Parole Board of Canada Annual Report to Parliament on the Privacy Act 2024-2025

About this publication

Author: Parole Board of Canada
ISSN: 2564-0224

Introduction

In accordance with section 72 of the Privacy Act, an annual report to Parliament on the administration of the Privacy Act is prepared each fiscal year and tabled in Parliament. This report covers the period from April 1, 2024, to March 31, 2025.

Purpose of the Privacy Act

The Privacy Act provides citizens or permanent residents of Canada with the right of access to personal information held by the government and the protection of that information against unauthorized use and disclosure. The Privacy Act has provisions on the collection, retention and disposal of personal information. Under the Privacy Act, access is given to any personal information about the individual contained in a personal information bank, and any other personal information about the individual under the control of a government institution that is reasonably retrievable by the government institution. The Privacy Act allows for the correction of personal information where the individual believes there is an error or an omission. This may require that a notation be attached to the information reflecting any correction requested but not made.

Mandate of the Parole Board of Canada

The Parole Board of Canada (PBC) is an independent administrative tribunal. The PBC is headed by a Chairperson who reports to Parliament through the Minister of Public Safety.

The Parole Board of Canada, as part of the criminal justice system, contributes to the protection of society by facilitating, as appropriate, the timely reintegration of offenders and the sustained rehabilitation of individuals into society as law-abiding citizens. The Board makes independent, quality conditional release, record suspension and expungement decisions, as well as clemency recommendations, in a transparent and accountable manner, while respecting diversity and the rights of offenders and victims.

The PBC has exclusive authority under the Corrections and Conditional Release Act (CCRA) to grant, deny, cancel, terminate or revoke day parole and full parole. The Board may order certain offenders to be detained in prison until the end of their sentence. The Board makes conditional release decisions for federal offenders as well as for provincial offenders in provinces and territories that do not have their own provincial boards. The provinces of Ontario, Quebec and Alberta have their own parole boards.

The PBC is responsible for making decisions to order, refuse to order and revoke record suspensions (pardons) under the Criminal Records Act (CRA) and the Criminal Code. A record suspension is a formal attempt to remove the stigma of a criminal record for people who, having been convicted of an offence, have satisfied the sentence and remained crime-free for a prescribed number of years. The PBC also has legislated responsibility to order or refuse to order expungement of a conviction under the Expungement of Historically Unjust Convictions Act (Expungement Act). The Board also makes recommendations for the exercise of clemency through the Royal Prerogative of Mercy.

The PBC is comprised of full-time employees as well as Board members appointed by the Governor-in-Council. The PBC's National Office is located in Ottawa and there are six regional offices located in: Moncton (Atlantic), Montreal (Quebec), Kingston (Ontario), Saskatoon and Edmonton (Prairies), and Abbotsford (Pacific). The Appeal Division of the Board is located in Ottawa.

Organizational Structure of the PBC to Fulfill its Privacy Act Responsibilities

The Access to Information and Privacy (ATIP) Unit is led by the Director of Public Affairs and Partnerships, who reports to the Deputy Chairperson of the PBC. The ATIP Unit is responsible for:

• processing and responding to all formal requests under the Privacy Act;
• processing interdepartmental consultations;
• handling complaints from the Office of the Privacy Commissioner;
• advising senior officials and employees on privacy-related issues;
• producing the Annual Report to Parliament;
• updating Info Source;
• training employees;
• replying to informal inquiries; and
• coordinating and implementing policies, guidelines and procedures to ensure compliance with the Privacy Act.

The Director, Public Affairs and Partnerships, and the Manager, ATIP are responsible for administering the legislation and signing exemptions within their delegated authority. They are also responsible for giving advice and guidance to departmental officials on matters involving the Privacy Act. In 2024-2025, ATIP staff consisted of one Director, one ATIP Manager, one Senior ATIP Analyst, one ATIP Analyst and one ATIP Clerk.

Requests are processed as follows: completeness of request is determined; the ATIP Manager and the ATIP Analysts ensure the signature from the records is the same as the signature on the privacy request form; and if in doubt, the requestor is contacted concerning the validity of their identity. For individuals making a request on behalf of another individual, we ensure a signed consent form is obtained and signature from the records is the same as the signature on the consent form. The request is acknowledged; a search for relevant records is conducted; records are analyzed under the provisions of the legislation, and other agencies/ministries and policing services are consulted where appropriate; any necessary exemptions are applied; and, the applicant is provided with non-exempted material.

A tracking system is used to log all actions taken. Consultations (mainly with policing services) take place in most cases when other institutions' information is found in the PBC’s files, and their recommendations are normally followed.

Delegation Order

Some powers, duties and functions for the administration of the Privacy Act have been delegated to the Executive Vice-Chairperson, Deputy Chairperson, Director of Public Affairs and Partnerships, and to the ATIP Manager. For a copy of the signed delegation order, please refer to Annex A.

