Publications – Access to information and privacy
On this page, you will find access to information and privacy (ATIP) publications. These include:
- annual reports to Parliament
- stakeholder engagement reports (for example, a “What we heard” report)
- privacy impact assessment (PIA) summaries
- technology assessment and privacy implications (TAPI) summaries
For more information about these publications, please contact us.
Annual reports to Parliament
Annual reports submitted to Parliament pursuant to the Access to Information Act and the Privacy Act.
- Annual Report to Parliament on the Administration of the Access to Information Act – 2024-25
- Annual Report to Parliament on the Administration of the Privacy Act – 2024-25
- Annual Report to Parliament on the Administration of the Access to Information Act – 2023-24
- Annual Report to Parliament on the Administration of the Privacy Act – 2023-24
- Annual Report to Parliament on the Administration of the Access to Information Act – 2022-23
- Annual Report to Parliament on the Administration of the Privacy Act – 2022-23
- Annual Report to Parliament on the Administration of the Access to Information Act – 2021-22
- Annual Report to Parliament on the Administration of the Privacy Act – 2021-22
- Annual Report to Parliament on the Administration of the Access to Information Act – 2020-21
- Annual Report to Parliament on the Administration of the Privacy Act – 2020-21
- Annual Report to Parliament on the Administration of the Access to Information Act – 2019-20
- Annual Report to Parliament on the Administration of the Privacy Act – 2019-20
- Annual Report to Parliament on the Administration of the Access to Information Act – 2018-19
- Annual Report to Parliament on the Administration of the Privacy Act – 2018-19
- Annual Report to Parliament on the Administration of the Access to Information Act – 2017-18
- Annual Report to Parliament on the Administration of the Privacy Act – 2017-18
- Annual Report to Parliament on the Administration of the Access to Information Act – 2016-17
- Annual Report to Parliament on the Administration of the Privacy Act – 2016-17
- Annual Report to Parliament on the Administration of the Access to Information Act – 2015-16
- Annual Report to Parliament on the Administration of the Privacy Act – 2015-16
ATIP Client Survey
Privacy Impact Assessment summaries
Privacy Impact Assessments (PIA) are a planning tool used by government organizations to assess potential privacy risks in new or changing programs. They support responsible decision making by helping teams identify how personal information will be collected, used and protected.
- Privacy Impact Assessment for the Conflict of Interest and Declaration System
- Departmental security – ID card section
- Privacy Impact Assessment Summary of the Digital Communications and Collaboration (DCC) Service
- Privacy Impact Assessment Summary for the Electronic Procurement and Payment System (EPP)
- Enterprise Contact Centre Service - Rogers (ECCS-R)
- Privacy Impact Assessment Summary for the Enterprise Mobile Device Management (EMDM) service
- Enterprise Mobile Device Management Evolution solution
- Enterprise Security Service Edge
- GCKey - Government of Canada Branded Credential Service
- Government Electronic Directory Services 2.0 (GEDS 2.0)
- Privacy Impact Assessment for the Hosted Contact Centre Service
- Privacy Impact Assessment Summary for the IT Service Management Tool
- Privacy Impact Assessment Summary for the Network Monitoring using Secure Cloud Enablement and Defense (SCED) – Enterprise Security Service Edge (ESSE)
- Privacy Impact Assessment Summary for the Next Generation HR and Pay Pilot
- SecureKey Concierge – Credential Broker Service
- Privacy Impact Assessment Summary for the SSC Enterprise Perimeter Security Service
- Privacy Impact Assessment Summary for the Workplace Communication Services
Technology Assessment for Privacy Implications summaries
The Technology Assessment for Privacy Implications (TAPI) is a templated assessment tool created by SSC to help government organizations identify privacy risks when they plan to use new technologies.
- Shared Services Canada’s technology assessment for privacy implications: Contact Centre as a Service (CCaaS) – Bell/Genesys Cloud CX Platform
- Shared Services Canada’s technology assessment for privacy implications: Microsoft 365 E5 software-as-a-service suite
- Shared Services Canada’s technology assessment for privacy implications: EndPoint Consumer Features: Samsung SmartThings Find
- Shared Services Canada’s technology assessment for privacy implications: EndPoint Consumer Features: Apple AirTag and Find My Functionality
- Shared Services Canada’s technology assessment for privacy implications: Contact Centre as a Service (CCaaS) – TTEC Solution