31. Before commencing an investigation of a complaint under this Act, the Privacy Commissioner shall notify the head of the government institution concerned of the intention to carry out the investigation and shall inform the head of the institution of the substance of the complaint.

1980-81-82-83, c. 111, Sch. II “31”.

32. Subject to this Act, the Privacy Commissioner may determine the procedure to be followed in the performance of any duty or function of the Commissioner under this Act.

1980-81-82-83, c. 111, Sch. II “32”.

33. (1) Every investigation of a complaint under this Act by the Privacy Commissioner shall be conducted in private.

(2) In the course of an investigation of a complaint under this Act by the Privacy Commissioner, the person who made the complaint and the head of the government institution concerned shall be given an opportunity to make representations to the Commissioner, but no one is entitled as of right to be present during, to have access to or to comment on representations made to the Commissioner by any other person.

1980-81-82-83, c. 111, Sch. II “33”.

34. (1) The Privacy Commissioner has, in relation to the carrying out of the investigation of any complaint under this Act, power

(a) to summon and enforce the appearance of persons before the Privacy Commissioner and compel them to give oral or written evidence on oath and to produce such documents and things as the Commissioner deems requisite to the full investigation and consideration of the complaint, in the same manner and to the same extent as a superior court of record;

(b) to administer oaths;

(c) to receive and accept such evidence and other information, whether on oath or by affidavit or otherwise, as the Privacy Commissioner sees fit, whether or not the evidence or information is or would be admissible in a court of law;

(d) to enter any premises occupied by any government institution on satisfying any security requirements of the institution relating to the premises;

(e) to converse in private with any person in any premises entered pursuant to paragraph (d) and otherwise carry out therein such inquiries within the authority of the Privacy Commissioner under this Act as the Commissioner sees fit; and

(f) to examine or obtain copies of or extracts from books or other records found in any premises entered pursuant to paragraph (d) containing any matter relevant to the investigation.

(2) Notwithstanding any other Act of Parliament or any privilege under the law of evidence, the Privacy Commissioner may, during the investigation of any complaint under this Act, examine any information recorded in any form under the control of a government institution, other than a confidence of the Queen’s Privy Council for Canada to which subsection 70(1) applies, and no information that the Commissioner may examine under this subsection may be withheld from the Commissioner on any grounds.

(3) Except in a prosecution of a person for an offence under section 131 of the Criminal Code (perjury) in respect of a statement made under this Act, in a prosecution for an offence under this Act or in a review before the Court under this Act or an appeal therefrom, evidence given by a person in proceedings under this Act and evidence of the existence of the proceedings is inadmissible against that person in a court or in any other proceedings.

(4) Any person summoned to appear before the Privacy Commissioner pursuant to this section is entitled in the discretion of the Commissioner to receive the like fees and allowances for so doing as if summoned to attend before the Federal Court.

(5) Any document or thing produced pursuant to this section by any person or government institution shall be returned by the Privacy Commissioner within ten days after a request is made to the Commissioner by that person or government institution, but nothing in this subsection precludes the Commissioner from again requiring its production in accordance with this section.

R.S., 1985, c. P-21, s. 34; R.S., 1985, c. 27 (1st Supp.), s. 187.

35. (1) If, on investigating a complaint under this Act in respect of personal information, the Privacy Commissioner finds that the complaint is well-founded, the Commissioner shall provide the head of the government institution that has control of the personal information with a report containing

(a) the findings of the investigation and any recommendations that the Commissioner considers appropriate; and

(b) where appropriate, a request that, within a time specified therein, notice be given to the Commissioner of any action taken or proposed to be taken to implement the recommendations contained in the report or reasons why no such action has been or is proposed to be taken.

(2) The Privacy Commissioner shall, after investigating a complaint under this Act, report to the complainant the results of the investigation, but where a notice has been requested under paragraph (1)(b) no report shall be made under this subsection until the expiration of the time within which the notice is to be given to the Commissioner.

