ATIP field.In a continued effort to renew and train the work force, the ATIP Division is looking forward to adopting the TBS ATIP Developmental Program that will allow employees to move from junior to intermediate to senior positions through a structured system of on-the-job experience and formal evaluation.
Treasury Board Secretariat Management Accountability Framework Assessment Extracts Related to Privacy Issues
As part of the Management Accountability Framework assessment, TBS gave CIC an overall rating of acceptable for the “Effectiveness of Information Management” stream for 2011–2012. For the Access to Information section, CIC received an acceptable rating, as all of the requirements of the Privacy Act were effectively met. For the ATIP governance and capacity section, however, the Department received a strong rating, as evidence clearly demonstrated that a healthy governance structure was in place, which successfully supports the administration of the ATIP program.
Between April 1, 2011, and March 31, 2012, CIC received 4,817 requests under the Privacy Act. This represents an increase of 4.5 percent from the previous reporting period.
Text version: Volume of Requests Received
Text version: Volume of Requests CompletedIn 2011–2012, CIC completed 5,058 requests. In 1,309 cases (26 percent), CIC provided all the information requested. For 2,749 requests (54 percent), the Department invoked exemptions.
The majority of exemptions CIC invoked fell under three sections of the Privacy Act:
Section 26, which protects personal information, was used in 1,864 cases (37 percent); Section 21, which covers international relations, defence and subversive activities, was used in 1,941 cases (38 percent); and Subsection 22(1)(b), which addresses law enforcement and criminal investigations, was used in 690 cases (14 percent). It should be noted that more than one subsection can be applied to a specific request.
In accordance with subsection 8(2) of the Privacy Act, under certain circumstances, a governmental institution may disclose personal information under its control without the consent of the individual to whom the information relates.
During this reporting period, CIC disclosed personal information under subsection 8(2) in responding to 1,296 requests from investigative bodies under paragraph 8(2)(e). CIC also disclosed information under paragraphs 8(2)(a), (b), (c), (d) and (f). No disclosures were made under paragraphs 8(2)(g), (h), (i), (k), (l) and (m).
In addition to processing requests under the Privacy Act, CIC was consulted by other federal government institutions in 52 cases where the records under their control related to CIC activities.
Section 15 of the Privacy Act allows an extension of the statutory time limits if consultations are necessary, if translation is required, or if the request is for a large volume of records and processing it within the original time limit would unreasonably interfere with the operations of the Department.
CIC invoked a total of 142 extensions during the 2011–2012 reporting period. Of these, 58 were deemed necessary so that CIC could consult with other federal institutions prior to responding. Extensions were required in a further 81 instances to search for or through a large volume of records. The Department also invoked 3 extensions for translation purposes.
CIC responded to 2,727 requests (54 percent) within 30 days or less, and a further 1,083 requests (22 percent) within 31 to 60 days. It completed 520 requests (10 percent) within 61 to 120 days, and 728 requests (14 percent) required 121 days or more to complete.
Text version: Privacy Requests Completion TimeThroughout the 2011–2012 reporting period, the Department was notified of 22 privacy complaints received by the Office of the Privacy Commissioner. This represents less than half a percent of all requests completed during this period. The principal reason for these complaints was the Department’s use of exemptions to withhold information.
During the reporting period, 22 complaint investigations were completed. Of these, 10 were deemed not well founded or discontinued, while 12 were resolved to the satisfaction of the requester.
No appeals to the Federal Court were filed against CIC regarding Privacy Act complaints during the 2011–2012 reporting period.
To fulfil its mandate and effectively deliver its programs and services, CIC collects, uses and discloses personal information. In accordance with TBS policy, the Department consistently undertakes privacy impact assessments (PIAs) to determine whether privacy risks are present in new or existing departmental programs, initiatives or projects that collect and retain personal information.
CIC initiated 18 PIAs and completed six others in 2011–2012. Summaries of the six completed PIAs are provided below.
