Information & Ethics committee  I guess that's really more of a comment about the access to information legislation rather than about privacy. Is the solution to give them the option to apply under privacy and then it's free, or is the solution to amend the legislation on access to information? For instance, th

Information & Ethics committee  Yes, and I would just reiterate that we are trying to put—remember we talked about it last time—more information up online so people can go in and access their own cases. The more we can do that, the easier it will be.

Information & Ethics committee  It's the same. Of the thousands that we processed last year, we had 55 material privacy breaches. They were all reported to the OPC and to Treasury Board Secretariat, but also the individuals were notified by letter. If the mandatory reporting meant that we had to provide all of

Information & Ethics committee  Some of those, of course, would be transformed, if I can describe it this way, from ATI requests into P, notwithstanding, I think, that with the $2.8 million, and the fact that it's free, and you could do it online from anywhere.... I don't know that we would see a corresponding

Information & Ethics committee  It's sixty-nine per cent within 30 days, 27% in 31 to 60 days, and the balance, in excess of 60 days, would be about 4% of our 15,292 requests.

Information & Ethics committee  I think what is most useful in that process, which includes a necessity test, by the way, for a privacy impact assessment—a “necessity of collection” is part of it. In our conversations with, for instance, the Office of the Privacy Commissioner, when we explain what a new program

Information & Ethics committee  The same, as I said in our opening remarks, and in fact we've recently revised our PIA templates and guidelines for the officers writing them. I will say they are lengthy and time-consuming. It's not a simple effort. Even if we're doing, say, seven or eight a year, they can be te

Information & Ethics committee  I would just add that our missions abroad are deemed to be in Canada. For a Canadian embassy in Costa Rica, the servers that are in that mission are deemed to be in Canada.

Information & Ethics committee  Shared Services Canada is responsible, of course, but in fact I thought the same did apply to federal data. Certainly when we're undertaking procurement for systems that will have data about Canadians on them, we specify that the servers need to be in Canada.

Information & Ethics committee  No.

Information & Ethics committee  The acts are all public, and they are online. As I said, about 50 of ours are already online, and we're reviewing to see which others we could put up. The documentation itself isn't classified in any way. There may be parts of it in some instances. You can even read our informati

Information & Ethics committee  We have both agreements under our act, the Immigration and Refugee Protection Act, as well as formal written agreements on information sharing. In fact, a lot of those are online, and you can read them on our website.

Information & Ethics committee  From a bureaucratic perspective, it's always easier if we have legislative authority to do it without having to negotiate a whole separate agreement, if that's what you're suggesting, in order to operate. If we had to write information-sharing agreements among all of us, there ar

Information & Ethics committee  I think that one is fairly self-evident. When I say we're processing 2.8 million applications annually, if even 10% of those people started to make requests for all of their case files, we would have an enormous amount of work to do. To add to what my colleague from the RCMP sai

Information & Ethics committee  I could just say what they said, because, in fact, I think we all approach it the same way. There are really three major aspects: the personnel side, the physical side, and the IT side. We have similar structures in place on the prevention and detection and the auditing to make s