(3) Where a notice has been requested under paragraph (1)(b) but no such notice is received by the Commissioner within the time specified therefor or the action described in the notice is, in the opinion of the Commissioner, inadequate or inappropriate or will not be taken in a reasonable time, the Commissioner shall so advise the complainant in his report under subsection (2) and may include in the report such comments on the matter as he thinks fit.

(4) Where, pursuant to a request under paragraph (1)(b), the head of a government institution gives notice to the Privacy Commissioner that access to personal information will be given to a complainant, the head of the institution shall give the complainant access to the information forthwith on giving the notice.

(5) Where, following the investigation of a complaint relating to a refusal to give access to personal information under this Act, access is not given to the complainant, the Privacy Commissioner shall inform the complainant that the complainant has the right to apply to the Court for a review of the matter investigated.

1980-81-82-83, c. 111, Sch. II “35”.

36. (1) The Privacy Commissioner may, from time to time at the discretion of the Commissioner, carry out investigations of the files contained in personal information banks designated as exempt banks under section 18.

(2) Sections 31 to 34 apply, where appropriate and with such modifications as the circumstances require, in respect of investigations carried out under subsection (1).

(3) If, following an investigation under subsection (1), the Privacy Commissioner considers that any file contained in a personal information bank should not be contained therein within the terms of the order designating the bank as an exempt bank, the Commissioner shall provide the head of the government institution that has control of the bank with a report containing

(a) the findings of the Commissioner and any recommendations that the Commissioner considers appropriate; and

(b) where appropriate, a request that, within a time specified therein, notice be given to the Commissioner of any action taken or proposed to be taken to implement the recommendations or reasons why no such action has been or is proposed to be taken.

(4) Any report made by the Privacy Commissioner under subsection (3), together with any notice given to the Commissioner in response thereto, may be included in a report made pursuant to section 38 or 39.

(5) Where the Privacy Commissioner requests a notice under paragraph (3)(b) in respect of any file contained in a personal information bank designated under section 18 as an exempt bank and no notice is received within the time specified therefor or the action described in the notice is, in the opinion of the Commissioner, inadequate or inappropriate or will not be taken in a reasonable time, the Privacy Commissioner may make an application to the Court under section 43.

1980-81-82-83, c. 111, Sch. II “36”.

37. (1) The Privacy Commissioner may, from time to time at the discretion of the Commissioner, carry out investigations in respect of personal information under the control of government institutions to ensure compliance with sections 4 to 8.

(2) Sections 31 to 34 apply, where appropriate and with such modifications as the circumstances require, in respect of investigations carried out under subsection (1).

(3) If, following an investigation under subsection (1), the Privacy Commissioner considers that a government institution has not complied with sections 4 to 8, the Commissioner shall provide the head of the institution with a report containing the findings of the investigation and any recommendations that the Commissioner considers appropriate.

(4) Any report made by the Privacy Commissioner under subsection (3) may be included in a report made pursuant to section 38 or 39.

1980-81-82-83, c. 111, Sch. II “37”.

38. The Privacy Commissioner shall, within three months after the termination of each financial year, submit an annual report to Parliament on the activities of the office during that financial year.

1980-81-82-83, c. 111, Sch. II “38”.

39. (1) The Privacy Commissioner may, at any time, make a special report to Parliament referring to and commenting on any matter within the scope of the powers, duties and functions of the Commissioner where, in the opinion of the Commissioner, the matter is of such urgency or importance that a report thereon should not be deferred until the time provided for transmission of the next annual report of the Commissioner under section 38.

(2) Any report made pursuant to subsection (1) that relates to an investigation under this Act shall be made only after the procedures set out in section 35, 36 or 37 have been followed in respect of the investigation.

1980-81-82-83, c. 111, Sch. II “39”.

40. (1) Every report to Parliament made by the Privacy Commissioner under section 38 or 39 shall be made by being transmitted to the Speaker of the Senate and to the Speaker of the House of Commons for tabling in those Houses.

(2) Every report referred to in subsection (1) shall, after it is transmitted for tabling pursuant to that subsection, be referred to the committee designated or established by Parliament for the purpose of subsection 75(1).

1980-81-82-83, c. 111, Sch. II “40”.

41. Any individual who has been refused access to personal information requested under subsection 12(1) may, if a complaint has been made to the Privacy Commissioner in respect of the refusal, apply to the Court for a review of the matter within forty-five days after the time the results of an investigation of the complaint by the Privacy Commissioner are reported to the complainant under subsection 35(2) or within such further time as the Court may, either before or after the expiration of those forty-five days, fix or allow.

1980-81-82-83, c. 111, Sch. II “41”.

42. The Privacy Commissioner may

(a) apply to the Court, within the time limits prescribed by section 41, for a review of any refusal to disclose personal information requested under subsection 12(1) in respect of which an investigation has been carried out by the Privacy Commissioner, if the Commissioner has the consent of the individual who requested access to the information;

(b) appear before the Court on behalf of any individual who has applied for a review under section 41; or

(c) with leave of the Court, appear as a party to any review applied for under section 41.

1980-81-82-83, c. 111, Sch. II “42”.

43. In the circumstances described in subsection 36(5), the Privacy Commissioner may apply to the Court for a review of any file contained in a personal information bank designated as an exempt bank under section 18.

1980-81-82-83, c. 111, Sch. II “43”.

44. An application made under section 41, 42 or 43 shall be heard and determined in a summary way in accordance with any special rules made in respect of such applications pursuant to section 46 of the Federal Courts Act.

R.S., 1985, c. P-21, s. 44; 2002, c. 8, s. 182.

45. Notwithstanding any other Act of Parliament or any privilege under the law of evidence, the Court may, in the course of any proceedings before the Court arising from an application under section 41, 42 or 43, examine any information recorded in any form under the control of a government institution, other than a confidence of the Queen’s Privy Council for Canada to which subsection 70(1) applies, and no information that the Court may examine under this section may be withheld from the Court on any grounds.

1980-81-82-83, c. 111, Sch. II “45”.

46. (1) In any proceedings before the Court arising from an application under section 41, 42 or 43, the Court shall take every reasonable precaution, including, when appropriate, receiving representations ex parte and conducting hearings in camera, to avoid the disclosure by the Court or any person of

(a) any information or other material that the head of a government institution would be authorized to refuse to disclose if it were requested under subsection 12(1) or contained in a record requested under the Access to Information Act; or

(b) any information as to whether personal information exists where the head of a government institution, in refusing to disclose the personal information under this Act, does not indicate whether it exists.

(2) The Court may disclose to the appropriate authority information relating to the commission of an offence against any law of Canada or a province on the part of any officer or employee of a government institution, if in the opinion of the Court there is evidence thereof.

1980-81-82-83, c. 111, Sch. II “46”.

47. In any proceedings before the Court arising from an application under section 41, 42 or 43, the burden of establishing that the head of a government institution is authorized to refuse to disclose personal information requested under subsection 12(1) or that a file should be included in a personal information bank designated as an exempt bank under section 18 shall be on the government institution concerned.

1980-81-82-83, c. 111, Sch. II “47”.

48. Where the head of a government institution refuses to disclose personal information requested under subsection 12(1) on the basis of a provision of this Act not referred to in section 49, the Court shall, if it determines that the head of the institution is not authorized under this Act to refuse to disclose the personal information, order the head of the institution to disclose the personal information, subject to such conditions as the Court deems appropriate, to the individual who requested access thereto, or shall make such other order as the Court deems appropriate.

1980-81-82-83, c. 111, Sch. II “48”.

49. Where the head of a government institution refuses to disclose personal information requested under subsection 12(1) on the basis of section 20 or 21 or paragraph 22(1)(b) or (c) or 24(a), the Court shall, if it determines that the head of the institution did not have reasonable grounds on which to refuse to disclose the personal information, order the head of the institution to disclose the personal information, subject to such conditions as the Court deems appropriate, to the individual who requested access thereto, or shall make such other order as the Court deems appropriate.

1980-81-82-83, c. 111, Sch. II “49”.

