Following your letter, on March 19 I announced that I will be investigating allegations of privacy concerns following a complaint against the Canada Border Services Agency related to the development of the ArriveCAN mobile app. The investigation will examine contracting practices related to ArriveCAN and, more specifically, the measures that were in place to protect personal information during the development of the app, in order to assess compliance with the Privacy Act, which applies to federal departments and agencies.
The investigation is ongoing under the Privacy Act. I have to maintain the details of that investigation confidential while it is ongoing, but I look forward to completing it and to making the findings public once that is done.