PART 1 – Requests under the Privacy Act

1.1 Number of requests received

Four hundred and fourteen (414) requests were received in 2024-2025 and forty (40) requests were outstanding from the previous reporting period, 2023-2024. Four hundred and forty-five (445) requests were completed during the 2024-2025 reporting period.

Nine (9) requests received in 2023-2024 were carried over to fiscal year 2024-2025 and nine (9) were processed within legislated timelines as of March 31, 2025.

Requests under the Privacy Act are highlighted in the graph below for the past four fiscal years.

1.2 Channels of requests

Of the requests received, 89% were received by email, 7% online and 4% by mail.

PART 2 – Informal Requests^{Footnote 1}

There were no informal requests. This is consistent with past trends at the PBC.

PART 3 – Requests Closed During the Reporting Period

3.1 Disposition and Completion Time

Of the four hundred and forty-five (445) requests completed, information was disclosed in part in response to three hundred and six (306) requests and disclosed in full for seventy (70) requests. The PBC had no records for forty (40) requests, twenty-six (26) requests were abandoned and three (3) were neither confirmed nor denied. The PBC sometimes receives requests from members of the public that should have been submitted to other Federal Government departments. When such requests are received, the requesters are notified on how and where they should submit their Privacy request.

Of these 445 requests, 49% were processed within 15 days, 39% were processed within 16 to 30 days and 12% of requests were processed within 31 to 60 days.

3.2 Exemptions

Consistent with past fiscal years, Section 26 (Personal Information) was the exemption invoked the most, followed by 19(1)(d) & (c) (Personal information obtained in confidence). Other exemptions were used such as 22(1)(b) (Law enforcement and investigations), 24(a) & (b) (Individuals sentenced for an offence) and 27 (Protected information — solicitors, advocates and notaries).

3.3 Exclusions

No exclusions were cited this reporting period.

3.4 Format of Information Released

The format of information released was electronic for most of the requests (89%) and the balance of the requests were disclosed in paper format (11%).

3.5 Complexity

3.5.1 Relevant Pages Processed and Disclosed for paper and e-record formats

Overall, 81,625 pages were processed this past fiscal year from 405 requests, which represents an increase of 23% for pages processed and an increase of 39% in requests processed over the previous fiscal year.

3.5.2 Relevant Pages Processed by request disposition for paper and e-records formats by size of requests

Two hundred and ten (210) requests had 100 pages or fewer processed. One hundred and fifty-four (154) had between 101 and 500 pages processed. Twenty-five (25) had between 501 and 1,000 pages processed. Sixteen (16) had between 1,001 and 5,000 pages processed.

3.5.3 Relevant minutes processed and disclosed for audio formats

One (1) audio request was received.

3.5.4 Relevant minutes processed per request disposition for audio formats by size of requests

A total of 84 minutes were processed and were fully disclosed.

3.5.5 Relevant minutes processed and disclosed for video formats

There were no requests for videos.

3.5.6 Relevant minutes processed per request disposition for video formats by size of requests

There were no requests for videos.

3.5.7 Other complexities

PBC files were relatively complex. Of the 445 requests processed with records, 58 had complexities.

3.6 Closed Requests

3.6.1 Number of Requests Closed within Legislated Timeframes

99.77% of the requests closed during 2024-2025 were closed within the legislated timeframes.

3.7 Deemed Refusals

3.7.1 Reasons for not meeting legislated timelines

There was one (1) request closed past the legislated timelines during this reporting period due to an outstanding external consultation.

3.7.2 Requests closed beyond legislation timelines (including any extension taken)

There was one (1) request closed past the legislated timeline where an extension was taken during this reporting period.

3.8 Requests for Translations

There were no requests for translations. This is consistent with past trends at the PBC.

PART 4 – Disclosures Under Subsection 8(2) and 8(5)

There were twenty-two (22) disclosures made under 8(2)(e), one disclosure made under 8(2)(m) and no disclosures made under 8(5) during this reporting period.

PART 5 – Requests for Correction of Personal Information and Notations

There were no requests for correction of Personal Information during this period.

PART 6 – Extensions

6.1 Reasons for Extensions and Disposition of Requests

A total of 60 extensions were taken during this period. Thirty (30) extensions were taken for “interference with operations” purposes, 29 of which had files with a disposition of “disclosed in part” and one (1) of which had a disposition of “fully disclosed”. Thirty (30) extensions were taken for “consultations” listed in the “other” category, 28 of which had files with a disposition of “disclosed in part” and two (2) of which had a disposition of “all disclosed”. A comparison of the types of extensions taken is shown below.

6.2 Length of extensions

Four (4) extensions taken were for between 1 to 15 days and fifty-six (56) extensions taken were for between 16 to 30 days.

PART 7 – Consultations Received from Other Institutions and Organizations

7.1 Consultation received from other Government of Canada Institutions and other Organizations

There was one (1) consultation received from other Government institutions and no consultations received from other organizations.

7.2 Recommendations and Completion Time for Consultations Received from other Government of Canada Institutions

There was one (1) consultation received from other Government institutions which was disclosed in part and completed within 0 to 15 days.

