Information & Ethics committee  We have a privacy management framework in the agency. We have a chief privacy officer as part of that privacy management framework. The pillar is privacy by design. We monitor the completion of things like privacy assessments. In fact, we have key performance indicators that measure that.

Information & Ethics committee  Yes, and it's also with the Office of the Privacy Commissioner. Our privacy management framework takes all dimensions of privacy into account and monitors all portions of that from a policy perspective as well as a practice perspective.

Information & Ethics committee  Yes. Privacy is an obligation of all parts of the agency. Senior management is regularly engaged in those obligations and understands those roles and responsibilities.

Information & Ethics committee  Thank you for the question. Both the OPC and Treasury Board sent follow-up questions regarding that. We indicated that we use the forensic tools for the purposes of criminal investigations. We did have a PIA in place. In fact, the Privacy Commissioner acknowledged receipt of that PIA and had no recommendations on it at the time.

Information & Ethics committee  PIAs are submitted to both Treasury Board and the OPC, so they have an opportunity to provide feedback to us on those things.