I apologize, but I'm not immediately sure of the report of the audit to which you're referring. I know, for example, that FINTRAC gets assessed by the Office of the Privacy Commissioner every few years.
On June 1st, 2021. See this statement in context.