I can try. I don't do PIAs myself at Justice. Typically, PIAs are done when an institution, like Justice, decides to make some changes to a program or develops a new program that involves personal information. Under the policy it is required that we study the effect on privacy of these changes to a program or of this new program. That involves going through a series of questions and looking at the impact, what information we need, whether we really need that. We talk to stakeholders, and of course we consult with the Privacy Commissioner.
On May 27th, 2008. See this statement in context.