Annual Reports on the Access to Information Act and the Privacy Act

Access to Information Act

The Access to Information Act gives Canadian citizens and permanent residents, and any person and corporation present in Canada, the right to access information contained in government records, subject to certain specific and limited exceptions.

Privacy Act

The Privacy Act gives individuals the right to access information about themselves that is held by the government, subject to certain specific and limited exceptions. It also protects individuals’ privacy by giving them substantial control over the collection, use and disclosure of their personal information, and by preventing others from accessing that information.

Access to Information Act and Privacy Act Reporting

Annual Reports on the Access to Information Act and the Privacy Act
Completed Access to Information Requests
Privacy Impact Assessment Summaries
Info Source
Privacy Statement

Date Modified:: 2025-11-04

Access to Information and Privacy (ATIP)

The Access to Information Act governs access to information contained in federal government records. This means that Canadian citizens, permanent residents, persons present in Canada, or corporations can, formally or informally, request records under the control of the National Security and Intelligence Review Agency Secretariat.

The Privacy Act governs the collection, use, disclosure and retention of personal information and gives all individuals in Canada access to information about themselves.

How to make a Written Access to Information Request

To make an Access to Information request for information held by the NSIRA Secretariat, you may complete the Access to Information Request Form or send a letter to the ATIP Office mentioning the Act and describing the information you are seeking.

For requests for information held by other government institutions, including portfolio agencies, please refer to the list of departmental Access to Information and Privacy Coordinators.

An application fee of $5 applies and additional costs may be charged. You may send the application fee in the form of cash, a cheque or a money order made payable to the Receiver General for Canada.

This application fee entitles you to five hours of search and preparation time for the requested records. You will be notified in advance if there are additional costs and you may be asked to make a deposit.

If you need advice on the process for completing an Access to Information request, please feel free to contact the Access to Information and Privacy Office.

Please send your request and application fee to the Access to Information and Privacy Office.

How to Make a Written Personal Information Request

To access your own personal information held by the NSIRA Secretariat, you may complete the Personal Information Request Form or send a letter to the ATIP Office mentioning the Act and describing the information you are seeking.

For requests for information held by other government institutions, including portfolio agencies, please refer to the list of departmental Access to Information and Privacy Coordinators.

There is no charge for information requested under the Privacy Act.

Note that requests for personal information that does not concern you, must be accompanied by written consent indicating the name of the person giving his or her consent and to whom consent is being given. The consent document must be dated and signed by the person giving the consent.

If you need advice on how to complete a Privacy request, please feel free to contact the Access to Information and Privacy Office.

Please send your personal information request and any consent to release to the Access to Information and Privacy Office.

Submitting a request online to the National Security and Intelligence Review Agency Secretariat Canada

The Access to Information and Privacy Online Request Service offers a convenient way to make:

an access to information request
a personal information request

This service:

enables individuals to make an online request for information that is held by a Government of Canada institution
eliminates the need to print, scan, and email or mail a form to an institution

Date Modified:: 2026-03-18

Review of the Canadian Security Intelligence Service Counter-Intelligence Targeting: Notification Letter

Review of the Canadian Security Intelligence Service Counter-Intelligence Targeting

Notification Letter

June 30, 2025

The Honourable Gary Anandasangaree, P.C., M.P.
Minister
Public Safety

Subject: Notification of NSIRA’s Review of the Canadian Security Intelligence Service (CSIS) Counter-Intelligence (CI) Targeting

Dear Minister Anandasangaree,

I am writing on behalf of the Members of the National Security and Intelligence Review Agency (NSIRA) to inform you that NSIRA has initiated a review of Canadian Security Intelligence Service (CSIS) counter-intelligence (CI) targeting.

This review is being conducted pursuant to paragraphs 8(1)(a) and (b) of the National Security and Intelligence Review Agency Act (NSIRA Act). The NSIRA Act grants NSIRA full and timely access to all information held by reviewed departments and agencies, including classified and privileged information, with the exception of cabinet confidences.

The review will assess CSIS’ compliance with the law and ministerial direction, as well as the reasonableness and necessity of CSIS’ targeting of threats pursuant to subsections 2(a) and (b) of the CSIS Act. The review will focus its evaluation on a small subset of targets and the associated policy and processes related to target selection.

