I don't believe it's 100%, but I'd say it's for the majority of programs with personal information, especially the ones with sensitive personal information.
The assistant commissioner talked about our work with CATSA. We worked very closely with them on the development and implementation of the body scanner and so on.
So in the majority of cases, yes, it is done.