Human Capital Management Branch Curriculum Vitae Database Initiative: Privacy impact assessment summary
On this page
- Description
- Why a privacy impact assessment was completed
- Additional information
- Related personal information banks
- For more information about this privacy impact assessment
Description
In summer 2025, the Human Capital Management Branch at Public Services and Procurement Canada (PSPC) created a centralized Curriculum Vitae (CV) database to better manage the large volume of résumés they receive. The Workforce Strategies and Programs team developed a CV Submission Form to collect key candidate details, making it easier to filter and find suitable candidates for managers. This activity launched in September 2025 and focuses on supporting at‑level recruitment.
Why a privacy impact assessment was completed
The creation and administration of a centralized CV database is a new activity using personal information that will eventually be used to make hiring decisions about individuals. For this reason, completing a privacy impact assessment (PIA) is necessary in order to remain compliant with the Treasury Board of Canada Secretariat Directive on Privacy Practices.
Additional information
This PIA identified 7 risks and 1 compliance issue.
Five of these risks relate to the procedures in place for collecting and disclosing personal information. The remaining 2 risks relate to the documentation and retention of personal information.
The program worked with PSPC’s Privacy Management Division to modify their tools and procedures for this activity. These corrective measures were completed in April 2026.
The PIA also identified 1 compliance issue related to PSPC’s internal policy instruments about personal information. These policy instruments will be updated by the Access to Information and Privacy Directorate by summer 2027.
Related personal information banks
Standard class of records: Recruitment and staffing, PRN 920
Standard personal information bank: Application for employment, PSU 911
Standard classes of records: Classification of positions, PRN 919; and Recruitment and staffing, PRN 920
Standard personal information bank: Staffing, PSE 902
Standard class of records: Communications, PRN 941
Standard personal information bank: Internal communications, PSU 915
For more information about this privacy impact assessment
For more information about this assessment, you can contact PSPC’s Privacy Management Division at tpsgc.vieprivee-privacy.pwgsc@tpsgc-pwgsc.gc.ca.