Privacy Impact Assessment for the Workforce Organization and Classification
The Classification Program provides for organization and evaluation of work in the core public administration, upon which compensation can be mapped. The Chief Human Resource Officer set training requirements and provides for accreditation. Accredited advisors can evaluate work and render classification decisions.
Why a privacy impact assessment was completed
As of April 1st 2024, the Classification Program started offering its classification courses through the Canada School of Public Service (CSPS) platform, necessitating the exchange of personal information for registration and administration of accreditation. This PIA covers this exchange and safekeeping of this information.
Additional information
List any risks identified and the date any corresponding mitigation measures were implemented:
- Lack of an MOU between Treasury Board Secretariate (TBS) and CSPS for the administration of the program – Completed and signed March 7th, 2025
- No planned compliance audit on privacy requirements – Targeting completion September 30th, 2025
- Risk of over collection of personal information within anonymous surveys used to assess program effectiveness – Reassess survey framework by September 30th, 2025
- Participant certification attestation and validation framework– Establish process by September 30th, 2025
- Undocumented privacy management framework for the overall management of personal information – Document by September 30th, 2025
- Unknown record disposition authority and retention schedule – Established and completed on February 28th, 2025
- Privacy awareness for program administrators – Privacy training to be completed by September 30th, 2025
- Unknown status of information security framework – Status of formal assessment confirmed February 27th, 2025
- Unknown status of multi-institutional privacy breach response plan and procedures – Part of existing MOU and additional measure to be included in the program’s Privacy Protocol - to complete by September 30th, 2025
- Partial program specific privacy notice – Implement Program specific privacy notice at Annex D of PIA by September 30th, 2025
- Unclear process for individuals to communicate with the program regarding the handling of their personal information – Develop instructions to include with privacy notice by September 30th, 2025
Related personal information banks
Workforce Organization and Classification (WOC) Classification Program – Learning (CPL)
Bank number: TBS PCE 820
For more information about this privacy impact assessment
Therese.Ngo@tbs-sct.gc.ca, Executive Director, Organization and Evaluation of Work, Office of the Chief Human Resources Officer, TBS.