2018-19 Departmental Results Report (DRR)
This page has been archived on the Web
Information identified as archived is provided for reference, research or recordkeeping purposes. It is not subject to the Government of Canada Web Standards and has not been altered or updated since it was archived. Please contact us to request a format other than those available.
Operating context and key risks
Operating context
The OPC’s strategic and operating environments are constantly evolving given the exponential speed of technological change, the array of new business models and different means of collecting and manipulating data, which have long overtaken privacy protections.
Privacy is nothing less than a prerequisite for freedom: the freedom to live and develop independently as a person, away from the watchful eye of a surveillance state or commercial enterprises, while still participating voluntarily and actively in the regular, day-to-day activities of a modern society. Technological advances in areas such as data analytics, artificial intelligence, robotics, genetic profiling and the Internet of things raise novel and highly complex privacy risks. Privacy issues are multiplying at such a rapid pace that it is difficult for both individuals and organizations to effectively determine, let alone control, how and for what purpose organizations collect, use and disclose personal information.
Privacy issues are continuing to be more interdisciplinary and cross-jurisdictional. Respect for privacy in a digital world requires inter-operable global rules and cooperation when data flows across borders constantly. Our investigation into the Facebook/Cambridge AnalyticaFootnote 1 scandal is just one example of how our work intersects with areas beyond privacy, including the very foundation of our democratic processes. It is also a strong example of our cross-jurisdictional work and timely results when regulators work in tandem and in support of each other.
Again this year, our Office had to contend with outdated privacy laws. Regrettably, we will have to continue to work within the existing inadequate legislative framework for the foreseeable future. The government has announced its intention to review the two statutes, but this will not come to fruition in the short term.
The challenging privacy landscape continued to have an impact on the OPC’s work. The number of privacy issues for which Parliamentarians, businesses and individuals have required the OPC’s advice and guidance continued to multiply at a rapid pace. For example, this year alone, calls from various Parliamentary Committees increased by 41% from five years ago. Additionally, our Office made thirty (30) Parliamentary appearances and submissions, each entailing a significant workload.
At the same time, stakeholders requested more education and guidance for individuals and organizations at a rate that exceeds the OPC’s current capacity. The scale and pace of technological advances and their use in business and government organizations have also increased the proportion of complex complaints investigated by the OPC and as a result, have strained the Office’s investigative resources.
Furthermore, the OPC’s mandate was expanded last November by the introduction of new mandatory breach notification requirements in the private sector. As of the end of 2018-19, private-sector breaches reported to our Office had increased by roughly 500% from the previous year.
Key risks
| Risks | Risk response strategy and effectiveness | Link to department’s Core Responsibilities |
|---|---|---|
| Adapting to external environment Ability to remain effective and innovate in the way the OPC delivers its mandate given the rapid pace of change in the external environment and the need to continually adapt. |
During the year, the OPC worked to mitigate this risk by:
|
|
| Achieving progress on departmental results Ability to achieve progress against departmental results should demands keep growing and resources remaining limited |
During the year, the OPC worked to mitigate this risk by:
|
|
| Maintaining and recruiting the right skill set Ability to maintain or recruit the right skill set to effectively deliver on its mandate given the increasingly complex and rapidly evolving privacy landscape. |
During the year, the OPC worked to mitigate this risk by:
|
|
- Date modified: