Information & Ethics committee  When deciding where an audit is needed most, we look at the volume of information the institution has, as well as information disclosure practices and risks. Of course, we take into account the number of complaints in an area and the nature of the personal information being colle

Information & Ethics committee  The most recent were, as you know, FINTRAC and Transport Canada, with respect to the passenger protect program, which includes the no-fly list. In the past, yes, the Canada Border Services Agency has been the subject of an audit and follow-up. In our annual reports, Passport Cana

Information & Ethics committee  Of course, that is a key consideration for us, and we will definitely take it into account when establishing our audit plan.

Information & Ethics committee  It is part of our information technologies priority.

Information & Ethics committee  Yes. It is the container for what we work to protect. We are addressing the matter in a number of ways. First, we are carrying out two audits on wireless communications and electronic infrastructure. And, as part of our review of privacy impact assessments, we are focusing on spe

Information & Ethics committee  According to our mandate, we work on a case-by-case basis. For example, if one of our investigations reveals weaknesses in a department's electronic infrastructure, we make recommendations. Our annual report identified two cases where our recommendations led to better electronic

Information & Ethics committee  In one case, a department had a leak of personal information. We realized that access procedures were not adequate, so much so that over 1,000 people had access to the personal information of a single Canadian who was in custody abroad. Obviously, that is inappropriate. We made r

Information & Ethics committee  Absolutely, and some departments do that. I think it's fair to say that in the end they benefit from it as much as Canadians, because we provide advice and they can therefore change their draft legislation and make it more privacy sensitive--

Information & Ethics committee  In Canada, of course, as you know, the efforts in that regard took the form of Bill C-46 and Bill C-47, which died on the order paper. That would not allow interception of communications without a warrant. What that would allow is for an Internet service provider to give the law

Information & Ethics committee  We have two main concerns. There are more details in the letter that I referred to earlier. The two main concerns are this power to get from Internet service providers, without a warrant, a customer name and address, and second, we find that the oversight governance structure pr

Information & Ethics committee  It depends. For example, through the privacy impact assessment review process, the RCMP will submit some initiatives to us. We review them to ensure that privacy is respected. We will make recommendations and we are often very successful.

Information & Ethics committee  In the legislative drafting, sometimes we are consulted, but in the case of Bill C-46 and Bill C-47, we had been consulted throughout the years in the preparation of this legislation. But then it was tabled and we reacted after it was tabled.

Information & Ethics committee  We have made specific recommendations. We have specifically asked that the authorities who request these powers justify why they need them with greater clarity. We also requested that there be more definition around the oversight process.

Information & Ethics committee  Each task force has a matrix of success factors, so deliverables. It depends on the issue. In genetics, for example, the workshops that we organized and contributed to will allow us to review one of our outdated documents in order to take stock of the latest developments in genet

Information & Ethics committee  Our participation—