{"id":5142,"date":"2021-06-18T13:19:54","date_gmt":"2021-06-18T17:19:00","guid":{"rendered":""},"modified":"2025-02-25T08:38:56","modified_gmt":"2025-02-25T13:38:56","slug":"cse-responses","status":"publish","type":"page","link":"https:\/\/nsira-ossnr.gc.ca\/en\/reviews\/find-a-review\/19-03\/cse-responses\/","title":{"rendered":"Review of the Communications Security Establishment\u2019s Disclosures of Canadian Identifying Information: CSE Responses"},"content":{"rendered":"\n
\n
\n
\n
\n
\n \n

\n Review of the Communications Security Establishment\u2019s Disclosures of Canadian Identifying Information <\/h1>\n\n
\n\n \n

\n CSE Responses <\/h2>\n \n \n\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/div>\n\n\n
\n
\n

CSE Management Response to NSIRA Review of 2018-2019 Disclosures of Canadian Identifying Information<\/span><\/h2>\n\n\n\n

NSIRA delivered its classified review to the Minister of National Defence in November 2020.<\/p>\n\n\n\n

Throughout NSIRA\u2019s review of CSE\u2019s disclosure process, CSE responded to NSIRA requests in a timely manner and offered to provide additional context and briefings to NSIRA regarding CSE processes.<\/p>\n\n\n\n

Importance of independent external review<\/strong><\/p>\n\n\n\n

CSE values independent, external review of our activities, and we remain committed to a positive and ongoing dialogue with NSIRA and other review and oversight bodies. <\/p>\n\n\n\n

This oversight frameworks allows us to deliver our important mission of foreign intelligence, cyber security and foreign cyber operations in a way that demonstrates accountability, and that builds trust and confidence with Canadians. <\/p>\n\n\n\n

CSE operates within a culture of compliance, grounded in our understanding of and commitment to our legal and policy regime, and evidenced by our record of self-reporting and addressing incidents and errors that may occur. <\/p>\n\n\n\n

We appreciate NSIRA and their continued work to provide Canadians with greater insight and understanding of the important work that CSE does on a regular basis to keep Canadians safe.<\/p>\n\n\n\n

We accept the recommendations aimed at improving our processes, yet are concerned that the overall conclusions do not fully appreciate CSE\u2019s commitment to, and work on protection of privacy.<\/p>\n\n\n\n

Canadian Identifying Information and CSE\u2019s Commitment to Privacy<\/strong><\/p>\n\n\n\n

CSE is Canada\u2019s national lead for foreign signals intelligence and cyber operations, and the national technical authority for cybersecurity. We provide critical foreign intelligence and cyber defence services for the Government of Canada (GC). Protecting Canadian information and the privacy of Canadians is an essential part of our mission.<\/p>\n\n\n\n

CSE does not direct its foreign signals intelligence activities at Canadians or anyone in Canada. The CSE Act, however, recognizes that incidental collection of Canadian communications or Canadian information may occur even when targeting only foreign entities outside Canada. CSE takes very seriously our responsibility to protect Canadian privacy interests that may occur as a result of this incidental collection.<\/p>\n\n\n\n

In the event that Canadian information is incidentally acquired in foreign signals intelligence collection, CSE may include obfuscated references to Canadian individuals or organizations in intelligence reporting if those references are essential to understand the foreign intelligence.<\/p>\n\n\n\n

The obfuscation of this Canadian Identifying Information (CII) in reporting represents one of many layered privacy measures that are applied at different points in CSE\u2019s end-to-end intelligence process. These include, among others, legal and policy training and on-site support for intelligence analysts, mandatory annual privacy tests for all operational employees, data tagging and auto-deletion, strict retention limits, specific handling guidelines, escalating approvals for reporting that includes CII, compliance spot checks, and separate vetting processes for disclosing obfuscated information and taking action on intelligence reporting.<\/p>\n\n\n\n

Pursuant to the Privacy Act, government clients who receive CSE foreign intelligence reports may ask for obfuscated CII to be \u201cdisclosed\u201d to them if that information relates directly to their department\u2019s operating program or activities. Any disclosed CII is provided solely to inform their understanding of the foreign intelligence presented in the report. Government officials may not take action, share or otherwise use the CII disclosed to them under the disclosure process.<\/p>\n\n\n\n

CSE continually refines its CII disclosure process. For example, to help support audit and review, CSE implemented a requirement for government clients to provide an operational justification to support their CII disclosure requests. It is important to note, however, that this is a matter of internal policy and that the Privacy Act does not require the documentation of legal authorities before information can be collected and disclosed.<\/p>\n\n\n\n

Review Recommendations<\/strong><\/p>\n\n\n\n

CSE is committed to continuous improvement. We know that the recommendations from independent external review play an important role in that improvement. CSE has 25 years of experience working with the Office of the CSE Commissioner and now NSIRA to help improve our processes. We thank these review bodies for their work to help build trust and confidence with Canadians.<\/p>\n\n\n\n