NSIRA will engage with your officials regarding this review. As the review progresses, NSIRA’s review team will be in regular contact with them with requests for information. Such requests may involve documents, system access, written explanations, briefings, interviews, surveys, and any other information that NSIRA determines to be of relevance to this review. This review may also include independent inspections of some technical systems. NSIRA’s expectations for responsiveness are available online at https://nsira-ossnr.gc.ca.

I thank you in advance for your cooperation and support to the independent review process, which is key to transparency and democratic accountability.

Sincerely,

The Honourable Marie Deschamps, C.C.
Chair, National Security and Intelligence Review Agency

cc Tricia Geddes, Deputy Minister, Public Safety Canada
Daniel Rogers, Director, Canadian Security Intelligence Service

Date Modified:: 2025-07-09

Review of a Canadian Security Intelligence Service Warranted Threat Reduction Measure: Notification Letter

Review of a Canadian Security Intelligence Service Warranted Threat Reduction Measure

Notification Letter

April 10, 2025

The Honourable Gary Anandasangaree
Minister and Attorney General of Canada
Department of Justice Canada

Subject: Notification of NSIRA’s Review of a Canadian Security Intelligence Service Warranted Threat Reduction Measure

Dear Minister Anandasangaree,

I am writing on behalf of the Members of the National Security and Intelligence Review Agency (NSIRA) to inform you that NSIRA has initiated a review of a Canadian Security Intelligence Service (CSIS) warranted threat reduction measure (TRM).

This review is being conducted pursuant to paragraph 8(1)(a)(b) and 8(2) of the National Security and Intelligence Review Agency Act (NSIRA Act). The NSIRA Act grants NSIRA full and timely access to all information held by reviewed departments and agencies, including classified and privileged information, with the exception of cabinet confidences. The review will include information relating to CSIS’ compliance with the law and ministerial directions, as well as the reasonableness and necessity of a selection of CSIS activities.

NSIRA will review all aspects of the TRM, including its design, approval, authorization, and execution. NSIRA will also review the activities of the Communications Security Establishment (CSE) in relation to the TRM. Additionally, NSIRA will review the Department of Justice’s provision of legal advice in relation to the TRM including any legal advice that may have informed Justice counsel’s advice to CSIS and CSE. NSIRA will determine whether the TRM complied with relevant authorities, including the applicable judicial authorization.

I thank you in advance for your cooperation and support to the independent review process, which is key to transparency and democratic accountability.

Sincerely,

The Honourable Marie Deschamps, C.C.
Chair, National Security and Intelligence Review Agency

cc Shalene Curtis-Micallef, Deputy Minister and Deputy Attorney General, Department of Justice Canada

March 17, 2025

Subject: Notification of NSIRA’s Review of a CSIS Warranted Threat Reduction Measure

Dear Ministers,

This review is being conducted pursuant to paragraph 8(1)(a) and 8(2) of the National Security and Intelligence Review Agency Act (NSIRA Act). The NSIRA Act grants NSIRA full and timely access to all information held by reviewed departments and agencies, including classified and privileged information, with the exception of cabinet confidences.

NSIRA will review all aspects of the TRM, including its design, approval, authorization, and execution. NSIRA will also review the activities of the Communications Security Establishment (CSE) in relation to the TRM. NSIRA will determine whether the TRM complied with relevant authorities, including the applicable judicial authorization.

I thank you in advance for your cooperation and support to the independent review process, which is key to transparency and democratic accountability.

Sincerely,

The Honourable Marie Deschamps, C.C.
Chair, National Security and Intelligence Review Agency

Dist.
The Honourable David J. McGuinty, Minister, Public Safety
The Honourable Bill Blair, Minister, National Defence

cc Daniel Rogers, Director, Canadian Security Intelligence Service
Caroline Xavier, Chief, Communications Security Establishment

Date Modified:: 2025-07-08

Review Template: Report

Review Template – Proof of Concept

Report

Table of Contents

HTML Version Coming Soon

Date of Publishing:

June 26, 2025

Download PDF

HTML Version Coming Soon

Our team is working on an HTML version of this content to enhance usability and compatibility across devices. We aim to make it available in the near future. Thank you for your patience!

