Annual report to Parliament on the application of the Privacy Act 2018-2019

Place du Centre
200 Promenade du Portage
4th Floor
Gatineau, Quebec
K1A 1K8

12 June 2019

The Honourable William Morneau, P.C., M.P.
Minister of Finance and
Acting President of the Queen’s Privy Council for Canada
House of Commons
Ottawa, Ontario
K1A 0A6

Dear Minister:

In accordance with section 72 of the Privacy Act, the Transportation Safety Board of Canada is pleased to submit to Parliament this report on its activities relating to the application of the Act for the period 1 April 2018 to 31 March 2019.

Sincerely,

1.0 Introduction

Pursuant to section 72 of the Privacy Act, the Transportation Safety Board of Canada (TSB) is pleased to table in Parliament this report on its activities relating to the application of the Act. The report covers the period from 1 April 2018 to 31 March 2019.

The purpose of the Privacy Act is to protect the privacy of individuals with respect to personal information about themselves held by government institutions such as the TSB, and to provide individuals with a right of access to that information.

The Canadian Transportation Accident Investigation and Safety Board Act provides the legal framework that governs the TSB’s activities. Our mandate is to advance transportation safety in the air, marine, pipeline and rail modes of transportation by:

• conducting independent investigations, including public inquiries when necessary, into selected transportation occurrences in order to make findings as to their causes and contributing factors;
• identifying safety deficiencies, as evidenced by transportation occurrences;
• making recommendations designed to eliminate or reduce any such safety deficiencies; and
• reporting publicly on our investigations and on the findings in relation thereto.

More information on the TSB is available at www.tsb-bst.gc.ca.

The TSB’s administration of its Access to Information and Privacy (ATIP) activities is in accordance with the government’s stated principles that government information should be available to the public with only specific and limited exceptions. Furthermore, the TSB treats personal information in compliance with the code of fair information practice expressed in the Privacy Act.

2.0 ATIP Office organization

During 2018–19, the General Counsel held the responsibilities of the ATIP Coordinator. The ATIP Office also consisted of four full-time positions, one casual position and one consultant.

The ATIP Office administers the requests made pursuant to the Act and provides functional advice and guidance to managers and employees concerning the release of information and protection of privacy. ATIP analysts are required to exhibit strong consultative and negotiating skills when meeting with requesters, employees of the TSB, and representatives of the Office of the Privacy Commissioner.

3.0 Delegation of authority

As required by the legislation, a delegation of authority is in place. For the purposes of the Privacy Act, the “head of the institution” as defined in section 3 of the Act is the Chair of the TSB. The incumbents of the positions of Chief Operating Officer, General Counsel, and Senior ATIP Analyst have been delegated powers by the Chair deemed appropriate for the effective administration of the Act. These employees ensure that the TSB meets all its obligations fairly and consistently. The delegation authority remained the same in 2018–19. A copy of the delegation order is attached as Appendix A.

4.0 Disposition of requests

4.1 Requests for personal information

During the 2018–19 reporting period, twenty-six (26) formal requests for personal information were received, compared to twenty-one (21) received in 2017-18 and thirty-two (32) in 2016–17. Privacy requests received by the TSB are primarily attributed to Canadian airline pilots inquiring as to whether they are named in any occurrences reported to the TSB. Certain international airlines request this information as a pre-employment requirement.

Of the twenty-five (25) requests closed in 2018–19, records were fully disclosed in twenty-one (21) cases and in three (3) cases records were disclosed in part. One (1) request was carried over to the next fiscal year.

Of the twenty-five (25) requests closed during the reporting period, twenty (20) were completed within 1 to 15 days, two (2) were completed within 16 to 30 days, two (2) were completed within 31 to 60 days and one (1) was completed within 61 to 120 days. The average time taken to process a request during the 2018–19 reporting period was 18 calendar days, compared with last year’s average of 15.8 calendar days, which is explained by a slight increase in the number of requests.

During this period, the ATIP Office was involved in the search, preparation, and review of 1943 pages of information, and the reproduction and release of 429 pages of information. Last year, 1357 pages were reviewed and 76 pages were released. The variation in the number of pages reviewed between years is due to the different type of requests received.

The TSB’s policy of openness allows for the disclosure of information to its employees without necessarily requiring that they invoke the Privacy Act. Human resources officers and support staff handle these requests as part of their routine duties. The TSB remains vigilant in meeting requirements under the Act to protect personal information under its control. This is achieved by ensuring that employees are cognizant of their responsibility to protect the personal information they handle in the course of their duties and by respecting the code of fair information practice enshrined in the legislation.

4.2 Costs

During 2018-19, the ATIP Office incurred an estimated $48,071 in costs to administer the Privacy Act, compared to $40,242 for the 2017–18 reporting period. These costs include salaries, overtime, goods and services, and professional services contracts for temporary help staff but do not include the resources expended by other areas of the TSB to meet the requirements of the Act. The increase in cost is the result of the increased number of records reviewed compared to the previous reporting period.

5.0 Training and education

The TSB has an orientation program in place for new employees, which includes training on ATIP awareness. In addition, the TSB has now made it mandatory for all staff to attend more comprehensive ATIP training sessions given by the ATIP Office. During 2018–19, the ATIP Office provided four (4) training sessions to thirty-four (34) employees at the headquarters and the regional offices, as part of the new employee orientation program. The ATIP Office also provides advice and guidance upon request to individuals and small groups of employees.

6.0 Policies, guidelines and procedures

No new or revised privacy-related policies, guidelines, or procedures were implemented by the TSB during the reporting period.

7.0 Complaints and investigations

No complaints were received during 2018–19.

8.0 Monitoring process

The TSB monitors the time to process privacy requests, through biweekly meetings between the General Counsel (ATIP Coordinator) and the Senior ATIP Analyst, during which the status of outstanding requests is reviewed. Any significant issues are raised to the Chief Operating Officer on an ad-hoc basis when required.

9.0 Material privacy breaches

No material privacy breaches occurred during the reporting period.

10.0 Privacy impact assessments

The TSB did not undertake any privacy impact assessments during the reporting period.

11.0 Disclosures pursuant to paragraph 8(2)(m)

During fiscal year 2018–19, the TSB made no disclosure of information in the public interest pursuant to paragraph 8(2)(m).

12.0 Statistics required by Treasury Board

The statistics required by the Treasury Board Secretariat are found in Appendix B.

Appendices

Appendix A – Delegation order

Appendix B – Statistical report on the Privacy Act

Name of institution: Transportation Safety Board of Canada

Reporting period: 2018-04-01 to 2019-03-31

Part 1: Requests under the Privacy Act

1.1 Requests under the Privacy Act

Part 2: Requests closed during the reporting period

2.1 Disposition and completion time

2.2 Exemptions

2.3 Exclusions

2.4 Format of information released

2.5 Complexity

2.5.1 Relevant pages processed and disclosed

2.5.2 Relevant pages processed and disclosed, by size of request

2.5.3 Other complexities

2.6 Deemed refusals

2.6.1 Reasons for not meeting statutory deadline

2.6.2 Number of days past deadline

2.7 Requests for translation

2.7.1 Requests for translation

Part 3: Disclosures under subsections 8(2) and 8(5)

3.1 Disclosures under subsections 8(2) and 8(5)

Part 4: Requests for correction of personal information and notations

4.1 Requests for correction of personal information and notations

Part 5: Extensions

5.1 Reasons for extensions and disposition of requests

5.2 Length of extension

Part 6: Consultations received from other institutions and organizations

6.1 Consultations received from other Government of Canada institutions, organizations

6.2 Recommendations and completion time for consultations received from other Government of Canada institutions

6.3 Recommendations and completion time for consultations received from other organizations

Part 7: Completion time of consultations on Cabinet confidences

7.1 Requests with Legal Services

7.2 Requests with Privy Council Office

Part 8: Complaints and investigations notices received

8.1 Complaints and investigations notices received

Part 9: Privacy impact assessments (PIAs)

Part 10: Resources related to the Privacy Act

10.1 Costs

10.2 Human resources