Organization: Office of the Information Commissioner of Canada
Year: 2024
Month: January
Request Number: A-2023-00059
Request Summary: The Treasury Board of Canada Secretariat (TBS) issued a Privacy Implementation Notice requiring institutions to establish procedures to validate the identity of requesters. This Notice states that institutions responding to requests for personal information should be reasonably assured of the identity of the person requesting, so that personal information is only disclosed to that individual. There a section of the notice that states “If the request is coming from an individual other than the individual to whom the information pertains, the institution must verify both the identity of the requester and the individual, as well as the validity of the authorization of the individual to have that third party make the request on their behalf.”. It is up to each institution to assess and mitigate the risks of privacy breaches. With regards to the above Privacy Implementation Notice, please provide copies of correspondence between OIC and CBSA ATIP with regards to CBSA ATIP's strategy to handle non compliance by requesters.
Disposition: No records exist
Number of pages: 0