:
Good morning. I'd like to call the meeting to order.
This is our 44th meeting. Pursuant to Standing Order 81(4), we're considering the main estimates, vote 45, specifically of the Office of the Privacy Commissioner under Justice, which was referred to the committee on Tuesday, April 25, 2007.
Before I introduce our witnesses, there's just a small matter I'm seeking the guidance of the committee on. I presented the report of the committee on our statutory review of PIPEDA yesterday in the House of Commons. About an hour before that, it was brought to my attention that, in the opinion entitled “Dissenting Opinion” of the Conservative members, in the last sentence of section 4.0, under “No Stakeholder Input Before the Committee”, the last sentence reads “Minister Day’s letter is attached as an annex to this dissenting opinion.” When the dissenting opinion was received by the clerk, that letter was not in fact attached. The dissenting opinion was sent to the printer without that letter because it wasn't attached, so this document I presented to the House did not contain that letter.
In addition, if the letter were to be attached, it would exceed the five pages for a dissenting opinion this committee decided upon. I am just inquiring whether the committee would have any objection if, in the 350 copies we're going to print for general distribution, notwithstanding the previous discussions and agreement by the committee, we could agree to simply annex the minister's letter as referenced by the Conservative members in their dissenting opinion on recommendation 14. Would that be all right?
:
That's okay for everybody? Then we'll do it that way.
Thank you very much. That takes care of that.
Now we have with us this morning, from the Office of the Privacy Commissioner of Canada, the commissioner herself, Jennifer Stoddart; the director general and chief financial officer, corporate services division, Tom Pulcine; and Wayne Watson, director general, investigation and inquiries branch. Welcome to you all.
I know, Madame, that you have an opening statement, so allez-y.
:
Thank you very much, Mr. Chairman and honourable members.
I do have an opening statement that is being distributed to you, as well as some supplementary information we have prepared, given our past appearances before this committee, to try to clarify some rather complex budgetary points for the honourable members.
Mr. Chairman, with your permission, I won't read my opening statement; all the honourable members do have a copy in both official languages. I'd just like to highlight some points in it and perhaps give the honourable members more time for questions on budgetary issues that interest them.
First of all, I'd like to thank the committee for the report they brought down on PIPEDA yesterday afternoon. It looks like an excellent report, and I see that many of the recommendations we made to this committee have been retained. I thank you for your interest in such practical matters as employment, information rights, due diligence, international cooperation, and so on. However, given that I was out of the office on communication responsibilities yesterday, I haven't had the chance to read it. Also, I will reserve any comments for later.
Once again, thank you for your work on what I know is a very complex topic.
[Translation]
I am here today with regard to the Main Estimates. I first want to say that our top priority continues to be tackling our complaints backlog. Mr. Watson is here with me to answer your questions in this regard, should you have any. We are also putting increased emphasis on education and prevention, as well as leaks and gaps with regard to protecting confidential information.
[English]
We are now in the second year of the two-year implementation schedule for our office's comprehensive business plan, and that's why you see we're now in the second set of bars in that graph we have done to illustrate the evolution of our budgetary status.
I'd just like to remind the honourable members of how the environment in which we work is constantly changing because of the technological backdrop to all the work we do, and this accounts for a large part of our work. International data flows have caused us to give increased attention to the issue of international cooperation, and I can mention GPS, biometrics, RFIDs, ongoing security questions--think of the do-not-fly list--the Anti-terrorist Act, and so on.
Our budget is underpinning five strategic priorities we have outlined in the material put before you. I'll just remind you of them. There's improving and expanding our service delivery, that is, answering complaints and requests for information and responding to the communication needs of Canadians and Canadian organizations. There's engaging with you on privacy issues, and I must say I'm very happy to be appearing before you, I think next Tuesday, on the issue of identity theft. I am really happy that you have taken up that issue, and we're busy putting together a presentation for you on Tuesday.
Then there's Privacy Act reform and PIPEDA reform, which you've just dealt with. I understand you may be looking at Privacy Act reform in the fall again, and I really welcome that. We'd be very happy to do whatever would be appropriate and useful for this committee in your study of the Privacy Act.
We are hosting the 29th International Conference of Data Protection and Privacy Commissioners in Montreal in late September. This is a huge international conference. We expect some five hundred people, and it is a kind of convergence of many privacy players throughout the world. There'll be a whole week of meetings on privacy, including on privacy in various provinces, hosted by provincial commissioners. That is clearly our primary focus from here until the end of September.
We're continuing to build our organizational capacity in terms of staffing, training, and structuring our office. Overall, we're trying to become more and more proactive and less complaint-driven, that is, less passive--by waiting for problems to come to us--but rather going out and trying to find privacy problems and bring a solution to them as they occur.
[Translation]
If you are interested, Mr. Watson can give you more specific figures on our complaints backlog. In any case, I want to draw the attention of committee members to the fact that we have ourcut complaint backlog by approximately 50% over the past year. We are very proud of our efforts, and we hope to be able to eliminate this backlog completely by the end of the current fiscal year.
[English]
We will of course use many means, including new technology and new procedures, in streamlining the complaint system.
In keeping with our wish to become more proactive and more preventive in our approach, we're increasing the number of audits, and we were funded to support an expanded audit capacity. I think we're doubling the number of audits we're doing in the public and private sectors. You will also remember that we have a new audit responsibility for FINTRAC, our national money laundering agency, and by legislation we audit FINTRAC every two years.
This committee has been particularly concerned about--and I understand has given me directions to enhance--public education, communication, and outreach to Canadians and companies. So I'm happy to say that we have completed an interactive e-learning tool for retailers in conjunction with the Retail Council of Canada and the Canadian Federation of Independent Business. We have a PIPEDA-101 DVD, we're looking at drafting breach notification guidelines, and of course we'll take into account the direction you've given us in your report.
Several other of the priorities for this year include continuing to dialogue with this committee or other committees of Parliament in order to work on fundamental reforms to the Privacy Act. I remind you that the Privacy Act has standards that are far below what we now expect of the public sector, and we'll talk a bit more about this in the fall.
That, Mr. Chairman, is an overview of our priorities, and the budget we hope you will vote for us is in support of those priorities. I'd be very happy to answer any questions on our work or any of our particular projects or our past expenditures.
:
Mr. Chairman, thank you.
Madam Commissioner, first of all, I want to congratulate you on the work you do and the advice you give this committee. I personally am quite pleased with the work you do.
As you know, we went through a study of PIPEDA, and I'm pleased you like our results.
One of the issues that came out was the topic of Canadians finding out that there even is a Privacy Commissioner and the legal rights they have. Of course, much of your time is spent trying to educate the public, and a large part of your budget deals with that. I'd like you to talk about that.
And I applaud that. I think that's part of what your role is, educating the public and organizations as to what their rights are.
But on the other hand, there comes a limit to what the taxpayer can afford. How far should the taxpayer go in educating the public? I know you have a web page and you send out literature and you do all those sorts of things, but somewhere along the line there's a limit. Could you comment on that issue?
:
Okay. I appreciate that.
Finally, this is picking up from Mr. Martin's line of questioning pertaining to the stability of this going forward. We note, for example, that over the last two years there's been a substantial change in the allocation that's been required because of the volume of work you have had to do, and you've made some estimates now in accordance with the relatively new legislation, the FAA.
What I thought I heard was that your estimates for the next year...and they seem to be fairly stable relative to this year's estimates in comparative numbers, around the $21 million mark going forward for the next two years. Can you verify that those dollars are predicted based on the existing legislation and/or environment you're working in? Should anything else come up, for example, the changes that may come down in response to our report on PIPEDA, these will in all likelihood change the resources you will need, while your budgets for the next two or three years are based on the existing situation. Would that be a fair summary?
:
Thank you, Mr. Chairman.
Thank you for appearing today.
If I recall correctly, we may have given you a little bit of a hard time last year on budget day; that's what I call these submissions, though I know some of my colleagues aren't excited about the term.
But first of all I want to congratulate you. I think the presentation you gave us was better than last year's. I'm always looking for improvement, and I appreciate that.
I have a number of questions, and if I don't get them all done in five minutes, you'll hear from me again.
Last year you provided us with figures for full-time equivalents for 2006-07 of 125 people. Did you get to that?
:
In terms of the raw numbers presented in the RPP—the blue book—the $19 million you made reference to earlier is highlighted in the chart on page 1. Of that $19 million, we have identified $1.3 million in planned spending in 2007-08, $1 million in 2008-09, and $1 million in 2009-10. Those amounts were given to us by the Treasury Board Secretariat, who asked us to insert them into the RPP, based on their analysis and their estimates from their work on the Federal Accountability Act.
It's our intention to present a business case and come forward to the parliamentary panel and, ultimately, to this committee with respect to our funding needs under the Federal Accountability Act.
As Commissioner Stoddart already made reference, there are basically two aspects of it. One is the expanded coverage of the Privacy Act, which we're assuming will not have a significant financial impact on our organization. So at this stage, although the business case is not yet finalized, it is not our intent to seek additional resources for the expanded coverage of the Privacy Act.
The second aspect of Bill that impacted us is the fact that we are subject to our own act, as well as to the Access to Information Act. Based on that, we know that we will have a need, and will have to set up an ATIP office. This year we've had some money allocated to that out of our base, or from non-additional resources, but it will probably will not be sufficient—though, once again, the business case is not finalized.
Thank you, Madam Commissioner, for appearing before us again. Thank you for helping us prepare the last report.
I get the impression, at least, that much as in private business, when something new is implemented, it takes a little while to get things just right. But I have a very secure feeling that you have things well under control. There are some concerns about some of the budgetary items, but it looks to me like things are settling in. You have your people in place.
There is only one thing I see that I question, and the reason I raise it is because when we had before us the Office of the Information Commissioner, they testified that their office had partnered with the University of Alberta to create a program for a degree that would fill some of their functions.
I think I was hearing that you're having some trouble, and I would just assume that you're looking for a specially trained person. So I guess my question is whether you have moved along the same way. Have you initiated something like that, or are you looking to investigate that and partner, possibly, with a university to create a course?
:
“Comfortable” sounds like kind of a luxury that as Privacy Commissioner of Canada I don't think is a concept that fits the state of mind. No, I don't feel comfortable.
Technology is constantly changing. We have a huge challenge to try to take a law and the civil service structures and the state they're in and be flexible, proactive, and so on, to meet the challenge. It's not comfortable.
I think we have to be extremely vigilant. And we are stretched, as are commissioners throughout the world, to try to meet these challenges. If you look at what's happening in terms of Internet privacy--and we'll come back to that on Tuesday--the world is just moving so fast.
That being said, I don't think I am hampered in my budget in trying to meet those challenges. The challenges have to do with knowledge acquisition; forming a plan to deal with new challenges; having the team and the members we need on the team; and reacting with speed, which is always a challenge in a bureaucracy--and I don't say that ironically. I think in any big organization within or outside the government, reacting quickly is always a problem. We see a fragmented world in which the actors now can be individuals with computers and websites.