Date of Publishing:
Annual Report on the Privacy Act 2023-24
- Date Modified:
Date of Publishing:
Date of Publishing:
The Privacy Act gives individuals the right to access information about themselves that is held by the National Security and Intelligence Review Agency Secretariat, subject to certain specific and limited exceptions. The Privacy Act also protects the privacy of individuals by giving them substantial control over the collection, use, and disclosure of their personal information and by preventing others from having access to that information.
Section 72 of the act requires the head of each government institution to prepare an annual report on the administration of the act within the institution and to submit the report to Parliament.
This report to Parliament, which is prepared and tabled in accordance with section 72 of the Privacy Act, describes the activities of the National Security and Intelligence Review Agency Secretariat in administering the Act during the period of April 1, 2022 to March 31, 2023.
If you require more information or wish to make a request under the Access to Information Act or the Privacy Act, please direct your inquiries to the following:
Access to Information and Privacy Office
National Security and Intelligence Review Agency
P.O. Box 2430, Station “D” Ottawa, Ontario, K1P 5W5
Email: ATIP@nsira-ossnr.gc.ca
Established in July 2019, NSIRA is an independent agency that reports to Parliament and conducts investigations and reviews of the federal government’s national security and intelligence activities.
The NSIRA Secretariat assists NSIRA in fulfilling its mandate. It is the NSIRA Secretariat, headed by an Executive Director, that is the government institution for the purposes of the Privacy Act and the Access to Information Act.
The NSIRA Secretariat supports NSIRA in its dual mandate to conduct reviews and investigations in relation to Canada’s national security or intelligence activities.
NSIRA’s review mandate is broad, as outlined in subsection 8(1) of the National Security and Intelligence Review Agency Act (NSIRA Act). This mandate includes reviewing the activities of both the Canadian Security Intelligence Service (CSIS) and the Communications Security Establishment (CSE), as well as the national security- or intelligence-related activities of any other federal department or agency. This includes, but is not limited to, the national security or intelligence activities of the Royal Canadian Mounted Police (RCMP), the Canada Border Services Agency (CBSA), the Department of National Defence (DND) and Canadian Armed Forces (CAF), Global Affairs Canada (GAC), and the Department of Justice. Further, NSIRA may review any national security or intelligence matters that a minister of the Crown refers to NSIRA.
NSIRA reviews assess whether Canada’s national security and intelligence activities comply with relevant laws, policies, and ministerial directions, and whether they are reasonable and necessary. In conducting its reviews, NSIRA can make any findings or recommendations it considers appropriate.
NSIRA is responsible for investigating national security or intelligence-related complaints from members of the public. As outlined in paragraph 8(1)(d) of the NSIRA Act, NSIRA has the mandate to investigate complaints about:
NSIRA’s ATIP Office is accountable for the development and implementation of effective policies, guidelines, systems, and procedures to ensure that the NSIRA Secretariat meets its responsibilities under the Access to Information Act and the Privacy Act. For the reporting period, the NSIRA ATIP office consisted of:
NSIRA Secretariat Senior General Counsel and Corporate Counsel supported the ATIP Office on an as required basis.
The ATIP Office is responsible for the following:
The NSIRA Secretariat was a party to a service agreement under section 73.1 of the Privacy Act during the reporting period, pursuant to which it received administrative services from the Privy Council Office related to the tabling of the Privacy Act annual report in Parliament. The NSIRA Secretariat was also a party to a service agreement under section 71.1 of the Act, pursuant to which it received ATIP Online services from the Treasury Board of Canada Secretariat.
To assist the ATIP Office in meeting its overall legislative obligations, the NSIRA Secretariat relied on a collaborative internal group of subject matter points of contact from all its branches.
The Executive Director, as the Head of the NSIRA Secretariat, is responsible for the administration of the Privacy Act within the institution. Pursuant to section 73 of the Privacy Act, the Executive Director has delegated the ATIP Manager and ATIP Officer – as well as persons acting in these positions – to perform powers, duties, and functions for the administration of the Act. These positions have limited delegation of authority under the Act and the Access to Information Act, in accordance with the delegation of authority instrument approved by the Executive Director in August 2022. The Privacy Act Delegation Order can be found in Appendix A.
During the reporting period, from April 1, 2022 to March 31, 2023, the NSIRA Secretariat received 12 formal requests. All 12 requests were completed during the reporting period. No requests were carried over from the previous reporting period.
The institution’s 2022-2023 Statistical Report on the Privacy Act and Supplemental ATIP Statistical Report for 2022-2023 are found in Appendices B and C.
During the reporting period, the NSIRA Secretariat invoked extensions in processing 5 requests: 3 extensions of 31 to 60 days, and 2 extensions of 61 to 120 days, all of which included extensions necessary to consult with third parties.
Of the requests completed during the reporting period:
The NSIRA Secretariat’s responses to many requests required intensive review of complex records, including extensive internal and external consultations. In 2022-23, the NSIRA Secretariat’s on-time response rate decreased to 58.33% from 71% in the previous reporting year.
No consultations were received by the NSIRA Secretariat during the reporting period.
During the reporting period, the NSIRA Secretariat was not affected by measures related to the COVID‑19 pandemic.
During the reporting period, the NSIRA Secretariat received 9 privacy complaints, 2 of which were related to access. All 9 complaints remained active on March 31, 2023.
Moreover, one privacy breach-related investigation initiated by the Privacy Commissioner in fiscal year 2020-2021 continued during the reporting period and remained active on March 31, 2023.
During the reporting period, privacy training requirements were identified for all NSIRA Secretariat employees, as well as for those with functional or delegated responsibility for the administration of the Privacy Act, in accordance with the Directive on Personal Information Requests and Correction of Personal Information. The Canada School of Public Service course Access to Information and Privacy Fundamentals (COR502) was included as mandatory training in all employees’ training curriculum.
In addition, an all-staff lunch and learn session was held in August 2022 to provide employees with a debrief of the International Association of Privacy Professionals Privacy Conference.
The NSIRA Secretariat updated the Delegation Order during the reporting period and also established its internal Directive on Managing Security and Safety Events in March 2023, which provides for coordination with the ATIP Office and Office of Primary Interest when a security event involves a suspected or actual privacy breach.
The NSIRA Secretariat’s IT team began work to develop an ATIP software tool for our classified and unclassified systems. The NSIRA Secretariat also signed a memorandum of understanding with TBS to make full use of ATIP Online and implemented the tool during the reporting period.
As previously outlined, all 9 complaints received during the reporting period remained active on March 31, 2023. The NSIRA Secretariat meaningfully engaged with the Office of the Privacy Commissioner on all active investigations and disclosed additional records in 1 of the 2 access-related complaints.
In the 2022-2023 reporting period, no material privacy breaches occurred.
The NSIRA Secretariat did not complete any PIAs in 2022-2023. During the reporting period, the NSIRA Secretariat received feedback from TBS for its PIA on the creation of NSIRA — which had been submitted to TBS in FY 2021-2022 — and undertook revisions to the PIA. During the reporting period, the NSIRA Secretariat also launched a PIA exercise pertaining to its investigations-related activities.
No disclosures were made pursuant to paragraph 8(2)(m) of the Privacy Act during the reporting period.
In order to meet the legislative deadlines for privacy requests, deadlines for individual requests are strictly monitored by using MS Outlook reminders. The ATIP Manager organizes ad hoc meetings to discuss request-related activities (such as whether inter-institutional consultations are necessary), determine deadlines and ensure that all team members are informed of the status of files. At bi-weekly team meetings with the Senior General Counsel and Corporate Counsel, the ATIP Manager raises and discusses compliance with legislative and policy obligations. The Executive Director is also briefed on all ATIP compliance issues.
For contracts issued during the reporting period, the NSIRA Secretariat included a Standard Procurement Clause on the Handling of Personal Information or a Supplemental General Condition on Personal Information from Public Services and Procurement Canada’s Standard Acquisition Clauses and Conditions Manual.
Access to Information Act Designation Order
The Executive Director of the National Security and Intelligence Review Agency, pursuant to section 95 of the Access to Information Act, hereby designates the persons holding the positions or acting in these positions, set out in the schedule hereto to exercise the powers and perform the duties and functions of the Executive Director of the National Security and Intelligence Review Agency as the head of a government institution under the section of the Access to Information Act set out in the schedule opposite each position.
Privacy Act Designation Order
The Executive Director of the National Security and Intelligence Review Agency, pursuant to section 73 of the Privacy Act*, hereby designates the persons holding the positions or acting in these positions, set out in the schedule hereto to exercise the powers and perform the duties and functions of the Executive Director of the National Security and Intelligence Review Agency as the head of a government institution under the section of the Privacy Act set out in the schedule opposite each position.
Name of institution: National Security and Intelligence Review Agency
Reporting period: 2022-04-01 – 2023-03-31
Number of Requests | |
---|---|
Received during reporting period | 12 |
Outstanding from previous reporting period | 0 |
Outstanding from more than one reporting period | 0 |
Total | 12 |
Closed during reporting period | 12 |
Carried over to next reporting period | 0 |
Carried over within legislated timeline | 0 |
Carried over beyond legislated timeline | 0 |
Source | Number of Requests |
---|---|
Online | 10 |
2 | |
0 | |
In person | 0 |
Phone | 0 |
Fax | 0 |
Total | 12 |
Number of Requests | |
---|---|
Received during reporting period | 0 |
Outstanding from previous reporting periods | 0 |
Outstanding from more than one reporting period | 0 |
Total | 0 |
Closed during reporting period | 0 |
Carried over to next reporting period | 0 |
Source | Number of Requests |
---|---|
Online | 0 |
0 | |
0 | |
In person | 0 |
Phone | 0 |
Fax | 0 |
Total | 0 |
Completion Time | |||||||
---|---|---|---|---|---|---|---|
1 to 15 days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More than 365 Days | Total |
0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Less Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed | 1001-5000 Pages Processed | More Than 5000 Pages Processed | |||||
---|---|---|---|---|---|---|---|---|---|
Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed |
0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disposition of Requests | Completion Time | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
All disclosed | 0 | 1 | 0 | 0 | 0 | 0 | 0 | 1 |
Disclosed in part | 0 | 1 | 2 | 1 | 0 | 0 | 0 | 4 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
No records exist | 1 | 4 | 1 | 1 | 0 | 0 | 0 | 7 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 1 | 6 | 3 | 2 | 0 | 0 | 0 | 12 |
Section | Numbers of Requests |
---|---|
18(2) | 0 |
19(1)(a) | 0 |
19(1)(b) | 0 |
19(1)(c) | 0 |
19(1)(d) | 0 |
19(1)(e) | 0 |
19(1)(f) | 0 |
20 | 0 |
21 | 1 |
22(1)(a)(i) | 3 |
22(1)(a)(ii) | 0 |
22(1)(a)(iii) | 0 |
22(1)(b) | 4 |
22(1)(c) | 0 |
22(2) | 0 |
22.1 | 0 |
22.2 | 0 |
22.3 | 0 |
22.4 | 0 |
23(a) | 0 |
23(b) | 0 |
24(a) | 0 |
24(b) | 0 |
25 | 0 |
26 | 0 |
27 | 2 |
27.1 | 0 |
28 | 0 |
Section | Numbers of Requests |
---|---|
69(1)(a) | 0 |
69(1)(b) | 0 |
69.1 | 0 |
70(1) | 0 |
70(1)(a) | 0 |
70(1(b) | 0 |
70(1)(c) | 0 |
70(1)(d) | 0 |
70(1)(e) | 0 |
70(1)(f) | 0 |
70.1 | 0 |
Paper | Electronic | Other | |||
---|---|---|---|---|---|
E-record | Data set | Video | Audio | ||
0 | 5 | 0 | 0 | 0 | 0 |
Number of Pages Processed | Number of Pages Disclosed | Number of Requests |
---|---|---|
795 | 795 | 5 |
Disposition | Less Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed | 1001-5000 Pages Processed | More Than 5000 Pages Processed | |||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | |
All disclosed | 1 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 3 | 150 | 0 | 0 | 1 | 644 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 4 | 151 | 0 | 0 | 1 | 644 | 0 | 0 | 0 | 0 |
Number of Minutes Processed | Number of Minutes Disclosed | Number of Requests |
---|---|---|
0 | 0 | 0 |
Disposition | Less Than 60 Minutes Processed | 60 – 120 Minutes Processed | More than 120 Minutes Processed | |||
---|---|---|---|---|---|---|
Number of Requests | Minutes Processed | Number of Requests | Minutes Processed | Number of Requests | Minutes Processed | |
All disclosed | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 |
Declined to act with the approval of the Information Commissioner | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 |
Number of Minutes Processed | Number of Minutes Disclosed | Number of Requests |
---|---|---|
0 | 0 | 0 |
Disposition | Less Than 60 Minutes Processed | 60 – 120 Minutes Processed | More than 120 Minutes Processed | |||
---|---|---|---|---|---|---|
Number of Requests | Minutes Processed | Number of Requests | Minutes Processed | Number of Requests | Minutes Processed | |
All disclosed | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 |
Disposition | Consultation Required | Assessment of Fees | Legal Advice Sought | Other | Total |
---|---|---|---|---|---|
All disclosed | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 |
Requests closed within legislated timelines | |
---|---|
Number of requests closed within legislated timelines | 7 |
Percentage of requests closed within legislated timelines (%) | 58.33333333 |
Number of Requests Closed Past the Legislated Timelines | Principal Reason | |||
---|---|---|---|---|
Interference with Operations/Workload | External Consultation | Internal Consultation | Other | |
5 | 0 | 3 | 0 | 2 |
Number of Days Past Legislated Timelines | Number of Requests Past Legislated Timeline Where No Extension Was Taken | Number of Requests Past Legislated Timeline Where an Extension Was Taken | Total |
---|---|---|---|
1 to 15 Days | 0 | 1 | 1 |
16 to 30 Days | 1 | 0 | 1 |
31 to 60 Days | 1 | 1 | 2 |
61 to 120 Days | 1 | 0 | 1 |
121 to 180 Days | 0 | 0 | 0 |
181 to 365 Days | 0 | 0 | 0 |
More than 365 Days | 0 | 0 | 0 |
Total | 3 | 2 | 5 |
Translation Requests | Accepted | Refused | Total |
---|---|---|---|
English to French | 0 | 0 | 0 |
French to English | 0 | 0 | 0 |
Total | 0 | 0 | 0 |
Paragraph 8(2)(e) | Paragraph 8(2)(m) | Subsection 8(5) | Total |
---|---|---|---|
0 | 0 | 0 | 0 |
Disposition for Correction Requests Received | Number |
---|---|
Notations attached | 0 |
Requests for correction accepted | 0 |
Total | 0 |
Number of requests where an extension was taken | 15(a)(i) Interference with operations | 9(1)(b) Consultation | 9(1)(b) Consultation | |||||
---|---|---|---|---|---|---|---|---|
Further review required to determine exemptions | Large volume of pages | Large volume of requests | Documents are difficult to obtain | Cabinet Confidence Section (Section 70) | External | Internal | ||
3 | 0 | 1 | 0 | 0 | 0 | 2 | 0 | 0 |
Length of Extensions | 15(a)(i) Interference with operations | 9(1)(b) Consultation | 9(1)(b) Consultation | |||||
---|---|---|---|---|---|---|---|---|
Further review required to determine exemptions | Large volume of pages | Large volume of requests | Documents are difficult to obtain | Cabinet Confidence Section (Section 70) | External | Internal | ||
1 to 15 days | 0 | 1 | 0 | 0 | 0 | 2 | 0 | 0 |
16 to 30 days | 0 | 0 | 0 | 0 | 0 | 3 | 0 | 0 |
31 days or greater | 0 | |||||||
Total | 0 | 1 | 0 | 0 | 0 | 2 | 0 | 0 |
Consultations | Other Government of Canada Institutions | Number of Pages to Review | Other Organizations | Number of Pages to Review |
---|---|---|---|---|
Received during reporting period | 0 | 0 | 0 | 0 |
Outstanding from the previous reporting period | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 |
Closed during the reporting period | 0 | 0 | 0 | 0 |
Carried over within regotiated timelines | 0 | 0 | 0 | 0 |
Carried over beyond negotiated timelines | 0 | 0 | 0 | 0 |
Recommendation | Number of Days Required to Complete Consultation Requests | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
Disclose entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclose in part | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Exempt entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Exclude entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Consult other institution | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Other | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Recommendation | Number of Days Required to Complete Consultation Requests | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
Disclose entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclose in part | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Exempt entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Exclude entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Consult other institution | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Other | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Number of Days | Fewer Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed | 1001-5000 Pages Processed | More Than 5000 Pages Processed | |||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | |
1 to 15 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
16 to 30 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
31 to 60 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
61 to 120 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
121 to 180 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
181 to 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
More than 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Number of Days | Fewer Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed | 1001-5000 Pages Processed | More Than 5000 Pages Processed | |||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | |
1 to 15 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
16 to 30 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
31 to 60 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
61 to 120 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
121 to 180 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
181 to 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
More than 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Section 31 | Section 33 | Section 35 | Court action | Total |
---|---|---|---|---|
1 | 8 | 0 | 0 | 9 |
Number of PIA(s) completed | Number of PIAs modified |
---|---|
0 | 0 |
Personal Information Banks | Active | Created | Terminated | Modified |
---|---|---|---|---|
Institution-specific | 0 | 0 | 0 | 0 |
Central | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 |
Number of material privacy breaches reported to TBS | Number of material privacy breaches reported to OPC |
---|---|
0 | 0 |
Number of non-material privacy breaches |
---|
0 |
Expenditures | Amount |
---|---|
Salaries | $60,000 |
Overtime | $0 |
Goods and Services | $5,000 |
Professional services contracts | $5,000 |
Other | $0 |
Total | $65,000 |
Resources | Person Years Dedicated to Access to Information Activities |
---|---|
Full-time employees | 0.000 |
Part-time and casual employees | 1.000 |
Regional Staff | 0.000 |
Consultants and agency personnel | 0.500 |
Students | 0.000 |
Total | 1.500 |
Note: Enter values to three decimal places.
Number of weeks | |
---|---|
Able to receive requests by mail | 52 |
Able to receive requests by email | 52 |
Able to receive requests through the digital request service | 52 |
No capacity | Partial Capacity | Full capacity | Total | |
---|---|---|---|---|
Unclassified Paper Records | 0 | 0 | 52 | 52 |
Protected B Paper Records | 0 | 0 | 52 | 52 |
Secret and Top Secret Paper Records | 0 | 0 | 52 | 52 |
No capacity | Partial Capacity | Full capacity | Total | |
---|---|---|---|---|
Unclassified Paper Records | 0 | 0 | 52 | 52 |
Protected B Paper Records | 0 | 0 | 52 | 52 |
Secret and Top Secret Paper Records | 0 | 0 | 52 | 52 |
3.1 Number of open requests that are outstanding from previous reporting periods.
Fiscal Year Open Requests Were Received | Open Requests that are Within Legislated Timelines as | Open Requests that are Beyond Legislated Timelines as of March 31, 2023 | Total |
---|---|---|---|
Received in 2022-23 | 0 | 0 | 0 |
Received in 2021-22 | 0 | 0 | 0 |
Received in 2020-21 | 0 | 0 | 0 |
Received in 2019-20 | 0 | 0 | 0 |
Received in 2018-19 | 0 | 0 | 0 |
Received in 2017-18 | 0 | 0 | 0 |
Received in 2016-17 | 0 | 0 | 0 |
Received in 2015-16 | 0 | 0 | 0 |
Received in 2014-15 | 0 | 0 | 0 |
Received in 2013-14 or earlier | 0 | 0 | 0 |
3.2 Number of open complaints with the Privacy Commissioner of Canada that are outstanding from previous reporting periods
Fiscal Year Open Complaints were received by institutions | Open Requests that are Within Legislated Timelines as |
---|---|
Received in 2022-23 | 9 |
Received in 2021-22 | 0 |
Received in 2020-21 | 0 |
Received in 2019-20 | 0 |
Received in 2018-19 | 0 |
Received in 2017-18 | 0 |
Received in 2016-17 | 0 |
Received in 2015-16 | 0 |
Received in 2014-15 | 0 |
Received in 2013-14 or earlier | 0 |
Total | 9 |
Has your institution begun a new collection or a new consistent use of the SIN in 2022-23? |
---|
No |
How many requests were received from confirmed foreign nationals outside of Canada in 2022-2023? |
---|
0 |
Date of Publishing:
The Privacy Act gives individuals the right to access information about themselves that is held by the National Security and Intelligence Review Agency Secretariat, subject to certain specific and limited exceptions. The Privacy Act also protects the privacy of individuals by giving them substantial control over the collection, use, and disclosure of their personal information and by preventing others from having access to that information.
Section 72 of the act requires the head of each government institution to prepare an annual report on the administration of the act within the institution and to submit the report to Parliament.
This report to Parliament, which is prepared and tabled in accordance with Section 72 of the Privacy Act describes the activities of the National Security and Intelligence Review Agency Secretariat in administering the Act during the period of April 1, 2021 to March 31, 2022.
If you require more information or wish to make a request under the Access to Information Act or the Privacy Act, please direct your inquiries to the following:
Access to Information and Privacy Office
National Security and Intelligence Review Agency
P.O. Box 2430, Station “D” Ottawa, Ontario, K1P 5W5
Email: ATIP@nsira-ossnr.gc.ca
Established in July 2019, NSIRA is an independent agency that reports to Parliament and conducts investigations and reviews of the federal government’s national security and intelligence activities.
The NSIRA Secretariat assists the Review Agency in fulfilling its mandate.
NSIRA has a dual mandate to conduct reviews and investigations in relation to Canada’s national security or intelligence activities.
NSIRA’s review mandate is broad, as outlined in subsection 8(1) of the National Security and Intelligence Review Agency Act (NSIRA Act). This mandate includes reviewing the activities of both the Canadian Security Intelligence Service (CSIS) and the Communications Security Establishment (CSE), as well as the national security- or intelligence-related activities of any other federal department or agency. This includes, but is not limited to, the national security or intelligence activities of the Royal Canadian Mounted Police (RCMP), the Canada Border Services Agency (CBSA), the Department of National Defence (DND) and Canadian Armed Forces (CAF), Global Affairs Canada (GAC), and the Department of Justice. Further, NSIRA may review any national security or intelligence matters that a minister of the Crown refers to NSIRA.
NSIRA reviews assess whether Canada’s national security and intelligence activities comply with relevant laws, policies, and ministerial directions, and whether they are reasonable and necessary. In conducting its reviews, NSIRA can make any findings or recommendations it considers appropriate.
NSIRA is responsible for investigating national security or intelligence-related complaints from members of the public. As outlined in paragraph 8(1)(d) of the NSIRA Act, NSIRA has the mandate to investigate complaints about:
NSIRA’s ATIP Office is accountable for the development and implementation of effective policies, guidelines, systems, and procedures to ensure that the NSIRA Secretariat meets its responsibilities under the Access to Information Act and the Privacy Act. For the reporting period, the NSIRA ATIP office consisted of:
NSIRA Legal Services supported the ATIP team on an as required basis.
The main activities of the ATIP Coordinator included:
To assist the ATIP Office in meeting its legislative obligations, NSIRA relied on a collaborative internal group of subject matter points of contact from all its branches.
The Executive Director, as the Head of the National Security and Intelligence Review Agency Secretariat and pursuant to s.95(1) of the ATIA, is responsible for the implementation of the ATIA for NSIRA. Through the most recent NSIRA delegation order, the Executive Director has designated the ATIP Coordinator and ATIP Officer to perform the powers, duties, functions, or administrative tasks pertaining to the ATIA. These functions have limited delegation of authority under the Act and the Privacy Act, in accordance with the delegation of authority instrument approved by the Executive Director in August 2022. The recently amended ATIA delegation orders can be found in Appendix A.
During the reporting period, the number of privacy requests received by NSIRA increased by 75% (7) compared to the previous year (4). All requests were completed in 2021-22, and no requests were carried over the next year.
NSIRA’s responses to most requests required intensive review of complex records, including extensive internal and external consultations. In 2021-22, NSIRA’s on-time response rate decreased to 71% from 75% in the previous reporting year.
NSIRA received one new consultation request from another government institution which was responded within 30 days of its receipt.
For this reporting period, NSIRA did not receive any requests for corrections of personal information.
NSIRA did not receive any complaints pursuant to the Privacy Act during this reporting period. However, one investigation was initiated by the Office of the Privacy Commissioner (OPC) concerning the cyber-attack discussed under the “Breaches” section below.
In 2021–22, the ATIP office provided orientation sessions to new and current employees. In all, 3 separate sessions on access and privacy legislation were provided to 60 employees.
During the reporting period, the NSIRA Secretariat:
Request processing times are monitored through the Access Pro software dashboard. The ATIP Coordinator notifies the Executive Director and suggests a course of action should any legislative timelines for responding to a Privacy Act request appear to be at risk.
In March 2021, NSIRA was the victim of a cyber-attack on its public-facing network. As required by the TBS’ Directive on Privacy Practices, NSIRA reported the breach to the OPC and the TBS. Consistent with the Privacy Act, TBS requirements and advice from the OPC, the affected individuals were notified of the breach and how it could affect them.
NSIRA has completed a Privacy Impact Assessment (PIA) of its operations.
NSIRA is in the process of completing a PIA regarding its complaint investigation process.
No disclosures were made pursuant to subsection 8(2) during the reporting period.
Access to Information Act Designation Order
The Executive Director of the National Security and Intelligence Review Agency, pursuant to section 95 of the Access to Information Act, hereby designates the persons holding the positions or acting in these positions, set out in the schedule hereto to exercise the powers and perform the duties and functions of the Executive Director of the National Security and Intelligence Review Agency as the head of a government institution under the section of the Access to Information Act set out in the schedule opposite each position.
Privacy Act Designation Order
The Executive Director of the National Security and Intelligence Review Agency, pursuant to section 73 of the Privacy Act*, hereby designates the persons holding the positions or acting in these positions, set out in the schedule hereto to exercise the powers and perform the duties and functions of the Executive Director of the National Security and Intelligence Review Agency as the head of a government institution under the section of the Privacy Act set out in the schedule opposite each position.
Name of institution: National Security and Intelligence Review Agency
Reporting period: 2021-04-01 – 2022-03-31
Number of Requests | |
---|---|
Received during reporting period | 7 |
Outstanding from previous reporting period | 0 |
Outstanding from more than one reporting period | 0 |
Total | 7 |
Closed during reporting period | 7 |
Carried over to next reporting period | 0 |
Carried over within legislated timeline | 0 |
Carried over beyond legislated timeline | 0 |
Source | Number of Requests |
---|---|
Online | 4 |
3 | |
0 | |
In person | 0 |
Phone | 0 |
Fax | 0 |
Total | 7 |
Number of Requests | |
---|---|
Received during reporting period | 0 |
Outstanding from previous reporting periods | 0 |
Outstanding from more than one reporting period | 0 |
Total | 0 |
Closed during reporting period | 0 |
Carried over to next reporting period | 0 |
Source | Number of Requests |
---|---|
Online | 0 |
0 | |
0 | |
In person | 0 |
Phone | 0 |
Fax | 0 |
Total | 0 |
Completion Time | |||||||
---|---|---|---|---|---|---|---|
1 to 15 days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More than 365 Days | Total |
0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Less Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed | 1001-5000 Pages Processed | More Than 5000 Pages Processed | |||||
---|---|---|---|---|---|---|---|---|---|
Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed |
0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disposition of Requests | Completion Time | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
All disclosed | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 1 | 2 | 0 | 0 | 0 | 3 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
No records exist | 2 | 2 | 0 | 0 | 0 | 0 | 0 | 4 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 2 | 2 | 1 | 2 | 0 | 0 | 0 | 7 |
Section | Numbers of Requests |
---|---|
18(2) | 0 |
19(1)(a) | 0 |
19(1)(b) | 0 |
19(1)(c) | 0 |
19(1)(d) | 0 |
19(1)(e) | 0 |
19(1)(f) | 0 |
20 | 0 |
21 | 2 |
22(1)(a)(i) | 0 |
22(1)(a)(ii) | 0 |
22(1)(a)(iii) | 0 |
22(1)(b) | 1 |
22(1)(c) | 0 |
22(2) | 0 |
22.1 | 0 |
22.2 | 0 |
22.3 | 0 |
22.4 | 0 |
23(a) | 0 |
23(b) | 0 |
24(a) | 0 |
24(b) | 0 |
25 | 0 |
26 | 2 |
27 | 1 |
27.1 | 0 |
28 | 0 |
Section | Numbers of Requests |
---|---|
69(1)(a) | 0 |
69(1)(b) | 0 |
69.1 | 0 |
70(1) | 0 |
70(1)(a) | 0 |
70(1(b) | 0 |
70(1)(c) | 0 |
70(1)(d) | 0 |
70(1)(e) | 0 |
70(1)(f) | 0 |
70.1 | 0 |
Paper | Electronic | Other | |||
---|---|---|---|---|---|
E-record | Data set | Video | Audio | ||
1 | 2 | 0 | 0 | 0 | 0 |
Number of Pages Processed | Number of Pages Disclosed | Number of Requests |
---|---|---|
768 | 768 | 3 |
Disposition | Less Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed | 1001-5000 Pages Processed | More Than 5000 Pages Processed | |||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | |
All disclosed | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 1 | 71 | 2 | 697 | 0 | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 1 | 71 | 2 | 697 | 0 | 0 | 0 | 0 | 0 | 0 |
Number of Minutes Processed | Number of Minutes Disclosed | Number of Requests |
---|---|---|
0 | 0 | 0 |
Disposition | Less Than 60 Minutes Processed | 60 – 120 Minutes Processed | More than 120 Minutes Processed | |||
---|---|---|---|---|---|---|
Number of Requests | Minutes Processed | Number of Requests | Minutes Processed | Number of Requests | Minutes Processed | |
All disclosed | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 |
Declined to act with the approval of the Information Commissioner | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 |
Number of Minutes Processed | Number of Minutes Disclosed | Number of Requests |
---|---|---|
0 | 0 | 0 |
Disposition | Less Than 60 Minutes Processed | 60 – 120 Minutes Processed | More than 120 Minutes Processed | |||
---|---|---|---|---|---|---|
Number of Requests | Minutes Processed | Number of Requests | Minutes Processed | Number of Requests | Minutes Processed | |
All disclosed | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 |
Disposition | Consultation Required | Assessment of Fees | Legal Advice Sought | Other | Total |
---|---|---|---|---|---|
All disclosed | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 2 | 0 | 0 | 0 | 2 |
All exempted | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 |
Total | 2 | 0 | 0 | 0 | 2 |
Requests closed within legislated timelines | |
---|---|
Number of requests closed within legislated timelines | 5 |
Percentage of requests closed within legislated timelines (%) | 71.42857143 |
Number of Requests Closed Past the Legislated Timelines | Principal Reason | |||
---|---|---|---|---|
Interference with Operations/Workload | External Consultation | Internal Consultation | Other | |
2 | 0 | 2 | 0 | 0 |
Number of Days Past Legislated Timelines | Number of Requests Past Legislated Timeline Where No Extension Was Taken | Number of Requests Past Legislated Timeline Where an Extension Was Taken | Total |
---|---|---|---|
1 to 15 Days | 0 | 0 | 0 |
16 to 30 Days | 0 | 2 | 2 |
31 to 60 Days | 0 | 0 | 0 |
61 to 120 Days | 0 | 0 | 0 |
121 to 180 Days | 0 | 0 | 0 |
181 to 365 Days | 0 | 0 | 0 |
More than 365 Days | 0 | 0 | 0 |
Total | 0 | 2 | 2 |
Translation Requests | Accepted | Refused | Total |
---|---|---|---|
English to French | 0 | 0 | 0 |
French to English | 0 | 0 | 0 |
Total | 0 | 0 | 0 |
Paragraph 8(2)(e) | Paragraph 8(2)(m) | Subsection 8(5) | Total |
---|---|---|---|
0 | 0 | 0 | 0 |
Disposition for Correction Requests Received | Number |
---|---|
Notations attached | 0 |
Requests for correction accepted | 0 |
Total | 0 |
Number of requests where an extension was taken | 15(a)(i) Interference with operations | 9(1)(b) Consultation | 9(1)(b) Consultation | |||||
---|---|---|---|---|---|---|---|---|
Further review required to determine exemptions | Large volume of pages | Large volume of requests | Documents are difficult to obtain | Cabinet Confidence Section (Section 70) | External | Internal | ||
3 | 0 | 0 | 0 | 0 | 0 | 3 | 0 | 0 |
Length of Extensions | 15(a)(i) Interference with operations | 9(1)(b) Consultation | 9(1)(b) Consultation | |||||
---|---|---|---|---|---|---|---|---|
Further review required to determine exemptions | Large volume of pages | Large volume of requests | Documents are difficult to obtain | Cabinet Confidence Section (Section 70) | External | Internal | ||
1 to 15 days | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
16 to 30 days | 0 | 0 | 0 | 0 | 0 | 3 | 0 | 0 |
31 days or greater | 0 | 0 | ||||||
Total | 0 | 0 | 0 | 0 | 0 | 3 | 0 | 0 |
Consultations | Other Government of Canada Institutions | Number of Pages to Review | Other Organizations | Number of Pages to Review |
---|---|---|---|---|
Received during reporting period | 1 | 52 | 0 | 0 |
Outstanding from the previous reporting period | 0 | 0 | 0 | 0 |
Total | 1 | 52 | 0 | 0 |
Closed during the reporting period | 1 | 52 | 0 | 0 |
Carried over within regotiated timelines | 0 | 0 | 0 | 0 |
Carried over beyond negotiated timelines | 0 | 0 | 0 | 0 |
Recommendation | Number of Days Required to Complete Consultation Requests | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
Disclose entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclose in part | 0 | 1 | 0 | 0 | 0 | 0 | 0 | 1 |
Exempt entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Exclude entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Consult other institution | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Other | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 1 | 0 | 0 | 0 | 0 | 0 | 1 |
Recommendation | Number of Days Required to Complete Consultation Requests | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
Disclose entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclose in part | 0 | 1 | 0 | 0 | 0 | 0 | 0 | 0 |
Exempt entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Exclude entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Consult other institution | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Other | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Number of Days | Fewer Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed | 1001-5000 Pages Processed | More Than 5000 Pages Processed | |||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | |
1 to 15 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
16 to 30 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
31 to 60 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
61 to 120 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
121 to 180 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
181 to 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
More than 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Number of Days | Fewer Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed | 1001-5000 Pages Processed | More Than 5000 Pages Processed | |||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | |
1 to 15 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
16 to 30 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
31 to 60 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
61 to 120 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
121 to 180 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
181 to 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
More than 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Section 31 | Section 33 | Section 35 | Court action | Total |
---|---|---|---|---|
0 | 0 | 0 | 0 | 0 |
Number of PIA(s) completed | Number of PIAs modified |
---|---|
1 | 0 |
Personal Information Banks | Active | Created | Terminated | Modified |
---|---|---|---|---|
Institution-specific | 2 | 0 | 0 | 0 |
Central | 0 | 0 | 0 | 0 |
Total | 2 | 0 | 0 | 0 |
Number of material privacy breaches reported to TBS | Number of material privacy breaches reported to OPC |
---|---|
1 | 1 |
Number of non-material privacy breaches |
---|
0 |
Expenditures | Amount |
---|---|
Salaries | $24,082 |
Overtime | $0 |
Goods and Services | $0 |
Professional services contracts | $97,006 |
Other | $0 |
Total | $121,088 |
Resources | Person Years Dedicated to Access to Information Activities |
---|---|
Full-time employees | 0.300 |
Part-time and casual employees | 0.000 |
Regional Staff | 0.000 |
Consultants and agency personnel | 0.500 |
Students | 0.000 |
Total | 0.800 |
Note: Enter values to three decimal places.
Number of weeks | |
---|---|
Able to receive requests by mail | 52 |
Able to receive requests by email | 52 |
Able to receive requests through the digital request service | 52 |
No capacity | Partial Capacity | Full capacity | Total | |
---|---|---|---|---|
Unclassified Paper Records | 0 | 0 | 52 | 52 |
Protected B Paper Records | 0 | 0 | 52 | 52 |
Secret and Top Secret Paper Records | 0 | 0 | 52 | 52 |
No capacity | Partial Capacity | Full capacity | Total | |
---|---|---|---|---|
Unclassified Paper Records | 0 | 0 | 52 | 52 |
Protected B Paper Records | 0 | 0 | 52 | 52 |
Secret and Top Secret Paper Records | 0 | 0 | 52 | 52 |
Date of Publishing:
The National Security and Intelligence Review Agency (NSIRA) is pleased to submit to Parliament its annual report on the administration of the Privacy Act for the fiscal year commencing April 1, 2020, and ending March 31, 2021. This annual report is presented in accordance with section 72 of the Privacy Act, whose purpose is to protect the privacy of individuals with respect to the personal information held by a government institution and to provide a right of access to that information.
NSIRA is an independent and external review body that reports to Parliament on its operations under the National Security and Intelligence Review Agency Act (NSIRA Act). NSIRA reviews all Government of Canada national security and intelligence activities to ensure that they are lawful, reasonable and necessary. NSIRA also investigates public complaints regarding key national security agencies and activities.
NSIRA has a statutory mandate to review activities of the Canadian Security Intelligence Service (CSIS) and the Communications Security Establishment (CSE), as well as the national security and intelligence activities of all other federal departments and agencies. This includes, but is not limited to, the national security and intelligence activities of the Royal Canadian Mounted Police (RCMP), the Canada Border Services Agency, the Department of National Defence, Global Affairs Canada, and the federal Department of Justice.
To fulfil its mandate, NSIRA has unfettered access to classified information. This includes any and all information held by, or under the control of, departments and agencies, including information subject to legal privilege. NSIRA independently determines which information is relevant to the conduct of its reviews. The sole exception to NSIRA’s right to access information is when the information is considered a Cabinet confidence.
In carrying out reviews, NSIRA may make any findings and recommendations it considers appropriate. In accordance with the NSIRA Act, however, it will pay particular attention to whether government activities are lawful and comply with ministerial direction, and to whether the activities are reasonable and necessary.
Some of the activities under NSIRA’s complaints mandate are the complaints investigation functions inherited from the Security Intelligence Review Committee (SIRC). SIRC was responsible for hearing public complaints regarding the actions of CSIS. SIRC was also responsible for complaints related to the Government of Canada security clearance process, as well as specific matters and reports referred to under the Citizenship Act and the Canadian Human Rights Act.
In addition to these SIRC-related activities, NSIRA investigates complaints against CSE, as well as complaints against the RCMP that are referred by the Civilian Review and Complaints Commission (CRCC). The CRCC will continue to review all other activities of the RCMP.
The responsibility for the administration of the Privacy Act is delegated to NSIRA’s Executive Director and further subdelegated to the Access to Information and Privacy (ATIP) Coordinator, as set out in the Privacy Act Designation Order in Appendix A.
The person holding the position or acting in the position of Executive Director has full delegation to exercise or perform any of the powers, duties and functions under the Privacy Act. The ATIP Coordinator operates under a restricted delegation.
The ATIP Coordinator works with the Executive Director’s Office, Legal Services and the Review Directorate to meet requirements of the ATIP program.
The ATIP Coordinator is a member of the Corporate Services Directorate and trained in ATIP legislation and review.
Pursuant to subsection 73 of the Privacy Act, the Executive Director of NSIRA has the duty to exercise full authorities under the Privacy Act legislation and regulations.
The Executive Director also designated the person holding the position or acting in the position of the ATIP Coordinator with delegation of specific sections and subsections (see Appendix A).
This report is an accounting of NSIRA’s activities related to the administration of the Privacy Act in the 2020–21 fiscal year. NSIRA’s 2020-21 statistical report on the Privacy Act, from which the data in this report is derived, is provided in Appendix B.
NSIRA received four new requests under the Privacy Act during the reporting period. Of those requests, three were closed within 30 days and one was closed between 61 and 120 days, representing 75% closed within legislated timelines. The request that needed an extension required NSIRA to consult with another Government of Canada department.
The following table shows that 100% of requests under the Privacy Act, where records existed, were disclosed in part.
NSIRA did not received any requests for consultation under the Privacy Act during the reporting period.
In March 2020, NSIRA implemented exceptional workplace measures to curb the spread of COVID-19 and to protect federal employees and the public. These measures have limited NSIRA’s access to a secure office space, as well as access to the facilities and information of the departments and agencies it reviews, delaying the completion of one Privacy Act request.
During the reporting period, one employee participated in a specialized training session concerning responsibilities relating to access to information and privacy. Guidance to employees and managers on access to information matters was provided on an ad hoc basis (e.g., in person, by email and through NSIRA’s electronic newsletter).
During the reporting period, NSIRA did not implement any new institution-specific policies, guidelines, procedures or initiatives related to the Privacy Act requirements. However, management is committed to implementing a policy, procedures and guidelines to support NSIRA and its employees in meeting their Privacy obligations.
Over the period covered by this report, the Privacy Commissioner of Canada did not receive any complaints against NSIRA under the Privacy Act, nor did the Privacy Commissioner undertake any audit or investigation of NSIRA.
Request processing time is monitored through the Access Pro software dashboard. The ATIP Coordinator notifies the Executive Director and suggests a course of action should any legislative timelines for responding to a Privacy Act request appear to be at risk.
In March 2021, NSIRA was the victim of a cyber attack on its public-facing network. The resulting network breach was reported to the Office of the Privacy Commissioner (OPC) and the Treasury Board Secretariat (TBS). Consistent with the Privacy Act, TBS requirements and advice from the OPC, the affected individuals were notified of the breach and how it could affect them.
Over the fiscal year, NSIRA continued to work toward completing a privacy impact assessment (PIA) of its activities. Due to COVID-19 restrictions, the PIA was not completed by March 31, 2021, as previously communicated. NSIRA has since hired a consultant to complete the PIA and begun to implement preliminary recommendations.
NSIRA also intends to conduct a PIA with respect to material revisions made to its complaints investigation service line.
No disclosures were made under paragraph 8(2)(m) of the Privacy Act during this reporting period.
Access to Information Act Designation Order
The Executive Director of the National Security and Intelligence Review Agency, pursuant to section 95 of the Access to Information Act, hereby designates the persons holding the positions or acting in these positions, set out in the schedule hereto to exercise the powers and perform the duties and functions of the Executive Director of the National Security and Intelligence Review Agency as the head of a government institution under the section of the Access to Information Act set out in the schedule opposite each position.
Privacy Act Designation Order
The Executive Director of the National Security and Intelligence Review Agency, pursuant to section 73 of the Privacy Act*, hereby designates the persons holding the positions or acting in these positions, set out in the schedule hereto to exercise the powers and perform the duties and functions of the Executive Director of the National Security and Intelligence Review Agency as the head of a government institution under the section of the Privacy Act set out in the schedule opposite each position.
Name of institution: National Security and Intelligence Review Agency
Reporting period: 2019-04-01 – 2020-03-31
Number of Requests | |
---|---|
Received during reporting period | 4 |
Outstanding from previous reporting period | 0 |
Total | 4 |
Closed during reporting period | 0 |
Carried over to next reporting period | 0 |
Disposition of Requests | Completion Time | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
All disclosed | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 1 | 0 | 1 | 0 | 0 | 0 | 2 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
No records exist | 0 | 2 | 0 | 0 | 0 | 0 | 0 | 2 |
Request transferred | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Decline to act with the approval of the Information Commisioner | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 3 | 0 | 1 | 0 | 0 | 0 | 4 |
Section | Numbers of Requests |
---|---|
18(2) | 0 |
19(1)(a) | 0 |
19(1)(b) | 0 |
19(1)(c) | 0 |
19(1)(d) | 0 |
19(1)(e) | 0 |
19(1)(f) | 0 |
20 | 0 |
21 | 1 |
22(1)(a)(i) | 0 |
22(1)(a)(ii) | 0 |
22(1)(a)(iii) | 0 |
22(1)(b) | 1 |
22(1)(c) | 0 |
22(2) | 0 |
22.1 | 0 |
22.2 | 0 |
22.3 | 0 |
22.4 | 0 |
23(a) | 0 |
23(b) | 0 |
24(a) | 0 |
24(b) | 0 |
25 | 1 |
26 | 1 |
27 | 1 |
27.1 | 0 |
28 | 0 |
Section | Numbers of Requests |
---|---|
69(1)(a) | 0 |
69(1)(b) | 0 |
69.1 | 0 |
70(1) | 0 |
70(1)(a) | 0 |
70(1)(b) | 0 |
70(1)(c) | 0 |
70(1)(d) | 0 |
70(1)(e) | 0 |
70(1)(f) | 0 |
70.1 | 0 |
Paper | Electronic | Other |
---|---|---|
1 | 1 | 0 |
Number of Pages Processed | Number of Pages Disclosed | Number of Requests |
---|---|---|
146 | 135 | 2 |
Disposition | Less Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed | 1001-5000 Pages Processed | More Than 5000 Pages Processed | |||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | |
All disclosed | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 1 | 1 | 1 | 134 | 0 | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 1 | 1 | 1 | 134 | 0 | 0 | 0 | 0 | 0 | 0 |
Disposition | Consultation Required | Assessment of Fees | Legal Advice Sought | Other | Total |
---|---|---|---|---|---|
All disclosed | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 1 | 0 | 0 | 0 | 1 |
All exempted | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 |
Total | 1 | 0 | 0 | 0 | 1 |
Requests closed within legislated timelines | |
---|---|
Number of requests closed within legislated timelines | 3 |
Percentage of requests closed within legislated timelines (%) | 75 |
Number of Requests Closed Past the Legislated Timelines | Principal Reason | |||
---|---|---|---|---|
Interference with Operations/Workload | External Consultation | Internal Consultation | Other | |
1 | 0 | 1 | 0 | 0 |
Number of Days Past Legislated Timelines | Number of Requests Past Legislated Timeline Where No Extension Was Taken | Number of Requests Past Legislated Timeline Where an Extension Was Taken | Total |
---|---|---|---|
1 to 15 Days | 0 | 0 | 0 |
16 to 30 Days | 0 | 0 | 0 |
31 to 60 Days | 0 | 1 | 1 |
61 to 120 Days | 0 | 0 | 0 |
121 to 180 Days | 0 | 0 | 0 |
181 to 365 Days | 0 | 0 | 0 |
More than 365 Days | 0 | 0 | 0 |
Total | 0 | 1 | 1 |
Translation Requests | Accepted | Refused | Total |
---|---|---|---|
English to French | 0 | 0 | 0 |
French to English | 0 | 0 | 0 |
Total | 0 | 0 | 0 |
Paragraph 8(2)(e) | Paragraph 8(2)(m) | Subsection 8(5) | Total |
---|---|---|---|
0 | 0 | 0 | 0 |
Disposition for Correction Requests Received | Number |
---|---|
Notations attached | 0 |
Requests for correction accepted | 0 |
Total | 0 |
Disposition of Requests Where an Extension Was taken | 9(1)(a) Interference With Operations | 9(1)(b) Consultation | 9(1)(c) Third-Party Notice | |
---|---|---|---|---|
Section 69 | Other | |||
All disclosed | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 |
No records exist | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 |
Number of requests where an extension was taken | 15(a)(i) Interference with operations | 15(a)(iii) Consultations | 15(b) Translation purposes or conversion | |||||
---|---|---|---|---|---|---|---|---|
Further review required to determine exemptions | Large volume of pages | Large volume of requests | Documents are difficult to obtain | Cabinet Confidence Section (Section 70) | External | Internal | ||
1 to 15 days | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
16 to 30 days | 0 | 0 | 0 | 0 | 0 | 1 | 0 | 0 |
31 days or greater | 0 | |||||||
Total | 0 | 0 | 0 | 0 | 0 | 1 | 0 | 0 |
Consultations | Other Government of Canada Institutions | Number of Pages to Review | Other Organizations | Number of Pages to Review |
---|---|---|---|---|
Received during reporting period | 0 | 0 | 0 | 0 |
Outstanding from the previous reporting period | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 |
Closed during the reporting period | 0 | 0 | 0 | 0 |
Carried over to next reporting period | 0 | 0 | 0 | 0 |
Recommendation | Number of Days Required to Complete Consultation Requests | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
All disclosed | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Consult other institution | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Other | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Recommendation | Number of Days Required to Complete Consultation Requests | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
All disclosed | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Consult other institution | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Other | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Number of Days | Less Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed | 1001-5000 Pages Processed | More Than 5000 Pages Processed | |||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | |
1 to 15 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
16 to 30 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
31 to 60 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
61 to 120 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
121 to 180 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
181 to 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Number of Days | Less Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed | 1001-5000 Pages Processed | More Than 5000 Pages Processed | |||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | |
1 to 15 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
16 to 30 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
31 to 60 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
61 to 120 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
121 to 180 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
181 to 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Section 31 | Section 33 | Section 35 | Court action | Total |
---|---|---|---|---|
0 | 0 | 0 | 0 | 0 |
Number of PIA(s) completed |
---|
0 |
Personal Information Banks | Active | Created | Terminated | Modified |
---|---|---|---|---|
0 | 0 | 0 | 0 |
Number of material privacy breaches reported to TBS | Number of material privacy breaches reported to OPC |
---|---|
0 | 0 |
Expenditures | Amount |
---|---|
Salaries | $24,082 |
Overtime | $0 |
Goods and Services | $0 |
Professional services contracts | $0 |
Other | $0 |
Total | $24,082 |
Resources | Person Years Dedicated to Access to Information Activities |
---|---|
Full-time employees | 0.300 |
Part-time and casual employees | 0.000 |
Regional Staff | 0.000 |
Consultants and agency personnel | 0.000 |
Students | 0.000 |
Total | 0.300 |
Note: Enter values to three decimal places.
Date of Publishing:
The Privacy Act (PA) gives individuals the right of access to personal information about them held by the government, subject to limited and specific exceptions. It also protects privacy by preventing unauthorized access to personal information and by giving the individuals substantial control over the collection, use and disclosure of their personal information.
The National Security and Intelligence Review Agency (NSIRA) is pleased to submit to Parliament its annual report on the administration of the PA for the fiscal year commencing April 1, 2019 and ending March 31, 2020. This report is submitted in accordance with section 72 of the PA.
The NSIRA is a new independent external review body, which reports to Parliament. NSIRA was established in July 2019 and is responsible to conduct reviews of the Government of Canada national security and intelligence activities to ensure that they are lawful, reasonable and necessary. NSIRA also hears public complaints regarding key national security agencies and activities. NSIRA replaces the Security Intelligence Review Committee (SIRC), which reviewed Canadian Security Intelligence Service activities as well as those related to the revocation or denial of security clearances. NSIRA will also now hear complaints regarding the Communications Security Establishment and national security-related complaints regarding the Royal Canadian Mounted Police.
The responsibility of the administration of the PA is delegated to NSIRA’s Executive Director and further sub-delegated to the Access to Information and Privacy (ATIP) Coordinator consistent with the Designation Order provided in Appendix “A”.
The person holding the position or acting in the position of Executive Director has full delegation to exercise or perform any of the powers, duties and functions under the PA. The ATIP Coordinator operates under a restricted delegation.
The coordinator works with the Executive Director’s Office, Legal and Registry Services, and the Review directorate to meet requirements of the ATIP program.
The function is performed by a trained employee who is a member of the Corporate Services directorate.
A signed and dated copy of the Delegation Order, in effect at the end of this reporting period is attached as Appendix A.
NSIRA received four requests under the PA. Three of these requests (75%) were closed during the reporting period. Two of the three requests delivered, were delivered outside legislative timelines. The volume of requests received remained low, only one request was received the previous fiscal year. One of the requests delivered outside of legislative timelines evolved into a complaint that was later closed on January 1, 2020 by the Office of the Privacy Commissioner (OPC).
The second request was received March 18, 2020 and the response provided on June 17, 2020 or 45 days after the legislative deadline.
COVID-19 has greatly disrupted NSIRA’s work and challenged the organization to meet corporate deadlines. During the reporting period, one privacy request was affected.
Since that time, the NSIRA has implemented additional tools to increasingly enable employees to function well while working from home during the pandemic. Given the sensitivity level of NSIRA information holdings and the minimal amount of records that have been digitized, searches are not typically able to be performed remotely.
A statistical summary showing the disposition of the requests is attached as Appendix B.
For the reporting period, NSIRA was in existence for eight months. NSIRA has individual employee and management training to support the completion of privacy requests received. However, management is committed to implementing a Privacy training and awareness program for its managers and employees to ensure NSIRA complies with the PA requirements.
NSIRA was successfully on-boarded to the Treasury Board Secretariat (TBS) Automated On-line Request Service in October 2019. NSIRA implemented basic procedures and shared the necessary information to ensure its employees and managers complied with the policies and guidelines of the TBS on access to information.
NSIRA received one new complaint during this reporting period. The OPC found the complaint to be well founded and the file was closed on January 21, 2020.
Request processing time is monitored through the Access Pro software dashboard. The ATIP Coordinator notifies the Executive Director and suggests a course of action should any legislative timelines appear to be at risk.
No material privacy breaches were reported to the OPC and to TBS (Information and Privacy Policy Division) during the reporting period.
Bill C-59 received Royal Assent on June 21, 2019 and National Security and Intelligence Review Agency Act came into force July 12, 2019. One of the Act’s requirement was for the conduct of a Privacy Impact Assessment (PIA) of NSIRA’s activities.
Over the course of the year the PIA was completed by an external expert. The PIA was aimed at providing recommendations and guidance to ensure that NSIRA’s programs and activities comply with the spirit and requirements of the PA, the generally accepted privacy principles as well as the internationally recognized privacy standards.
Results and recommendations were shared with NISRA’s senior management team just prior to the Covid-19 pandemic. NSIRA’s management is in the process of developing a management action plan to address the assessment’s recommendations.
No disclosures were made under paragraph 8 (2)(m) of the PA during this reporting period.
Access to Information Act Designation Order
The Executive Director of the National Security and Intelligence Review Agency, pursuant to section 95 of the Access to Information Act, hereby designates the persons holding the positions or acting in these positions, set out in the schedule hereto to exercise the powers and perform the duties and functions of the Executive Director of the National Security and Intelligence Review Agency as the head of a government institution under the section of the Access to Information Act set out in the schedule opposite each position.
Privacy Act Designation Order
The Executive Director of the National Security and Intelligence Review Agency, pursuant to section 73 of the Privacy Act*, hereby designates the persons holding the positions or acting in these positions, set out in the schedule hereto to exercise the powers and perform the duties and functions of the Executive Director of the National Security and Intelligence Review Agency as the head of a government institution under the section of the Privacy Act set out in the schedule opposite each position.