7.3 Recommendations and Completion Time for Consultations Received from other Organizations

There were no consultations received from other organizations.

PART 8 – Completion Time of Consultations on Cabinet Confidences

8.1 Requests with Legal Services

There was no consultation on Cabinet Confidences with Legal Services this past fiscal year.

8.2 Requests with Privy Council Office

There was no consultation on Cabinet Confidences with the Privy Council Office this past fiscal year.

PART 9 – Complaints and Investigations Notices Received

Three (3) complaints were received for this reporting period.

PART 10 – Privacy Impact Assessments (PIA) and Personal Information Banks (PIB)

10.1 Privacy Impact Assessments

No Privacy Impact Assessments were completed or modified during this reporting period.

10.2 Institution-specific and Central Personal Information Banks

No new Personal Information Banks were created or modified during this reporting period. Three (3) institutional Personal Information Banks exist.

PART 11 – Material Privacy Breaches

11.1 Material Privacy Breaches reported

There were no Material Privacy Breaches reported during this reporting period.

11.2 Non-Material Privacy Breaches reported

There were six (6) non-material privacy breaches reported during this reporting period.

PART 12 – Resources Related to the Privacy Act

Total salary costs associated with the Privacy Act activities were $347,072 for 2024-2025. The overtime costs were $1,827. The associated full-time equivalency (FTE) human resources were 3.60. Included in the salary costs attributable to the Privacy Act are the costs associated with the administration of the Act. These are the salary costs of individuals working on privacy activities, such as processing privacy requests, assisting the Office of the Privacy Commissioner in complaint investigations, processing consultation requests from other government institutions, preparing reports, maintaining statistics and working on privacy policy initiatives. A comparison of costs associated with the Privacy Act is shown below.

Formal/Informal Interface

The PBC shares a great deal of file information with offenders in contexts other than the processing of requests under the Privacy Act. For example, information is shared during hearings with offenders and when notifying them of its decisions. In carrying out such duties, the Board must comply with the Corrections and Conditional Release Act (CCRA). Section 141 of the CCRA states that at least 15 days before the review date of an offender, the PBC shall provide or cause to be provided to the offender, in writing, the information that is to be considered in the review of the case or a summary of that information. This process, therefore, may allow for the sharing of more information than would be otherwise permitted under the provisions of the Privacy Act.

Furthermore, the CCRA gives Canadian citizens access to certain information about offenders. The CCRA provides for:

1. a Decision Registry containing all conditional release decisions made by the PBC since November 1992, and which is accessible to anyone who demonstrates an interest in a specific case or group of cases, by written request;
2. access by victims to some offender-related information; and
3. members of the public to attend PBC hearings.

This law has an important impact on the disclosure of offender-related personal information to third parties.

Training Activities

The PBC requires all of its public service staff to complete the online course “Access to Information and Privacy Fundamentals” as part of their Collective Learning Roadmap. During the 2024-2025 exercise, a training session on ATIP was also delivered to two new Regional Vice-Chairpersons (Ontario and Quebec).

Revised PBC-related Policies, Guidelines and Procedures

The ATIP Unit will continue to be involved in the creation and revision of forms throughout the PBC.

The PBC did not receive authority for a new collection or new consistent use of the SIN in 2024-2025.

Initiatives and Projects to Improve Privacy

In order to improve access to personal information and privacy within the PBC, we have been working on implementing the following activities:

• looking at improvements to modernize the delivery of services by promoting the Government of Canada ATIP Online Service to requesters;
• updating our current ATIP digital software.

Key Issues and Actions Taken on Complaints

Three (3) complaints were received for this reporting period, and we are actively in communication with the Privacy Commissioner to resolve them.

Material Privacy Breaches

There were no material privacy breaches during this reporting period.

Privacy Impact Assessments

No Privacy Impact Assessments were completed during this reporting period.

Public Interest Disclosures

There was one (1) disclosure made under 8(2)(m) during this reporting period. There was no disclosure made under 8(5) during this reporting period.

Monitoring the Time to Process Privacy requests and Requests for Correction

The PBC monitors the time to process all privacy requests and requests for correction through the use of a computerized tracking system. Monitoring is done on a weekly basis by the ATIP Manager and reported to the Director, Public Affairs and Partnerships. As the PBC is 99.7% compliant with the legislated timelines set out in the Act, no additional monitoring is required.

ANNEX A: Delegation - Privacy Act

Delegation Order - Privacy Act

By this order made pursuant to section 73(1) of the Privacy Act, I hereby authorize those officers and employees of the Parole Board of Canada occupying, on an acting basis or otherwise, the positions identified within the attached schedule to perform on my behalf any of the powers, duties or functions specified therein.

This delegation replaces and repeals all previous orders.

Dated at the City of Ottawa,
this 31 day of March 2025.

Joanne Blanchard,
Chairperson
Parole Board of Canada

Delegation Order – Privacy Act

Delegation Order – Privacy Regulations