Date Modified:: 2025-06-26

Review Template: Backgrounder

Review Template – Proof of Concept

Backgrounder

This report describes the results of a review by the National Security and Intelligence Review Agency (NSIRA) of the 2021 disclosures made by federal institutions under the Security of Canada Information Disclosure Act (SCIDA). This is the third year of implementation of the SCIDA regime. This year, NSIRA decided to focus the review on Global Affairs Canada’s (GAC) proactive disclosures.

The SCIDA encourages and facilitates the disclosure of information between federal institutions to protect Canada against activities that undermine or threaten national security, subject to certain conditions. The SCIDA provides a two-part threshold which must be met prior to making a disclosure: that the information will contribute to the exercise of the recipient institution’s jurisdiction or responsibilities in respect of activities that undermine the security of Canada, and will not affect any person’s privacy interest more than reasonably necessary in the circumstances. The SCIDA also includes provisions and guiding principles related to the management of disclosures, including accuracy and reliability statements and record keeping obligations.

Date Modified:: 2025-06-26

Review Template: Notification Letter

Review Template – Proof of Concept

Notification Letter

Table of Contents

NSIRA’s Notification Letter

Date of Publishing:

June 26, 2025

NSIRA’s Notification Letter

Dear Minister McGuinty,

I am writing on behalf of the Members of the National Security and Intelligence Review Agency (NSIRA) to inform you that NSIRA has initiated its Annual Review of Select Canadian Security Intelligence Service (CSIS) Activities for 2025.

This review is being conducted pursuant to paragraph 8(1)(a), 8(2) and 8(2.1)(a) of the National Security and Intelligence Review Agency Act (NSIRA Act). The NSIRA Act grants NSIRA full and timely access to all information held by reviewed departments and agencies, including classified and privileged information, with the exception of cabinet confidences.

The review will include information relating to CSIS’ compliance with the law and ministerial directions, as well as the reasonableness and necessity of a selection of CSIS activities.

I thank you in advance for your cooperation and support to the independent review process, which is key to transparency and democratic accountability.

Sincerely,

The Honourable Marie Deschamps, C.C.
Chair, National Security and Intelligence Review Agency

Date Modified:: 2025-06-26

Review of Government of Canada Institutions’ Disclosures of Information Under the Security of Canada Information Disclosure Act in 2023: Government Responses

Review of Federal Institutions’ Disclosures of Information under the Security of Canada Information Disclosure Act in 2023

Government Responses

Government of Canada Response to the Recommendations of the NSIRA Review of Federal Institutions’ Disclosures of Information under the Security of Canada Information Disclosure Act (“SCIDA”) in 2023