Citizenship and Immigration Canada is collaborating with provincial and territorial governments to undertake a settlement outcomes survey. This nationwide survey, conducted by BC Stats, will collect information from 20,000 newcomers on their settlement experience. CIC will share personal information from its landings data with BC Stats in order for it to develop its sample frame and contact newcomer respondents. A memorandum of understanding has been developed to establish the mechanisms for sharing this personal information as well as the terms and conditions for its use and disclosure. BC Stats will anonymize the data it collects through the settlement outcomes survey by removing all personal identifiers and will write anonymized reports based on analysis of these data. BC Stats will then transfer the anonymized data and reports to CIC and all provincial and territorial governments. At the conclusion of the initiative, BC Stats will return all personal information received from CIC and destroy any copies of this personal information in its possession. The core privacy impact assessment report identified a low risk to privacy and CIC has adopted proper mitigation strategies to further reduce any risks.
Visa application centres (VACs) are independent service providers authorized by the Government of Canada to facilitate the submission of applications for temporary resident visas and study or work permits and permanent resident travel documents to Canadian immigration points of service abroad. The Mexico VACs were the first to be established centrally and governed by CIC headquarters in Ottawa. The VACs assist applicants for temporary residence in Canada by receiving paper applications and forwarding them to the CIC mission daily, entering personal information into an electronic Canadian visa application tracking system that is transmitted to the CIC mission and accepting passport packages from the mission for pickup by the applicant. The VAC staff have no role in decision making—visa assessment and issuance remain with visa officers at CIC. A PIA was conducted on the Mexico VACs in late 2009 to determine the effects of VACs as a service delivery method on individual privacy. The privacy risks identified in this assessment were rated low to moderate and principally involved the security of IT systems and the level of privacy awareness of VAC personnel. Strategies have been implemented to mitigate all identified risks.
The Global Case Management System (GCMS) is CIC’s single, integrated worldwide system used internally to process applications for citizenship and immigration services. GCMS stores only the type of personal information required to process citizenship and immigration clients, including, but not limited to, client identification (i.e., family name and given names, gender, date of birth, country of birth, etc.), contact information and history, and educational and employment information. GCMS provides a level of protection that takes into account CIC’s need for information availability and integrity, Government of Canada requirements for protected B level information, and the requirements of the Privacy Act and associated Treasury Board policies. The most recent PIA on GCMS was submitted to the Office of the Privacy Commissioner in December 2011. As the system continues to evolve, updates to the PIA will be completed if there are major changes in the functionality of GCMS that impact privacy. Some low level privacy risks have been identified as part of this assessment and most have been mitigated. The remaining risk relates to the granting of authority by Library and Archives Canada to delete information from GCMS.
CIC has put in place strategies to protect the information of certificate holders, reduce the likelihood of inadvertent release of information to a third party and protect individuals who hold citizenship status from having their certificate or information used by another person. CIC implemented a new electronic validation system allowing federal government institutions to validate CIC documents issued in respect of citizenship and to confirm the status of the certificate holder. The electronic validation of information began on February 1, 2012, to coincide with the introduction of a new non-secure citizenship certificate. The first departments to receive access to the electronic system are the Department of Foreign Affairs and International Trade and Passport Canada for passport issuance, and Service Canada for SIN issuance.
All new immigrants are required to undergo an immigration medical examination (IME) either in their country of origin or, under certain circumstances, in Canada. This medical examination is mandated under the Immigration and Refugee Protection Act. In Ontario, new immigrants identified with health conditions that pose a potential communicable disease risk (e.g., inactive tuberculosis at the time of landing) are placed on heightened surveillance and are followed for up to five years by local public health units under the auspices of the provincial medical surveillance program (MSP-TB).
Despite the efforts involved, approximately 85 to 95 percent of all TB cases reported among foreignborn people in Ontario are not captured by the MSP-TB, suggesting that the program may not be operating in the most effective or efficient manner. To address this issue, the St. Michael’s Hospital, under the lead of Dr. Kamran Khan, will develop and validate a risk assessment tool designed to identify immigrants at greatest risk of developing active TB. The study will include all permanent residents with an IME who landed in Ontario between 2002 and 2011, and all non-permanent residents identified by the Ontario Ministry of Health and Long-Term Care (MOHLTC) as having developed TB between 2002 and 2011. Personal health information is necessary to enable data linkages between CIC and MOHLTC databases. The database will be purged two years after the study is completed.
The CIC Immigration Contribution Accountability Measurement System (iCAMS) is a Web-based application that supports key Government of Canada commitments related to performance measurement and the evaluation of settlement and resettlement contribution programs. The Foreign Credentials Referral Office (FCRO) was created at CIC to guide, monitor and facilitate the implementation of foreign credential recognition processes in Canada by providing information, path-finding and referral services to internationally trained workers. Through contribution agreement funding, the FCRO has engaged a service provider to deliver these services through the Canadian Immigrant Integration Program to prospective immigrants while they are still in their home country. The “Tracking of Overseas Orientation Session Graduates” is the newly expanded iCAMS module that enables overseas data entry. The privacy impact assessment identified a number of privacy risks for which measures were recommended and implemented to address the issues. The development of guidance and support tools was also identified to further mitigate risks.
PIA summaries for CIC can be found at http://www.cic.gc.ca/english/department/atip/pia/index.asp.
Name of institution: Citizenship and Immigration Canada
Reporting period: 01/04/2011 to 31/03/2012
Received during reporting periodOutstanding from previous reporting periodClosed during reporting periodCarried over to next reporting period
2.1 Disposition and completion timeDisposition of requestsCompletion Time1 to 15 days16 to 30 days31 to 60 days61 to 120 days121 to 180 days181 to 365 daysMore than 365 daysTotal
2.2 Exemptions
2.3 Exclusions
2.4 Format of information releasedDispositionPaperElectronicOther formats2.5 Complexity
2.5.1 Relevant pages processed and disclosedDisposition of requestsNumber of pages processedNumber of pages disclosedNumber of requests
2.5.2 Relevant pages processed and disclosed by size of requestsDispositionUp to 100 pages processed101-500 pages processed501-1000 pages processed1001-5000 pages processedMore than 5000 pages processedNumber of requestsPages disclosedNumber of requestsPages disclosedNumber of requestsPages disclosedNumber of requestsPages disclosedNumber of requestsPages disclosed
2.5.3 Other complexitiesDispositionConsultation requiredLegal Advice SoughtInterwoven InformationOtherTotal2.6 Deemed refusals
2.6.1 Reasons for not meeting statutory deadlineNumber of requests closed past the statutory deadlinePrincipal ReasonWorkloadExternal consultationInternal consultationOther
2.6.2 Number of days past deadlineNumber of days past deadlineNumber of requests past deadline where no extension was takenNumber of requests past deadline where an extension was takenTotal
2.7 Requests for translationTranslation RequestsAcceptedRefusedTotal
Paragraph 8(2)(e)Paragraph 8(2)(m)Total
Requests for correction receivedRequests for correction acceptedRequests for correction refused
5.1 Reasons for extensions and disposition of requestsDisposition of requests where an extension was taken15(a)(i)
Interference with operations15(a)(ii)
Consultation15(b)
Translation or conversion
5.2 Length of extensionsLength of extensions15(a)(i)
Interference with operations15(a)(ii)
Consultation15(b)
Translation purposes
6.1 Consultations received from other government institutions and organizationsConsultationsOther government institutionsNumber of pages to reviewOther organizationsNumber of pages to reviewReceived during the reporting periodOutstanding from the previous reporting periodClosed during the reporting periodPending at the end of the reporting period
6.2 Recommendations and completion time for consultations received from other government institutionsRecommendationNumber of days required to complete consultation requests1 to 15 days16 to 30 days31 to 60 days61 to 120 days121 to 180 days181 to 365 daysMore than 365 daysTotal
6.3 Recommendations and completion time for consultations received from other organizationsRecommendationNumber of days required to complete consultation requests1 to 15 days16 to 30 days31 to 60 days61 to 120 days121 to 180 days181 to 365 daysMore than 365 daysTotal
Number of daysNumber of responses receivedNumber of responses received past deadline
8.1 CostsContracts for privacy impact assessments ($0)Professional services contracts ($13,241)
8.2 Human ResourcesResourcesDedicated full-timeDedicated part-timeTotalPart-time and casual employeesConsultants and agency personnelOFFICIAL DOCUMENT
DEPARTMENT OF CITIZENSHIP AND IMMIGRATION OF CANADA
DELEGATION OF AUTHORITY
ACCESS TO INFORMATION ACT AND PRIVACY ACT
I, the Minister of Citizenship and Immigration, pursuant to Section 73 of the Access to Information Act and the Privacy Act, hereby authorize the officer and employee of Citizenship and Immigration Canada whose position or classification is set out in the attached Schedule to carry out those of my powers, duties or functions under the Acts that are set in the Schedule in relation to that officer and employee.
Dated at Ottawa
This 20th day of May, 2012
DOCUMENT OFFICIEL
MINISTÈRE DE LA CITOYENNETÉ ET DE L’IMMIGRATION DU CANADA
DÉLÉGATION DE POUVOIRS
LOI SUR L’ACCÈS À L’INFORMATION ET LOI SUR LA PROTECTION DES RENSEIGNEMENTS PERSONNELS
En ma qualité de ministre de la Citoyenneté et de l’Immigration et conformément à l’article 73 de la Loi sur l’accès à l’information et de la Loi sur la protection des renseignements personnels, j’autorise par la présente l’agent(e) et employé(e) de Citoyenneté et Immigration Canada dont le poste ou la classification est énoncé dans l’annexe ci-jointe à exécuter ces fonctions, pouvoirs ou attributions en vertu des lois précisées dans l’annexe visant cet(te) agent(e) et employé(e).
Fait à Ottawa
ce 20e jour de mai 2012

Delegation of Authority under the Privacy Act and the Privacy Regulations
DMADMCS/
DGCAAADMSPP/
DGREATIP/
DIRATIP/
MCCIATIP/
MPM05/
SUPPM04ATIP/
PM05ATIP/
PM04ATIP/
PM03Disclosure to investigative bodiesDisclosure for research and statisticsDisclosure in public interest clearly outweighs any invasion of privacyDisclosure in public interest, benefit of individualRecord of disclosure for investigationsNotify Privacy Commissioner of 8(2)(m)Notify Privacy Commissioner of consistent usesNotice where access is grantedNotice where access is refusedDecision regarding translationConversion to alternate formatRefuse access – confidential informationDisclose confidential informationRefuse access – federal-provincial affairsRefuse access – international affairs, defenceRefuse access – law enforcement and investigationRefuse access – security clearanceRefuse access – person under sentenceRefuse access – safety of individualsRefuse access – another person’s informationRefuse access – solicitor-client privilegeRefuse access – medical recordReceive notice of investigationRepresentation to Privacy CommissionerResponse to findings and recommendations of the Privacy Commissioner within a specified timeResponse to review of exempt banksResponse to review of complianceRequest of court hearing in the National Capital RegionEx parte representation to courtCorrection of personal informationNotification of refusal to correct personal informationDisclosure – medical informationDisclosure – medical information – examine in person, in the presence of a duly qualified medical practitioner* Includes acting appointments and assignments to these positions made pursuant to the Public Service Employment Act and Regulations.
Legend
DMDeputy MinisterADMCS/DGCAADM, Corporate Services / Director General, Corporate AffairsAADMSPP/
DGREAssociate ADM, Strategic and Program Policy / Director General, Research and EvaluationATIP/DIRDirector, Access to Information and Privacy (EX-01)ATIP/MCCIManager, Complex Cases and Issues, ATIP (PM-06)ATIP/MPM05/
SUPPM04Managers, Operations and Fast Track, ATIP (PM-05) / Supervisor, Fast Track (PM-04)ATIP/PM05Senior ATIP Administrators, ATIP (PM-05)ATIP/PM04ATIP Administrators, ATIP (PM-04)ATIP/PM03ATIP Officers, ATIP (PM-03)
View the original article here