It's perfectly within the authority of a deputy head to do. They're responsible for the human resources, the people management within their departments, so they could do it.
I took your question the other way. The fact that Ottawa is such a small town in many ways, and people know what you're working on, is all the more reason to make sure that identity is protected, that you do do things confidentially, and that there is the Privacy Act.