Name of institution: National Security and Intelligence Review Agency
Reporting period: 2019-04-01 – 2020-03-31
Number of Requests | |
---|---|
Received during reporting period | 1 |
Outstanding from previous reporting period | 2 |
Total | 3 |
Closed during reporting period | 2 |
Carried over to next reporting period | 1 |
Source | Number of Requests |
---|---|
Online | 4 |
3 | |
0 | |
In person | 0 |
Phone | 0 |
Fax | 0 |
Total | 7 |
Completion Time | |||||||
---|---|---|---|---|---|---|---|
1 to 15 days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More than 365 Days | Total |
0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Number of Requests | |
---|---|
Outstanding from previous reporting period | 0 |
Sent during reporting period | 0 |
Total | 0 |
Approved by the Information Commissioner during reporting period | 0 |
Declined by the Information Commissioner during reporting period | 0 |
Carried over to next reporting period | 0 |
Disposition of Requests | Completion Time | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
All disclosed | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 1 | 0 | 0 | 1 | 0 | 0 | 2 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
No records exist | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Request transferred | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Decline to act with the approval of the Information Commisioner | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 1 | 0 | 0 | 1 | 0 | 0 | 2 |
Section | Numbers of Requests |
---|---|
13(1)(a) | 0 |
13(1)(b) | 0 |
13(1)(c) | 0 |
13(1)(d) | 0 |
13(1)(e) | 0 |
14 | 0 |
14(a) | 0 |
14(b) | 0 |
15(1) – I. A. * | 0 |
15(1) – Def. * | 0 |
15(1) – S.A. * | 0 |
16(1)(a)(i) | 0 |
16(1)(a)(ii) | 0 |
16(1)(a)(iii) | 0 |
16(1)(b) | 0 |
16(1)(c) | 1 |
16(1)(d) | 0 |
16(2) | 0 |
16(2)(a) | 0 |
16(2)(b) | 0 |
16(2)(c) | 1 |
16(3) | 0 |
16.1(1)(a) | 0 |
16.1(1)(b) | 0 |
16.1(1)(c) | 0 |
16.1(1)(d) | 0 |
16.2(1) | 0 |
16.3 | 0 |
16.31 | 0 |
16.4(1)(a) | 0 |
16.4(1)(b) | 0 |
16.5 | 0 |
16.6 | 0 |
17 | 1 |
18(a) | 0 |
18(b) | 0 |
18(c) | 0 |
18(d) | 0 |
18.1(1)(a) | 0 |
18.1(1)(b) | 0 |
18.1(1)(c) | 0 |
18.1(1)(d) | 0 |
19(1) | 0 |
20(1)(a) | 0 |
20(1)(b) | 0 |
20(1)(b.1) | 0 |
20(1)(c) | 0 |
20(1)(d) | 0 |
20.1 | 0 |
20.2 | 0 |
20.4 | 0 |
21(1)(a) | 0 |
21(1)(b) | 0 |
21(1)(c) | 0 |
21(1)(d) | 0 |
22 | 0 |
22.1(1) | 0 |
23 | 0 |
23.1 | 0 |
24(1) | 1 |
26 | 0 |
* I.A.: International Affairs
* Def.: Defence of Canada
* S.A.: Subversive Activities
Section | Numbers of Requests |
---|---|
68(a) | 0 |
68(b) | 0 |
68(c) | 0 |
68.1 | 0 |
68.2(a) | 0 |
68.2(b) | 0 |
69(1) | 0 |
69(1)(a) | 0 |
69(1)(b) | 0 |
69(1)(c) | 0 |
69(1)(d) | 0 |
69(1)(e) | 0 |
69(1)(f) | 0 |
69(1)(g) re (a) | 0 |
69(1)(g) re (b) | 0 |
69(1)(g) re (c) | 0 |
69(1)(g) re (d) | 0 |
69(1)(g) re (e) | 0 |
69(1)(g) re (f) | 0 |
69.1(1) | 0 |
Paper | Electronic | Other |
---|---|---|
1 | 1 | 0 |
Number of Pages Processed | Number of Pages Disclosed | Number of Requests |
---|---|---|
13 | 13 | 2 |
Disposition | Less Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed | 1001-5000 Pages Processed | More Than 5000 Pages Processed | |||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | |
All disclosed | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 2 | 13 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 2 | 13 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disposition | Consultation Required | Assessment of Fees | Legal Advice Sought | Other | Total |
---|---|---|---|---|---|
All disclosed | 0 | 0 | 0 | 0 | 0 |
Disclosed in part | 2 | 0 | 0 | 0 | 2 |
All exempted | 0 | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 |
Total | 2 | 0 | 0 | 0 | 2 |
Requests closed within legislated timelines | |
---|---|
Number of requests closed within legislated timelines | 1 |
Percentage of requests closed within legislated timelines (%) | 50 |
Number of Requests Closed Past the Legislated Timelines | Principal Reason | |||
---|---|---|---|---|
Interference with Operations/Workload | External Consultation | Internal Consultation | Other | |
1 | 0 | 1 | 0 | 0 |
Number of Days Past Legislated Timelines | Number of Requests Past Legislated Timeline Where No Extension Was Taken | Number of Requests Past Legislated Timeline Where an Extension Was Taken | Total |
---|---|---|---|
1 to 15 Days | 0 | 0 | 0 |
16 to 30 Days | 0 | 0 | 0 |
31 to 60 Days | 0 | 0 | 0 |
61 to 120 Days | 0 | 0 | 0 |
121 to 180 Days | 1 | 0 | 1 |
181 to 365 Days | 0 | 0 | 0 |
More than 365 Days | 0 | 0 | 0 |
Total | 1 | 0 | 1 |
Translation Requests | Accepted | Refused | Total |
---|---|---|---|
English to French | 0 | 0 | 0 |
French to English | 0 | 0 | 0 |
Total | 0 | 0 | 0 |
Disposition of Requests Where an Extension Was taken | 9(1)(a) Interference With Operations | 9(1)(b) Consultation | 9(1)(c) Third-Party Notice | |
---|---|---|---|---|
Section 69 | Other | |||
All disclosed | 0 | 0 | 0 | 0 |
Disclosed in part | 0 | 0 | 0 | 0 |
All exempted | 0 | 0 | 0 | 0 |
All excluded | 0 | 0 | 0 | 0 |
No records exist | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 |
Length of Extensions | 9(1)(a) Interference With Operations | 9(1)(b) Consultation | 9(1)(c) Third-Party Notice | |
---|---|---|---|---|
Section 69 | Other | |||
30 days or less | 0 | 0 | 0 | 0 |
31 to 60 days | 0 | 0 | 0 | 0 |
61 to 120 days | 0 | 0 | 0 | 0 |
121 to 180 days | 0 | 0 | 0 | 0 |
181 to 365 days | 0 | 0 | 0 | 0 |
363 days or more | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 |
Fee Type | Fee Collected | Fee Waived or Refunded | ||
---|---|---|---|---|
Requests | Amount | Requests | Amount | |
Application | 0 | $0 | 0 | $0 |
Other fees | 0 | $0 | 0 | $0 |
Total | 0 | $0 | 0 | $0 |
Consultations | Other Government of Canada Institutions | Number of Pages to Review | Other Organizations | Number of Pages to Review |
---|---|---|---|---|
Received during reporting period | 15 | 0 | 0 | 0 |
Outstanding from the previous reporting period | 1 | 0 | 0 | 0 |
Total | 16 | 0 | 0 | 0 |
Closed during the reporting period | 14 | 0 | 0 | 0 |
Carried over to next reporting period | 2 | 0 | 0 | 0 |
Disposition of Requests | Completion Time | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
Disclose entirely | 0 | 2 | 0 | 0 | 0 | 0 | 0 | 2 |
Disclose in part | 5 | 3 | 0 | 1 | 0 | 0 | 0 | 9 |
Exempt entirely | 1 | 0 | 1 | 0 | 0 | 0 | 0 | 2 |
Exclude entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Consult other institution | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Other | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Decline to act with the approval of the Information Commisioner | 0 | 0 | 0 | 1 | 0 | 0 | 0 | 1 |
Total | 6 | 5 | 1 | 2 | 0 | 0 | 0 | 14 |
Disposition of Requests | Completion Time | |||||||
---|---|---|---|---|---|---|---|---|
1 to 15 Days | 16 to 30 Days | 31 to 60 Days | 61 to 120 Days | 121 to 180 Days | 181 to 365 Days | More Than 365 Days | Total | |
Disclose entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Disclose in part | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Exempt entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Exclude entirely | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Consult other institution | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Other | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Request abandoned | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Neither confirmed nor denied | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Decline to act with the approval of the Information Commisioner | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Number of Days | Less Than 100 Pages Processed | 101-500 Pages Processed | 501-1000 Pages Processed | 1001-5000 Pages Processed | More Than 5000 Pages Processed | |||||
---|---|---|---|---|---|---|---|---|---|---|
Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | Number of Requests | Pages Disclosed | |
1 to 15 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
16 to 30 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
31 to 60 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
61 to 120 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
121 to 180 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
181 to 365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
365 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Total | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 |
Section 32 Notice of intention to investigate | Subsection 30(5) Ceased to investigate | Section 35 Formal representations | Section 37 Reports of finding received | Section 37 Reports of finding containing recommendations issued by the information Commissioner | Section 37 Reports of finding containing orders issued by the information Commissioner |
---|---|---|---|---|---|
0 | 0 | 1 | 0 | 0 | 0 |
Section 41 (before June 21, 2019) | Section 42 | Section 44 |
---|---|---|
0 | 0 | 0 |
Section 41 (after June 21, 2019) | |||||
---|---|---|---|---|---|
Complainant (1) | Institution (2) | Third Party (3) | Privacy Commissioner (4) | Total | |
0 | 0 | 0 | 0 | 0 |
Expenditures | Amount |
---|---|
Salaries | $56,192 |
Overtime | $0 |
Goods and Services | $9,030 |
Professional services contracts | $9,030 |
Other | $0 |
Total | $65,222 |
Resources | Person Years Dedicated to Access to Information Activities |
---|---|
Full-time employees | 0.70 |
Part-time and casual employees | 0.00 |
Regional Staff | 0.00 |
Consultants and agency personnel | 0.10 |
Students | 0.00 |
Total | 0.80 |