50. Where the Privacy Commissioner makes an application to the Court under section 43 for a review of a file contained in a personal information bank designated as an exempt bank under section 18, the Court shall, if it determines

(a) in the case of a file contained in the bank on the basis of personal information described in paragraph 22(1)(a) or subsection 22(2), that the file should not be included therein, or

(b) in the case of a file contained in the bank on the basis of personal information described in section 21 or paragraph 22(1)(b) or (c), that reasonable grounds do not exist on which to include the file in the bank,

order the head of the government institution that has control of the bank to remove the file from the bank or make such other order as the Court deems appropriate.

1980-81-82-83, c. 111, Sch. II “50”; 1984, c. 40, s. 60.

51. (1) Any application under section 41 or 42 relating to personal information that the head of a government institution has refused to disclose by reason of paragraph 19(1)(a) or (b) or section 21, and any application under section 43 in respect of a file contained in a personal information bank designated as an exempt bank under section 18 to contain files all of which consist predominantly of personal information described in section 21, shall be heard and determined by the Chief Justice of the Federal Court or by any other judge of the Court that the Chief Justice may designate to hear the applications.

(2) An application referred to in subsection (1) or an appeal brought in respect of such application shall

(a) be heard in camera; and

(b) on the request of the head of the government institution concerned, be heard and determined in the National Capital Region described in the schedule to the National Capital Act.

(3) During the hearing of an application referred to in subsection (1) or an appeal brought in respect of such application, the head of the government institution concerned shall, on the request of the head of the institution, be given the opportunity to make representations ex parte.

R.S., 1985, c. P-21, s. 51; 2002, c. 8, s. 159.

52. (1) Subject to subsection (2), the costs of and incidental to all proceedings in the Court under this Act shall be in the discretion of the Court and shall follow the event unless the Court orders otherwise.

(2) Where the Court is of the opinion that an application for review under section 41 or 42 has raised an important new principle in relation to this Act, the Court shall order that costs be awarded to the applicant even if the applicant has not been successful in the result.

1980-81-82-83, c. 111, Sch. II “52”.

53. (1) The Governor in Council shall, by commission under the Great Seal, appoint a Privacy Commissioner after approval of the appointment by resolution of the Senate and House of Commons.

(2) Subject to this section, the Privacy Commissioner holds office during good behaviour for a term of seven years, but may be removed by the Governor in Council at any time on address of the Senate and House of Commons.

(3) The Privacy Commissioner, on the expiration of a first or any subsequent term of office, is eligible to be re-appointed for a further term not exceeding seven years.

(4) In the event of the absence or incapacity of the Privacy Commissioner, or if the office of Privacy Commissioner is vacant, the Governor in Council may appoint another qualified person to hold office instead of the Commissioner for a term not exceeding six months, and that person shall, while holding that office, have all of the powers, duties and functions of the Privacy Commissioner under this Act or any other Act of Parliament and be paid such salary or other remuneration and expenses as may be fixed by the Governor in Council.

1980-81-82-83, c. 111, Sch. II “53”.

54. (1) The Privacy Commissioner shall rank as and have all the powers of a deputy head of a department, shall engage exclusively in the duties of the office of Privacy Commissioner under this Act or any other Act of Parliament and shall not hold any other office under Her Majesty for reward or engage in any other employment for reward.

(2) The Privacy Commissioner shall be paid a salary equal to the salary of a judge of the Federal Court, other than the Chief Justice, and is entitled to be paid reasonable travel and living expenses incurred in the performance of duties under this Act or any other Act of Parliament.

(3) The provisions of the Public Service Superannuation Act, other than those relating to tenure of office, apply to the Privacy Commissioner, except that a person appointed as Privacy Commissioner from outside the public service, as defined in the Public Service Superannuation Act, may, by notice in writing given to the President of the Treasury Board not more than sixty days after the date of appointment, elect to participate in the pension plan provided in the Diplomatic Service (Special) Superannuation Act, in which case the provisions of that Act, other than those relating to tenure of office, apply to the Privacy Commissioner from the date of appointment and the provisions of the Public Service Superannuation Act do not apply.

