processed | 501-1000 Pages Processed |
1001-5000 Pages Processed |
More than 5000 Pages Processed |
|||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | Number of Requests |
Pages Disclosed | |
1 to 15 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
16 to 30 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
31 to 60 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
61 to 120 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
121 to 180 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
181 to 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
More than 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Part 8: Complaints and Investigations Notices Received
Part 8: Complaints and Investigations Notices Received
Section 31 | Section 33 | Section 35 | Court action | Total |
---|---|---|---|---|
0 | 0 | 0 | 0 | 0 |
Part 9: Privacy Impact Assessments (PIAs)
Part 9: Privacy Impact Assessments (PIAs)
Number of PIA(s) completed | 0 |
---|
Part 10: Resources Related to the Privacy Act
10.1 Costs
Expenditures | Amount |
---|---|
Salaries | $0 |
Overtime | $0 |
Goods and Services | $0 |
|
$0 |
|
$0 |
Total | $0 |
10.2 Human Resources
Resources | Person Years Dedicated to Privacy Activities |
---|---|
Full-time employees | 0.00 |
Part-time and casual employees | 0.00 |
Regional staff | 0.00 |
Consultants and agency personnel | 0.00 |
Students | 0.00 |
Total | 0.00 |
Page details
- Date modified: