I imagine in both cases, because I know it's Shared Services Canada but in your case as well, that those who have access to the information are a small, limited group of people who have been properly trained on what they're supposed to do in terms of protecting privacy rights.
On February 13th, 2024. See this statement in context.