Canada’s Privacy Act, Federal Privacy Protection In Canada

Canada’s Privacy Act, Federal Privacy Protection In Canada

Canada’s Privacy Act is a federal law passed in 1983 that protects the personal information that Canadian residents disclose to the Canadian government. While the Personal Information Protection and Electronic Documents Act or PIPEDA governs the collection of personal information from Canadian citizens within the private sector, it does not apply to information that is collected, used, or disclosed by the Canadian government. As such the Privacy Act sets forth various rules and regulations in relation to when and how the Canadian government can collect, use, and disclose the personal information of its citizens.

What are the requirements of the Privacy Act?

The Privacy Act lays out a basic framework concerning the means by which Canadian federal institutions are permitted to collect, use, retain, and disclose personal information. For example, a government institution within Canada is only permitted to collect personal information from Canadian citizens in relation to federal programs or activities. Moreover, any personal information that is collected by Canadian residents must meet the following criteria if said personal information has the potential to directly affect them:

To this end, the Canadian government is prohibited from using or disclosing the personal information of any Canadian citizen with their expressed written consent. However, in the absence of such consent, a government institution is still permitted to use or share the personal information of Canadian citizens in the following ways:

What rights do Canadian citizens have under the Privacy Act?

For Canadian citizens and individuals who are physically present within the country of Canada, the Privacy Act allows for both parties to request access to their own personal information that is being held by a federal institution, as well as request that corrections be made to this information if said information is proven to be inaccurate. Alternatively, federal law institutions can refuse such requests under the following circumstances:

What are the penalties for violating the Privacy Act?

In addition to laying out stipulations and conditions for the collection of personal information from Canadian citizens, the Privacy Act also established the Office of the Privacy Commissioner of Canada or OPC, an independent government agency of the Canadian Parliament that both oversees and enforces the Privacy Act and the PIPEDA. The OPC has the authority and power to both receive and investigates complaints in relation to the Privacy Act, including cases in which a Canadian federal agency has refused a request for access on the part of a Canadian citizen. As such, the Privacy Act states the following in relation to obstruction of the law, as well as fines and penalties that can result from said obstruction:

While the definition of privacy has changed greatly since the Privacy Act was introduced in 1983, the law still serves to protect Canadian citizens from privacy violations in relation to government institutions. With legislation such as the Privacy Act, Canadian residents can have the peace of mind that any information that they disclose to the federal government will be protected in an appropriate manner. Furthermore, with Canada releasing draft legislation to both updates and modernize the country’s private sector privacy legislation, future laws that also update and modernize federal privacy legislation will more than likely be considered as well.


Related Reads