Natural Resources Canada (NRCan) is committed to protecting your personal information and ensuring that privacy protection is a core consideration in the development, design, implementation, and administration of all its programs and services involving personal information in accordance with the Privacy Act, the Treasury Board Secretariat’s (TBS) Directive on Privacy Practices, and other applicable policies and regulations.
As per TBS’s Directive on Privacy Practices, NRCan strengthens privacy protection through the development of Privacy Impact Assessments which help us determine and mitigate any privacy risks linked to delivering a program or service. The purpose of the assessments is to evaluate whether program and delivery service initiatives that involve personal information have privacy risks involved in collecting, using, disclosing, sharing or retaining personal information and to ensure that they are assessed and mitigated.
The PIA process
Institutions must develop and maintain PIAs to evaluate whether program and service delivery initiatives involving personal information comply with privacy requirements and to resolve privacy issues that may be of potential concern.
Under Treasury Board Secretariat policy, all departments and agencies must conduct PIAs for proposals of all new programs and services that raise privacy issues. The PIA goes through an internal approval process before being signed-off on by the Deputy Minister and sent to the Office of the Privacy Commissioner for review.
The following are summaries of Privacy Impact Assessments which have been completed by NRCan: