Privacy and access to information

Access to information and personal information requests

There are two types of requests that can be made to CDIC:

1. Access to information requests
   • Any Canadian citizen, permanent resident or any person or corporation residing in Canada has the right to request access to records of government institutions that are subject to the Access to Information Act.
2. Personal information requests
   • Anyone has the right to access their personal information held by government institutions that are subject to the Privacy Act.

These requests can be made either formally or informally:

• a formal request is a request for records made under the Access to Information Act or Privacy Act in writing. Each formal request filed with CDIC under the Access to Information Act requires an application fee of $5.00, payable by cash or cheque to CDIC.
• an informal request is a request for records which does not invoke the right of access provided by the Access to Information Act or the Privacy Act. There are no formal time constraints, fees or opportunities for independent review of decisions for this type of request.
  

To make a formal request online

The Access to Information and Privacy Online Request Service offers a convenient way to make:

• an access to information request
• a personal information request

This service:

• enables individuals to make an online request for information
• eliminates the need to print, scan, and email or mail a form to CDIC

To make a formal request by mail, fax or e-mail

• consult InfoSource to find if CDIC is the appropriate government institution for the information you are seeking
• complete an Access to Information Request Form or Personal Information Request Form.  If it is not convenient for you to fill in a form, you may send a letter or email. Clearly indicate in your correspondence that you are requesting information under the Access to Information Act or Privacy Act and include:
  • a description of the information or records you want
  • the preferred method of viewing the records (e.g. digital or printed copies)
  • the application fee for formal requests made under the Access to Information Act
    • Note: There is no application fee for information requested under the Privacy Act, nor for informal access to information requests
  • send the completed form, letter or email to CDIC’s Access to Information and Privacy Coordinator at:

Completed access to information requests

We post summaries of completed Access to Information (ATI) requests processed by our Access to Information and Privacy Office.

You may search the summaries of completed Access to Information (“ATI”) requests and request a copy of the records at no cost from the Open Government Completed Access to Information Requests.

Principles for assisting applicants

In processing your request under the Access to Information Act, or Privacy Act, we will:

• process your request without regard to your identity.
• offer reasonable assistance throughout the request process.
• provide information on the Access to Information Act and the Privacy Act, including information on the processing of your request and your right to complain to the Information Commissioner or Privacy Commissioner of Canada.
• inform you as appropriate and without undue delay when your request needs to be clarified.
• make every reasonable effort to locate and retrieve the requested records under the control of CDIC.
• apply limited and specific exemptions to the requested records.
• provide accurate and complete responses.
• provide timely access to the requested information.
• provide records in the format and official language requested, as appropriate.
• provide an appropriate location on CDIC‘s premises to examine the requested information.

Complaints

Please be advised that you are entitled to complain to the Information Commissioner concerning the processing of your access to information request. In the event you decide to avail yourself of this right, your notice of complaint should be addressed to:

You may obtain additional information on the complaint process by visiting the website of the Office of the Information Commissioner. 

Also, please be advised that you are entitled to complain to the Privacy Commissioner concerning the processing of your personal information request. In the event you decide to avail yourself of this right, your notice of complaint should be addressed to:

You may obtain additional information on the complaint process by visiting the website of the Office of the Privacy Commissioner.

Privacy Impact Assessments

Privacy Impact Assessments ensure that all new or substantially modified activities involving the collection, use, retention and disclosure of personal information are conducted in accordance with the Privacy Act.

2015 – Regulatory Reporting System (RRS)

Summary

The Privacy Impact Assessment (“PIA”) is a joint initiative undertaken by the Bank of Canada, Canada Deposit Insurance Corporation (“CDIC”) and the Office of the Superintendent of Financial Institutions (“OSFI”) (collectively referred to as “the Agencies” or individually as an “Agency”), concerning the Regulatory Reporting System (RRS). It collects, validates and maintains financial and corporate data and returns filed by federally regulated financial institutions and private pension plans, required by law to do so. While operational since 1998, the Agencies have determined to comprehensively replace the Tri-Agency Database System’s (TDS) capabilities to better meet the needs of users, clients and downstream systems.

Some of the significant objectives of the TDS renewal and RRS redevelopment initiative were to:

• reduce the effort required to introduce or modify returns and reduce the time required to accept, validate and distribute a larger volume of regulatory information;
• integrate the collection and validation of deposit taking institutions, insurance and private pension plans regulatory filings into a single system;
• simplify administration of filer accounts and communication;
• permit the use of a self-service model for filers and users, including contact management, password maintenance and client communication; and
• facilitate interactions between the RRS application and downstream systems to allow faster and improved access to information and data.

The PIA was completed to adequately assess and address the privacy implications involved with the new software (RRS) and to fulfill OSFI and CDIC’s obligations under the Treasury Board of Canada directive on PIAs.

The PIA concluded that the implementation of the RRS does not require specific recommendations with respect to improving the collection, use or disclosure of the minimal personal information collected. Much of that information is often made publicly available by the institutions submitting the filings.