CSE continuously refines our privacy-protection measures, including those associated with the disclosure process. Improvements made over the past decade have been informed by the recommendations made by the CSE Commissioner as part of his annual reviews of CSE\u2019s CII disclosures. Prior to NSIRA taking over review duties, CSE had accepted and implemented 95% of the recommendations made by the CSE Commissioner. Those not adopted were duplicative or overtaken by events such as new legislation. In his final 2018-2019 review, the Commissioner confirmed that CSE\u2019s disclosures of CII complied with the law and were done in accordance with ministerial direction.<\/p>\n\n\n\n

In this NSIRA review, as with previous CSE Commissioner reviews, we appreciate and have accepted the recommendations aimed at improving our internal policies and practices.<\/p>\n\n\n\n

Given the overlap in this review period between the two bodies, certain NSIRA recommendations duplicate some presented in the CSE Commissioner\u2019s reviews. As a result, we are pleased to note that many have already been implemented at this time; other NSIRA recommendations are in the process of being implemented.<\/p>\n\n\n\n

Review Findings<\/strong><\/p>\n\n\n\n

Throughout this CII disclosure review, CSE provided extensive feedback and context to NSIRA, and sought clarification regarding the assessment criteria used to determine adequacy or inadequacy of specific records, the vast majority of which were deemed adequate by NSIRA. Without explaining the methodology used to support the findings, we are concerned that broad generalizations based on specific aspects of certain records within a single privacy measure may leave the reader with an incorrect impression about CSE\u2019s overall commitment to privacy protections for Canadians.<\/p>\n\n\n\n

CSE\u2019s case-by-case process for disclosing CII to authorized GC recipients is part of robust and comprehensive internal measures that protect Canadians\u2019 privacy. We balance the sharing of our intelligence with the privacy and safety of Canadians at all times. CSE disclosure analysts receive training and follow internal policies, guidelines and standard operating procedures to guide decision making.<\/p>\n\n\n\n

While committed to implementing the recommended process improvements contained in the report, CSE remains concerned by NSIRA\u2019s overall conclusions and characterization of the disclosure process and its role in the broader privacy framework, which we have expressed to NSIRA.<\/p>\n\n\n\n

Referral to Attorney General of Canada<\/strong><\/p>\n\n\n\n

The Minister of National Defence submitted NSIRA\u2019s classified report to the Attorney General of Canada in January 2021, supported by a comprehensive analysis of each record identified by NSIRA in its review.<\/p>\n\n\n\n

The analysis supports the view that our activities, including applying protections for the privacy of Canadians, were conducted within a robust system of accountability, including compliance with the Privacy Act.<\/p>\n\n\n\n

Additional Information<\/strong><\/p>\n\n\n\n

Top Secret-cleared and special intelligence-indoctrinated GC clients received thousands of foreign intelligence reports via CSE\u2019s mandate under the CSE Act. These reports corresponded to Cabinet-approved intelligence priorities and were delivered to government clients who had both the authority to receive them and the \u2018need to know\u2019 their contents.<\/p>\n\n\n\n

