Annual report to Parliament. Privacy Act / Canada Mortgage and Housing Corporation. , April 1, 2023-March 31, 2024

Table of Contents

• Annual Report to Parliament: Privacy Act 1
• Table of Contents 2
• Introduction 3
• Who We Are 3
• Organizational Structure 3
• Delegation of Authority 4
• Performance 2023-2024 4
• Requests under the Act 4
• Disposition of Completed Requests 5
• Completion Time and Extensions 5
• Other Requests 5
• Complaints 6
• Costs 6
• Exemptions Invoked 6
• Training and Awareness 7
• Policies, Guidelines, Procedures and Initiatives 7
• Privacy Policy 7
• Compliance and Governance 8
• Summary of Key Issues and Actions Taken on Complaints or Audits 8
• Monitoring Compliance 8
• Privacy Breaches 8
• Privacy Impact Assessments 9
• Public Interest Disclosures 9
• Information Holdings 9
• Annex A – Statistical Report on the Privacy Act 10
• Section 1: Requests Under the Privacy Act 10
• 1.1 Number of requests received 10
• 1.2 Channels of requests 11
• Section 2: Informal Requests 11
• 2.1 Number of informal requests 11
• 2.2 Channels of informal requests 12
• 2.3 Completion time of informal requests 12
• 2.4 Pages released informally 12
• Section 3: Requests Closed During the Reporting Period 13
• 3.1 Disposition and completion time 13
• 3.2 Exemptions 13
• 3.3 Exclusions 14
• 3.4 Format of information released 15
• 3.5 Complexity 15
• 3.5.1 Relevant pages processed and disclosed for paper, e-record and dataset formats 15
• 3.5.2 Relevant pages processed per request disposition for paper, e-record and dataset formats by size of requests 15
• 3.5.3 Relevant minutes processed and disclosed for audio formats 15
• 3.5.4 Relevant minutes processed per request disposition for audio formats by size of requests 16
• 3.5.5 Relevant minutes processed and disclosed for video formats 16
• 3.5.6 Relevant minutes processed per request disposition for video formatsby size of requests 16
• 3.5.7 Other complexities 17
• 3.6 Closed requests 17
• 3.6.1 Number of requests closed within legislated timelines 17
• 3.7 Deemed refusals 17
• 3.7.1 Reasons for not meeting legislated timelines 17
• 3.7.2 Request closed beyond legislated timelines (including any extension taken) 18
• 3.8 Requests for translation 18
• Section 4: Disclosures Under Subsections 8(2) and 8(5) 19
• Section 5: Requests for Correction of Personal Information and Notations 19
• Section 6: Extensions 19
• 6.1 Reasons for extensions 19
• 6.2 Length of extensions 20
• Section 7: Consultations Received From Other Institutions and Organizations 20
• 7.1 Consultations received from other Government of Canada institutions and other organizations 20
• 7.2 Recommendations and completion time for consultations received from other Government of Canada institutions 21
• 7.3 Recommendations and completion time for consultations received from other organizations outside the Government of Canada 21
• Section 8: Completion Time of Consultations on Cabinet Confidences 22
• 8.1 Requests with Legal Services 22
• 8.2 Requests with Privy Council Office 22
• Section 9: Complaints and Investigations Notices Received 23
• Section 10: Privacy Impact Assessments (PIAs) and Personal Information Banks (PIBs) 23
• 10.1 Privacy Impact Assessments 23
• 10.2 Institution-specific and Central Personal Information Banks 23
• Section 11: Privacy Breaches 23
• 11.1 Material Privacy Breaches reported 23
• 11.2 Non-Material Privacy Breaches 23
• Section 12: Resources Related to the Privacy Act 24
• 12.1 Allocated Costs 24
• 12.2 Human Resources 24
• Supplemental Statistical Report on the Access to Information Act and the Privacy Act 25
• Section 1: Open Requests and Complaints Under the Access to Information Act 25
• 1.1 Enter the number of open requests that are outstanding from previous reporting periods. 25
• 1.2 Enter the number of open complaints with the Information Commissioner of Canada that are outstanding from previous reporting periods. 26
• Section 2: Open Requests and Complaints Under the Privacy Act 27
• 2.1 Enter the number of open requests that are outstanding from previous reporting periods. 27
• 2.2 Enter the number of open complaints with the Privacy Commissioner of Canada that are outstanding from previous reporting periods. 28
• Section 3: Social Insurance Number 29
• Section 4: Universal Access under the Privacy Act 29
• Annex B – Delegation Order 30
• Schedule 31
• Access to Information Act 31
• Access to Information Act Regulations 31
• Privacy Act 32
• Privacy Act Regulations 33