(4) The Privacy Commissioner is deemed to be employed in the public service of Canada for the purposes of the Government Employees Compensation Act and any regulations made under section 9 of the Aeronautics Act.

R.S., 1985, c. P-21, s. 54; 2002, c. 8, s. 160; 2003, c. 22, s. 225(E).

55. (1) The Governor in Council may appoint as Privacy Commissioner under section 53 the Information Commissioner appointed under the Access to Information Act.

(2) In the event that the Information Commissioner is appointed in accordance with subsection (1) as Privacy Commissioner, the Privacy Commissioner shall, notwithstanding subsection 54(2), be paid the salary of the Information Commissioner but not the salary of the Privacy Commissioner.

1980-81-82-83, c. 111, Sch. II “55”.

56. (1) The Governor in Council may, on the recommendation of the Privacy Commissioner, appoint one or more Assistant Privacy Commissioners.

(2) Subject to this section, an Assistant Privacy Commissioner holds office during good behaviour for a term not exceeding five years.

(3) An Assistant Privacy Commissioner, on the expiration of a first or any subsequent term of office, is eligible to be re-appointed for a further term not exceeding five years.

1980-81-82-83, c. 111, Sch. II “56”; 1984, c. 40, s. 79.

57. (1) An Assistant Privacy Commissioner shall engage exclusively in such duties or functions of the office of the Privacy Commissioner under this Act or any other Act of Parliament as are delegated by the Privacy Commissioner to that Assistant Privacy Commissioner and shall not hold any other office under Her Majesty for reward or engage in any other employment for reward.

(2) An Assistant Privacy Commissioner is entitled to be paid a salary to be fixed by the Governor in Council and such travel and living expenses incurred in the performance of duties under this Act or any other Act of Parliament as the Privacy Commissioner considers reasonable.

(3) The provisions of the Public Service Superannuation Act, other than those relating to tenure of office, apply to an Assistant Privacy Commissioner.

(4) An Assistant Privacy Commissioner is deemed to be employed in the public service of Canada for the purposes of the Government Employees Compensation Act and any regulations made under section 9 of the Aeronautics Act.

1980-81-82-83, c. 111, Sch. II “57”.

58. (1) Such officers and employees as are necessary to enable the Privacy Commissioner to perform the duties and functions of the Commissioner under this Act or any other Act of Parliament shall be appointed in accordance with the Public Service Employment Act.

(2) The Privacy Commissioner may engage on a temporary basis the services of persons having technical or specialized knowledge of any matter relating to the work of the Commissioner to advise and assist the Commissioner in the performance of the duties and functions of the Commissioner under this Act or any other Act of Parliament and, with the approval of the Treasury Board, may fix and pay the remuneration and expenses of such persons.

1980-81-82-83, c. 111, Sch. II “58”.

59. (1) Subject to subsection (2), the Privacy Commissioner may authorize any person to exercise or perform, subject to such restrictions or limitations as the Commissioner may specify, any of the powers, duties or functions of the Commissioner under this Act except

(a) in any case other than a delegation to an Assistant Privacy Commissioner, the power to delegate under this section; and

(b) in any case, the powers, duties or functions set out in sections 38 and 39.

(2) The Privacy Commissioner may not, nor may an Assistant Privacy Commissioner, delegate

(a) the investigation of any complaint resulting from a refusal by the head of a government institution to disclose personal information by reason of paragraph 19(1)(a) or (b) or section 21, or

(b) the investigation under section 36 of files contained in a personal information bank designated under section 18 as an exempt bank on the basis of personal information described in section 21

except to one of a maximum of four officers or employees of the Commissioner specifically designated by the Commissioner for the purpose of conducting those investigations.

(3) An Assistant Privacy Commissioner may authorize any person to exercise or perform, subject to such restrictions or limitations as the Assistant Privacy Commissioner may specify, any of the powers, duties or functions of the Privacy Commissioner under this Act that the Assistant Privacy Commissioner is authorized by the Privacy Commissioner to exercise or perform.

