I can't speak about specific instances, but the informing of an individual would be dependent on the outcome of the risk assessment that we did based on the criteria in that fact case.
Evidence of meeting #18 for Access to Information, Privacy and Ethics in the 41st Parliament, 2nd Session. (The original version is on Parliament’s site, as are the minutes.) The winning word was cra.
A recording is available from Parliament.