C10. IRCC Policies and Manuals

Standard personal information banks

Class of Individuals: Individuals who report an alleged wrongdoing in the public sector as well as individuals who are alleged to have committed wrongdoing, witnesses, representatives of individuals such as union representatives and legal counsel, investigators and any other party affected by the allegation(s).

Purpose: Personal information is used to assess, investigate, report and resolve alleged wrongdoing in the public sector. When warranted, personal information may also be used to temporarily assign other duties to a public servant and provide notice of actions taken, or proposed to be taken, to the Public Sector Integrity Commissioner on recommendations made by the Commissioner. Personal information is collected pursuant to sections 12 to 14, 22(g), 22(h), 26 and 27 of the PSDPA.

Consistent Uses: The information may be used or disclosed for evaluation and reporting to senior management. In limited circumstances under applicable laws, reporting purposes may include reporting to the Minister, or governing council, responsible for the government institution and publicly reporting on the wrongdoing. Depersonalized and aggregated information may be shared with the Treasury Board Secretariat (Office of the Chief Human Resources Officer) for reporting purposes. Information may be shared with internal security officials, refer to Security Incidents and Privacy Breaches- PSU 939, or other authorities having the powers to investigate under federal, provincial and municipal statutes if the investigation reveals potential fraud or other criminal wrongdoing. Information may be shared with the government institution’s labour relations division when the chief executive officer of the government institution decides to apply disciplinary measures to public servants who perpetrated wrongdoings, refer to Discipline – PSE 911.

Retention and Disposal Standards: For information about the length of time that specific types of common administrative records are maintained by a government institution, including the final disposition of those records, please contact the institution’s Access to Information and Privacy Coordinator.

RDA Number: 98/005

Related Record Number: PRN 926 and PRN 931

Bank Number: PSU 906

Disclosure to Investigative Bodies
Description: This bank describes personal information about individuals that may be requested by and/or disclosed to an investigative body pursuant to paragraph 8(2)(e) of the Privacy Act. The personal information may include any personal information element that a government institution collects about an individual as part of one of its authorized program or activity and that is subsequently requested by an investigative body listed in Schedule 2 of the Privacy Regulations.

Note: The head of a government institution is not required, in accordance to sub-section 9(2) Privacy Act, to account for the disclosure of the information under section 8(2)(e) in the personal information bank from which the personal information was requested. Description last updated: December 2013.

Class of Individuals: Individuals whose personal information has been requested by federal investigative bodies pursuant to paragraph 8(2)(e) of the Privacy Act.

Purpose: The personal information is used to document requests received from investigative bodies pursuant to paragraph 8(2)(e) of the Privacy Act and the responses to such requests. Personal information is collected pursuant to section 8(4) of the Privacy Act and section 7 of the Privacy Regulations.

Consistent Uses: The information may be used or disclosed for statistical and audit purposes. Information may be shared with government institutions who are investigative bodies listed in Schedule 2 of the Privacy Regulations. Investigative bodies that receive personal information as a result of disclosures pursuant to paragraph 8(2)(e) of the Privacy Act may subsequently share such personal information with other federal investigative bodies or law enforcement agencies, for the purpose of the administration or enforcement of a law and/or the detection, prevention, or suppression of crime.

Retention and Disposal Standards: For information about the length of time that specific types of common administrative records are maintained by a government institution, including the final disposition of those records, please contact the institution’s Access to Information and Privacy Coordinator.

RDA Number: Institution-specific

Related Record Number: PRN 937

Bank Number: PSU 913

Electronic Network Monitoring Logs
Description: The records containing the information described in this bank relate to the use by individuals of government institutions electronic networks. Logs containing details of network use by individuals are compiled and are reviewed by appropriate officials of the institution when there is suspected misuse or potential compromise of a government institution’s electronic network, as defined by the government institution’s policies or the Policy on the Use of Electronic Networks. Examples of information that may be in the records include network logs that may link an employee’s workstation to an Internet Protocol address, listings of sites visited and information on any transactions conducted, including date, time, duration and nature of the visit or transaction. The records may also include information on the use of authorization codes assigned to particular individuals, including successful or unsuccessful use of the codes, date, time and frequency.