These reports reflect a wide range of intelligence requirements, from support to Canadian military operations, espionage, terrorism and kidnappings to geostrategic concerns, cyber threats, foreign interference and global crises, among others. While only a very small percentage of these reports contain obfuscated CII, the underlying Canadian information is often essential for GC officials to understand the context of the threat and its Canadian nexus.<\/p>\n<\/div><\/div>\n<\/div><\/div><\/section>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":3255,"parent":5128,"menu_order":4,"comment_status":"closed","ping_status":"closed","template":"template-nsira-subpages.php","meta":{"inline_featured_image":false},"categories":[6,9,24,28,33],"tags":[],"yoast_head":"\nReview of the Communications Security Establishment\u2019s Disclosures of Canadian Identifying Information: CSE Responses - National Security and Intelligence Review Agency<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nsira-ossnr.gc.ca\/en\/reviews\/find-a-review\/19-03\/cse-responses\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Review of the Communications Security Establishment\u2019s Disclosures of Canadian Identifying Information: CSE Responses - National Security and Intelligence Review Agency\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nsira-ossnr.gc.ca\/en\/reviews\/find-a-review\/19-03\/cse-responses\/\" \/>\n<meta property=\"og:site_name\" content=\"National Security and Intelligence Review Agency\" \/>\n<meta property=\"article:modified_time\" content=\"2025-02-25T13:38:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nsira-ossnr.gc.ca\/wp-content\/uploads\/Reviews-Featured-2.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t<meta property=\"og:image:height\" content=\"500\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/nsira-ossnr.gc.ca\/reviews\/find-a-review\/19-03\/cse-responses\/\",\"url\":\"https:\/\/nsira-ossnr.gc.ca\/reviews\/find-a-review\/19-03\/cse-responses\/\",\"name\":\"Review of the Communications Security Establishment\u2019s Disclosures of Canadian Identifying Information: CSE Responses - National Security and Intelligence Review Agency\",\"isPartOf\":{\"@id\":\"https:\/\/nsira-ossnr.gc.ca\/#website\"},\"datePublished\":\"2021-06-18T17:19:00+00:00\",\"dateModified\":\"2025-02-25T13:38:56+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/nsira-ossnr.gc.ca\/reviews\/find-a-review\/19-03\/cse-responses\/#breadcrumb\"},\"inLanguage\":\"en-CA\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/nsira-ossnr.gc.ca\/reviews\/find-a-review\/19-03\/cse-responses\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/nsira-ossnr.gc.ca\/reviews\/find-a-review\/19-03\/cse-responses\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Reviews\",\"item\":\"\/reviews\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Find A Review\",\"item\":\"\/reviews\/find-a-review\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Review of the Communications Security Establishment\u2019s Disclosures of Canadian Identifying Information\",\"item\":\"\/reviews\/find-a-review\/19-03\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Review of the Communications Security Establishment\u2019s Disclosures of Canadian Identifying Information: CSE Responses\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/nsira-ossnr.gc.ca\/#website\",\"url\":\"https:\/\/nsira-ossnr.gc.ca\/\",\"name\":\"National Security and Intelligence Review Agency\",\"description\":\"Official Website\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/nsira-ossnr.gc.ca\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-CA\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Review of the Communications Security Establishment\u2019s Disclosures of Canadian Identifying Information: CSE Responses - National Security and Intelligence Review Agency","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nsira-ossnr.gc.ca\/en\/reviews\/find-a-review\/19-03\/cse-responses\/","og_locale":"en_US","og_type":"article","og_title":"Review of the Communications Security Establishment\u2019s Disclosures of Canadian Identifying Information: CSE Responses - National Security and Intelligence Review Agency","og_url":"https:\/\/nsira-ossnr.gc.ca\/en\/reviews\/find-a-review\/19-03\/cse-responses\/","og_site_name":"National Security and Intelligence Review Agency","article_modified_time":"2025-02-25T13:38:56+00:00","og_image":[{"width":350,"height":500,"url":"https:\/\/nsira-ossnr.gc.ca\/wp-content\/uploads\/Reviews-Featured-2.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/nsira-ossnr.gc.ca\/reviews\/find-a-review\/19-03\/cse-responses\/","url":"https:\/\/nsira-ossnr.gc.ca\/reviews\/find-a-review\/19-03\/cse-responses\/","name":"Review of the Communications Security Establishment\u2019s Disclosures of Canadian Identifying Information: CSE Responses - National Security and Intelligence Review Agency","isPartOf":{"@id":"https:\/\/nsira-ossnr.gc.ca\/#website"},"datePublished":"2021-06-18T17:19:00+00:00","dateModified":"2025-02-25T13:38:56+00:00","breadcrumb":{"@id":"https:\/\/nsira-ossnr.gc.ca\/reviews\/find-a-review\/19-03\/cse-responses\/#breadcrumb"},"inLanguage":"en-CA","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nsira-ossnr.gc.ca\/reviews\/find-a-review\/19-03\/cse-responses\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/nsira-ossnr.gc.ca\/reviews\/find-a-review\/19-03\/cse-responses\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Reviews","item":"\/reviews\/"},{"@type":"ListItem","position":2,"name":"Find A Review","item":"\/reviews\/find-a-review\/"},{"@type":"ListItem","position":3,"name":"Review of the Communications Security Establishment\u2019s Disclosures of Canadian Identifying Information","item":"\/reviews\/find-a-review\/19-03\/"},{"@type":"ListItem","position":4,"name":"Review of the Communications Security Establishment\u2019s Disclosures of Canadian Identifying Information: CSE Responses"}]},{"@type":"WebSite","@id":"https:\/\/nsira-ossnr.gc.ca\/#website","url":"https:\/\/nsira-ossnr.gc.ca\/","name":"National Security and Intelligence Review Agency","description":"Official Website","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nsira-ossnr.gc.ca\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-CA"}]}},"_links":{"self":[{"href":"https:\/\/nsira-ossnr.gc.ca\/en\/wp-json\/wp\/v2\/pages\/5142"}],"collection":[{"href":"https:\/\/nsira-ossnr.gc.ca\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/nsira-ossnr.gc.ca\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/nsira-ossnr.gc.ca\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nsira-ossnr.gc.ca\/en\/wp-json\/wp\/v2\/comments?post=5142"}],"version-history":[{"count":8,"href":"https:\/\/nsira-ossnr.gc.ca\/en\/wp-json\/wp\/v2\/pages\/5142\/revisions"}],"predecessor-version":[{"id":8969,"href":"https:\/\/nsira-ossnr.gc.ca\/en\/wp-json\/wp\/v2\/pages\/5142\/revisions\/8969"}],"up":[{"embeddable":true,"href":"https:\/\/nsira-ossnr.gc.ca\/en\/wp-json\/wp\/v2\/pages\/5128"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nsira-ossnr.gc.ca\/en\/wp-json\/wp\/v2\/media\/3255"}],"wp:attachment":[{"href":"https:\/\/nsira-ossnr.gc.ca\/en\/wp-json\/wp\/v2\/media?parent=5142"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nsira-ossnr.gc.ca\/en\/wp-json\/wp\/v2\/categories?post=5142"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nsira-ossnr.gc.ca\/en\/wp-json\/wp\/v2\/tags?post=5142"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}