NSIRA Recommendation	Related Finding(s)	Government Response	Explanation
1. NSIRA recommends that disclosing institutions explicitly address the requirements of both paragraphs 5(1) and 5(1)(b) in the records that they prepare under paragraph 9(1)(e) of the SCIDA.	Finding 1. NSIRA found that every institution that disclosed or received information pursuant to SCIDA in 2023 complied with their record keeping obligations under section 9, but some records were inaccurate or imprecise. Finding 2. NSIRA found, within the sample of disclosures reviewed, that disclosing institutions demonstrated they had satisfied themselves under the contribution and proportionality tests in compliance with subsection 5(1) of the SCIDA.	Agree	In last year’s government response, the Government of Canada recognized the importance of keeping records of SCIDA disclosures and receipts, as required under the Act. Departments and agencies will continue to evaluate and update their internal procedures to ensure they satisfy their statutory obligations as Disclosing and Recipient Institutions. The Government of Canada also recognizes that, in addition to supporting compliance, fulsome record keeping facilitates NSIRA’s reviews and thus is an important element of accountability in the national security context.
2. NSIRA recommends that IRCC amend their SCIDA policy to underscore that IRCC must independently assess whether the disclosure is authorized. This assessment should consider whether the activity amounts to one of the exceptions to the SCIDA’s definition of activities that undermine the security of Canada.	Finding 3. NSIRA found that IRCC did not, in one instance, independently consider whether its disclosure related to activities that fell under the SCIDA exception for advocacy, protest, or dissent. Instead, IRCC satisfied itself of the SCIDA’s contribution test based on assumptions about how CSIS assessed activities that undermine the security of Canada.	Agree	IRCC takes seriously the importance of independently assessing whether each disclosure is authorized under SCIDA. IRCC reviewed its SCIDA policy at the beginning of 2024 and this was revised to require a review of proposed disclosure to determine whether they might be related to activities that fall under the SCIDA exception for advocacy, protest, or dissent.
3. NSIRA recommends that IRCC apply an iterative approach to its proportionality assessments, with a view to disclosing only the minimum information reasonably necessary in the circumstance to enable the recipient institution to further their investigation.	Finding 4. NSIRA found that, throughout the course of 2023, IRCC improved the rigor of its proportionality assessments regarding disclosure of passport information. However, NSIRA identified three instances where IRCC disclosed visa information without applying the same rigorous approach, which risked disclosing more personal information than reasonably necessary in the circumstances.	Agree	IRCC recognizes the importance of disclosing only the minimum information reasonably necessary. IRCC has made some changes to its process in the last year to ensure that proportionality was better considered and will continue to take an iterative approach to ensure that we disclose only what is deemed necessary.
4. NSIRA recommends that CSIS use consistent terminology, and be clear about the nature of the link that has been established between the subject of a request and its investigation, to assist IRCC in satisfying itself of the proportionality test.	Finding 5. NSIRA found that CSIS requests to IRCC used inconsistent terminology and were often unclear about the relationship between the subject of the request and its investigation. At times, this lack of clear communication hindered IRCC’s efforts to satisfy itself that the disclosure was authorized under the SCIDA.	Agree	CSIS, in collaboration with IRCC, has made substantive changes over the past year, to update its SCIDA request process. All SCIDA requests directed to IRCC now go through a single unit in CSIS. The new process in place ensures clear, consistent and compliant requests to IRCC.
5. NSIRA recommends that institutions avoid making verbal disclosures whenever possible. When they must occur, verbal disclosures should explicitly convey the requisite information on accuracy and reliability.	Finding 6. NSIRA found that disclosing institutions provided information regarding the accuracy of the information and reliability of the manner in which it was obtained in relation to all disclosures. However, CBSA made one verbal disclosure that did not include an explicit statement on accuracy and reliability.	Agree	The Government of Canada recognizes that information on the accuracy and reliability of the disclosed information must be provided at the time of disclosure as per subsection 5(2). While not ideal, the Government of Canada recognizes that verbal disclosures may be required in the course of an operation. However, they must still satisfy all requirements under the Act, including the provision of accuracy and reliability statements at the time of disclosure.
6. NSIRA recommends that CBSA harmonize its record of disclosure form with the SCIDA to convey the mandatory nature of providing information on accuracy and reliability at the time of the disclosure.	Finding 7. NSIRA found that CBSA’s record of disclosure form contradicts the SCIDA by allowing officials to opt out of providing information regarding accuracy and reliability.	Agree	Although the SCIDA requirement for an accuracy and reliability statement is clearly outlined in the CBSA’s record of disclosure form per the legislative text under ss. 5(2) of the Act, the CBSA will revise the text to ensure that the requirements are clearly defined and that the language is not contradictory with the mandatory nature of providing information regarding accuracy and reliability. A message will also be communicated to affected program areas to remind disclosing officials of the mandatory requirement to provide a statement confirming the accuracy and reliability of the manner in which the information was obtained.
7. NSIRA recommends that IRCC tailor its statements on accuracy and reliability as to ensure that each disclosure’s statement is specific to the circumstances of the case.	Finding 8. NSIRA found that IRCC used templated language to describe the disclosure’s accuracy and reliability that was not always relevant or specific to the circumstances of the disclosure.	Agree	IRCC will review the language used to describe the disclosure’s accuracy and reliability to ensure it is tailored to the specific circumstances and relevant to the disclosure at hand.

Date Modified:: 2025-07-10

Royal Canadian Mounted Police’s Human Source Program: Report

Royal Canadian Mounted Police’s Human Source Program

Report

Table of Contents

HTML Version Coming Soon

Date of Publishing:

June 16, 2025

Download PDF

HTML Version Coming Soon

Our team is working on an HTML version of this content to enhance usability and compatibility across devices. We aim to make it available in the near future. Thank you for your patience!

Date Modified:: 2025-06-16

Royal Canadian Mounted Police’s Human Source Program: Backgrounder

Royal Canadian Mounted Police’s Human Source Program

Backgrounder

In 2021, the National Security and Intelligence Review Agency (NSIRA) launched a comprehensive review of the Royal Canadian Mounted Police’s (RCMP) Human Source Program. This review was part of a broader, three-part series focused on how federal agencies manage and use human sources in national security operations. The other reviews in the series looked at the Canada Border Services Agency and the Department of National Defence/Canadian Armed Forces. While NSIRA had previously assessed aspects of the RCMP’s work, this was the agency’s first in-depth and targeted review of the RCMP’s human source program.

The review examined the legal and policy frameworks guiding the RCMP’s use of human sources — individuals who provide vital information that can be difficult or impossible to obtain through other means. It focused on three key areas:

The management and assessment of risk.
The RCMP’s fulfillment of its duty of care to human sources.
The sufficiency of ministerial direction and accountability mechanisms.

Human sources, including police agents and confidential informants, play an essential role in national security investigations. Proper management, risk mitigation, and oversight of these programs are critical to ensuring investigations are conducted lawfully, ethically, and effectively.

The review identified areas of concern, particularly regarding the recruitment and use of confidential informants. NSIRA found that:

The policies and procedures governing the recruitment and use of human sources in national security matters require updates. Reporting requirements and oversight mechanisms were found to be in need of improvement to ensure accountability and consistency.
The risk assessment framework for confidential informants is inadequate. Current assessments of risk are not well documented, limiting their reliability for decision-making purposes. The RCMP’s approach is primarily focused on operational security and investigative risks, with less attention paid to risks faced by the confidential informants themselves.
The RCMP places significant reliance on the promise of confidentiality to mitigate risks, without fully accounting for other safeguards that may be necessary.

The review also highlighted shortcomings in how the RCMP handles investigations involving Canadian Fundamental Institutions — including, academia, politics, religion, the media, and trade unions. Despite a 2003 Ministerial Direction requiring “special care” in such sensitive investigations, NSIRA found the RCMP has not consistently demonstrated this level of care. Moreover, there is currently no framework in place to assess the cumulative impact of these investigations on individuals, institutions, or communities.

To address these issues, NSIRA issued six recommendations aimed at improving oversight, strengthening the management and assessment of risk, enhancing the duty of care to confidential informants, and better accounting for the impact of national security investigations involving Canadian Fundamental Institutions.

Date Modified:: 2025-06-16

Annual Reports on the Access to Information Act and the Privacy Act

Access to Information Act

Annual Report on the Access to Information Act 2024–25

Annual Report on the Access to Information Act 2023–24

Annual Report on the Access to Information Act 2022–23

Privacy Act

Annual Report on the Privacy Act 2024-25

Annual Report on the Privacy Act 2023-24

Annual Report on the Privacy Act 2022-23

Access to Information Act and Privacy Act Reporting

Access to Information and Privacy (ATIP)

How to make a Written Access to Information Request

How to Make a Written Personal Information Request

Submitting a request online to the National Security and Intelligence Review Agency Secretariat Canada

Review of the Canadian Security Intelligence Service Counter-Intelligence Targeting

Notification Letter

Review of a Canadian Security Intelligence Service Warranted Threat Reduction Measure

Notification Letter

Review Template – Proof of Concept

Report

HTML Version Coming Soon

Review Template – Proof of Concept

Backgrounder

Backgrounder

Review Template – Proof of Concept

Notification Letter

NSIRA’s Notification Letter

Review of Federal Institutions’ Disclosures of Information under the Security of Canada Information Disclosure Act in 2023

Government Responses

Government of Canada Response to the Recommendations of the NSIRA Review of Federal Institutions’ Disclosures of Information under the Security of Canada Information Disclosure Act (“SCIDA”) in 2023

Royal Canadian Mounted Police’s Human Source Program

Report

HTML Version Coming Soon

Royal Canadian Mounted Police’s Human Source Program

Backgrounder

Backgrounder