Government of Canada / Gouvernement du Canada
Symbol of the Government of Canada

Search

Personal Information Protection and Electronic Documents Act (S.C. 2000, c. 5)

Act current to 2019-07-01 and last amended on 2019-06-21. Previous Versions

PART 1Protection of Personal Information in the Private Sector (continued)

DIVISION 3Audits (continued)

Marginal note:Report of findings and recommendations

  •  (1) After an audit, the Commissioner shall provide the audited organization with a report that contains the findings of the audit and any recommendations that the Commissioner considers appropriate.

  • Marginal note:Reports may be included in annual reports

    (2) The report may be included in a report made under section 25.

DIVISION 4General

Marginal note:Confidentiality

  •  (1) Subject to subsections (2) to (7), 12(3), 12.2(3), 13(3), 19(1), 23(3) and 23.1(1) and section 25, the Commissioner or any person acting on behalf or under the direction of the Commissioner shall not disclose any information that comes to their knowledge as a result of the performance or exercise of any of the Commissioner’s duties or powers under this Part other than those referred to in subsection 10.1(1) or 10.3(2).

  • Marginal note:Confidentiality — reports and records

    (1.1) Subject to subsections (2) to (7), 12(3), 12.2(3), 13(3), 19(1), 23(3) and 23.1(1) and section 25, the Commissioner or any person acting on behalf or under the direction of the Commissioner shall not disclose any information contained in a report made under subsection 10.1(1) or in a record obtained under subsection 10.3(2).

  • Marginal note:Public interest

    (2) The Commissioner may, if the Commissioner considers that it is in the public interest to do so, make public any information that comes to his or her knowledge in the performance or exercise of any of his or her duties or powers under this Part.

  • Marginal note:Disclosure of necessary information

    (3) The Commissioner may disclose, or may authorize any person acting on behalf or under the direction of the Commissioner to disclose, information that in the Commissioner’s opinion is necessary to

    • (a) conduct an investigation or audit under this Part; or

    • (b) establish the grounds for findings and recommendations contained in any report under this Part.

  • Marginal note:Disclosure in the course of proceedings

    (4) The Commissioner may disclose, or may authorize any person acting on behalf or under the direction of the Commissioner to disclose, information in the course of

    • (a) a prosecution for an offence under section 28;

    • (b) a prosecution for an offence under section 132 of the Criminal Code (perjury) in respect of a statement made under this Part;

    • (c) a hearing before the Court under this Part;

    • (d) an appeal from a decision of the Court; or

    • (e) a judicial review in relation to the performance or exercise of any of the Commissioner’s duties or powers under this Part.

  • Marginal note:Disclosure of offence authorized

    (5) The Commissioner may disclose to the Attorney General of Canada or of a province, as the case may be, information relating to the commission of an offence against any law of Canada or a province on the part of an officer or employee of an organization if, in the Commissioner’s opinion, there is evidence of an offence.

  • Marginal note:Disclosure of breach of security safeguards

    (6) The Commissioner may disclose, or may authorize any person acting on behalf or under the direction of the Commissioner to disclose to a government institution or a part of a government institution, any information contained in a report made under subsection 10.1(1) or in a record obtained under subsection 10.3(2) if the Commissioner has reasonable grounds to believe that the information could be useful in the investigation of a contravention of the laws of Canada or a province that has been, is being or is about to be committed.

  • Marginal note:Disclosure

    (7) The Commissioner may disclose information, or may authorize any person acting on behalf or under the direction of the Commissioner to disclose information, in the course of proceedings in which the Commissioner has intervened under paragraph 50(c) of An Act to promote the efficiency and adaptability of the Canadian economy by regulating certain activities that discourage reliance on electronic means of carrying out commercial activities, and to amend the Canadian Radio-television and Telecommunications Commission Act, the Competition Act, the Personal Information Protection and Electronic Documents Act and the Telecommunications Act or in accordance with subsection 58(3) or 60(1) of that Act.

  • 2000, c. 5, s. 20
  • 2010, c. 23, s. 86
  • 2015, c. 32, ss. 17, 26

Marginal note:Not competent witness

 The Commissioner or person acting on behalf or under the direction of the Commissioner is not a competent witness in respect of any matter that comes to their knowledge as a result of the performance or exercise of any of the Commissioner’s duties or powers under this Part in any proceeding other than

  • (a) a prosecution for an offence under section 28;

  • (b) a prosecution for an offence under section 132 of the Criminal Code (perjury) in respect of a statement made under this Part;

  • (c) a hearing before the Court under this Part; or

  • (d) an appeal from a decision of the Court.

