A Privacy Impact Assessment (PIA) conducted on the Natural Resources Canada (NRCan) Non-Destructive Testing (NDT) Program and the migration to a new Customer Relationship Management (CRM) System. The purpose of this program is to develop and implement programs to certify people who inspect the metals, materials, components and structures on critical infrastructure used in the development and use of Canada’s natural resources, transportation, manufacturing, energy and mining and other sectors.
Why a privacy impact assessment was completed
The purpose of this PIA was to ensure that the NRCan NDT Program and the migration to a new CRM System is compliant with the requirements of the Privacy Act, the generally accepted principles, and the internationally recognized privacy protection standards. The PIA was also conducted to ensure that:
- Privacy is fully integrated into all aspects of the program; and
- Management can adequately answer questions from interested parties about the impact that the program may have on the privacy of individuals.
Additional information
The following are the privacy risks associated with the NRCan NDT Program:
- Clarity of privacy notice statement - To enhance transparency and ensure compliance the Program is updating its privacy notice statement to include all required elements.
- Inaccuracies (e.g., data received from other sources, error in the authentication of the applicant) - The program will ensure that the data validation process using the new CRM system is effective.
- Loss of control (i.e., physical and electronic) - This risk associated to the launch of the new CRM is mitigated by developing options to protect the custody of information through its removal from the repositories (current database, tracking sheets) and backing it up on another site or by securing it to prevent unauthorized access, use or modification.
Related personal information bank
A review of the description section within the Personal Information Bank Certification in Non-Destructive Testing – PPU 015 that accounts for the NDT Program identified a few minor gaps. The description has subsequently been modified. The TBS registration number for this modification continues to be: 000400.
For more information about this privacy impact assessment
Access to Information and Privacy Secretariat
580 Booth Street, 11th Floor
Ottawa, Ontario K1A 0E4
Telephone: 343-292-6045
Facsimile: 613-995-0693
Email: privacy-protectiondelavieprivee@nrcan-rncan.gc.ca
Non-Destructive Testing Certification Team
Email: ndt-end@nrcan-rncan.gc.ca.