Information & Ethics committee  Since this was something that happened at a very high level, I'm going to ask Ms. Juneau to explain the details of the relevant procedure. There is indeed a procedure within the Agency. We work with the Agency's security officer, who is our first point of contact. Incidents must

Information & Ethics committee  Obviously, the Canada Revenue Agency takes into account the sensitivity of the information that's disclosed in assessing the severity of the breach. We have medical information, financial information, and personal identifiers like social insurance numbers. Those kinds of things w

Information & Ethics committee  No, it's 40,000.

Information & Ethics committee  Mr. Chair, if I may add, in response to the question, specifically for the Canada Revenue Agency, the controls go even further than that. Twice a year, we do have a mechanism whereby we assess our employees' access to relevant applications and portions of the service. Even for Sh

Information & Ethics committee  There are two parts to that question. We do have about 350 information sharing agreements. About 160 of these are with 46 federal organizations, and those are information agreements to share information across departments, and 186 are with provincial or territorial departments. T

Information & Ethics committee  I probably wouldn't go as far as saying we'd disagree with the Commissioner. I think the current statutory framework doesn't provide for anything in the nature of requiring a government body to pay damages. Naturally, if the statutory framework undergoes changes, the wording on t

Information & Ethics committee  That's my understanding.

Information & Ethics committee  Thank you, Mr. Chair and committee members. My name is Maxime Guénette. I'm the Assistant Commissioner of the Public Affairs Branch, and Chief Privacy Officer of the Canada Revenue Agency. With me today is Marie-Claude Juneau, Director of the Access to Information and Privacy D