Marginal note:Protection of Commissioner

  •  (1) No criminal or civil proceedings lie against the Commissioner, or against any person acting on behalf or under the direction of the Commissioner, for anything done, reported or said in good faith as a result of the performance or exercise or purported performance or exercise of any duty or power of the Commissioner under this Part.

  • Marginal note:Defamation

    (2) No action lies in defamation with respect to

    • (a) anything said, any information supplied or any record or thing produced in good faith in the course of an investigation or audit carried out by or on behalf of the Commissioner under this Part; and

    • (b) any report made in good faith by the Commissioner under this Part and any fair and accurate account of the report made in good faith for the purpose of news reporting.

  • 2000, c. 5, s. 22
  • 2015, c. 32, s. 18

Marginal note:Consultations with provinces

  •  (1) If the Commissioner considers it appropriate to do so, or on the request of an interested person, the Commissioner may, in order to ensure that personal information is protected in as consistent a manner as possible, consult with any person who, under provincial legislation, has functions and duties similar to those of the Commissioner with respect to the protection of such information.

  • Marginal note:Agreements or arrangements with provinces

    (2) The Commissioner may enter into agreements or arrangements with any person referred to in subsection (1) in order to

    • (a) coordinate the activities of their offices and the office of the Commissioner, including to provide for mechanisms for the handling of any complaint in which they are mutually interested;

    • (b) undertake and publish research or develop and publish guidelines or other instruments related to the protection of personal information;

    • (c) develop model contracts or other instruments for the protection of personal information that is collected, used or disclosed interprovincially or internationally; and

    • (d) develop procedures for sharing information referred to in subsection (3).

  • Marginal note:Sharing of information with provinces

    (3) The Commissioner may, in accordance with any procedure established under paragraph (2)(d), share information with any person referred to in subsection (1), if the information

    • (a) could be relevant to an ongoing or potential investigation of a complaint or audit under this Part or provincial legislation that has objectives that are similar to this Part; or

    • (b) could assist the Commissioner or that person in the exercise of their functions and duties with respect to the protection of personal information.

  • Marginal note:Purpose and confidentiality

    (4) The procedures referred to in paragraph (2)(d) shall

    • (a) restrict the use of the information to the purpose for which it was originally shared; and

    • (b) stipulate that the information be treated in a confidential manner and not be further disclosed without the express consent of the Commissioner.

  • 2000, c. 5, s. 23
  • 2010, c. 23, s. 87

Marginal note:Disclosure of information to foreign state

  •  (1) Subject to subsection (3), the Commissioner may, in accordance with any procedure established under paragraph (4)(b), disclose information referred to in subsection (2) that has come to the Commissioner’s knowledge as a result of the performance or exercise of any of the Commissioner’s duties or powers under this Part to any person or body who, under the legislation of a foreign state, has

    • (a) functions and duties similar to those of the Commissioner with respect to the protection of personal information; or

    • (b) responsibilities that relate to conduct that is substantially similar to conduct that would be in contravention of this Part.

  • Marginal note:Information that can be shared

    (2) The information that the Commissioner is authorized to disclose under subsection (1) is information that the Commissioner believes

    • (a) would be relevant to an ongoing or potential investigation or proceeding in respect of a contravention of the laws of a foreign state that address conduct that is substantially similar to conduct that would be in contravention of this Part; or

    • (b) is necessary to disclose in order to obtain from the person or body information that may be useful to an ongoing or potential investigation or audit under this Part.

  • Marginal note:Written arrangements

    (3) The Commissioner may only disclose information to the person or body referred to in subsection (1) if the Commissioner has entered into a written arrangement with that person or body that

    • (a) limits the information to be disclosed to that which is necessary for the purpose set out in paragraph (2)(a) or (b);

    • (b) restricts the use of the information to the purpose for which it was originally shared; and

    • (c) stipulates that the information be treated in a confidential manner and not be further disclosed without the express consent of the Commissioner.

  • Marginal note:Arrangements

    (4) The Commissioner may enter into arrangements with one or more persons or bodies referred to in subsection (1) in order to

    • (a) provide for cooperation with respect to the enforcement of laws protecting personal information, including the sharing of information referred to in subsection (2) and the provision of mechanisms for the handling of any complaint in which they are mutually interested;

    • (b) establish procedures for sharing information referred to in subsection (2);

    • (c) develop recommendations, resolutions, rules, standards or other instruments with respect to the protection of personal information;

    • (d) undertake and publish research related to the protection of personal information;

    • (e) share knowledge and expertise by different means, including through staff exchanges; or

    • (f) identify issues of mutual interest and determine priorities pertaining to the protection of personal information.

  • 2010, c. 23, s. 87
 
Date modified: