The line is fairly clearly defined in the act. The legislation is quite specific as to the issue of privacy. Personal information cannot be disclosed and can only be stored after permission has been obtained, because this a program requirement. Personal data must be stored very safely and securely. We are required to publish so-called personal information banks, to let Canadians know what type of personal information we have about them and why it is being maintained. Furthermore, the government must turn over any personal information it has on file when the person that information is about so requests.
The Privacy Act is fairly clear. In terms of personal information, the Access to Information Act provides for a number of exemptions from disclosure. If we receive an access to information request concerning personal information, such as the name of a particular person or other information about that person, obviously, obviously we cannot disclose that information and we must deny the request.