1980-81-82-83, c. 111, Sch. II “59”.

60. (1) The Privacy Commissioner shall carry out or cause to be carried out such studies as may be referred to the Commissioner by the Minister of Justice

(a) relating to the privacy of individuals,

(b) concerning the extension of the rights to which individuals are entitled under this Act in respect of personal information about themselves, and

(c) relating to the collection, retention, disposal, use or disclosure of personal information by persons or bodies, other than government institutions, that come within the legislative authority of Parliament,

and the Privacy Commissioner shall report thereon to the Minister of Justice from time to time.

(2) The Minister of Justice shall cause each report by the Privacy Commissioner under subsection (1) to be laid before Parliament on any of the first fifteen days after receipt thereof that either House of Parliament is sitting.

1980-81-82-83, c. 111, Sch. II “60”.

61. The principal office of the Privacy Commissioner shall be in the National Capital Region described in the schedule to the National Capital Act.

1980-81-82-83, c. 111, Sch. II “61”.

62. The Privacy Commissioner and every person acting on behalf or under the direction of the Commissioner who receives or obtains information relating to any investigation under this Act or any other Act of Parliament shall, with respect to access to and the use of that information, satisfy any security requirements applicable to, and take any oath of secrecy required to be taken by, persons who normally have access to and use of that information.

1980-81-82-83, c. 111, Sch. II “62”.

63. Subject to this Act, the Privacy Commissioner and every person acting on behalf or under the direction of the Commissioner shall not disclose any information that comes to their knowledge in the performance of their duties and functions under this Act.

1980-81-82-83, c. 111, Sch. II “63”.

64. (1) The Privacy Commissioner may disclose or may authorize any person acting on behalf or under the direction of the Commissioner to disclose information

(a) that, in the opinion of the Commissioner, is necessary to

(i) carry out an investigation under this Act, or

(ii) establish the grounds for findings and recommendations contained in any report under this Act; or

(b) in the course of a prosecution for an offence under this Act, a prosecution for an offence under section 131 of the Criminal Code (perjury) in respect of a statement made under this Act, a review before the Court under this Act or an appeal therefrom.

(2) The Privacy Commissioner may disclose to the Attorney General of Canada information relating to the commission of an offence against any law of Canada or a province on the part of any officer or employee of a government institution if in the opinion of the Commissioner there is evidence thereof.

R.S., 1985, c. P-21, s. 64; R.S., 1985, c. 27 (1st Supp.), s. 187.

65. In carrying out an investigation under this Act, in notifying an individual of a disclosure under subsection 8(5) and in any report made to Parliament under section 38 or 39, the Privacy Commissioner and every person acting on behalf or under the direction of the Privacy Commissioner shall take every reasonable precaution to avoid the disclosure of, and shall not disclose,

(a) any information that the head of a government institution would be authorized to refuse to disclose if it were requested under subsection 12(1) or contained in a record requested under the Access to Information Act; or

(b) any information as to whether personal information exists where the head of a government institution, in refusing to disclose the personal information under this Act, does not indicate whether it exists.

1980-81-82-83, c. 111, Sch. II “65”.

66. The Privacy Commissioner or any person acting on behalf or under the direction of the Commissioner is not a competent or compellable witness, in respect of any matter coming to the knowledge of the Commissioner or that person as a result of performing any duties or functions under this Act during an investigation, in any proceeding other than a prosecution for an offence under this Act, a prosecution for an offence under section 131 of the Criminal Code (perjury) in respect of a statement made under this Act, a review before the Court under this Act or an appeal therefrom.

R.S., 1985, c. P-21, s. 66; R.S., 1985, c. 27 (1st Supp.), s. 187.

67. (1) No criminal or civil proceedings lie against the Privacy Commissioner, or against any person acting on behalf or under the direction of the Commissioner, for anything done, reported or said in good faith in the course of the exercise or performance or purported exercise or performance of any power, duty or function of the Commissioner under this Act.

(2) For the purposes of any law relating to libel or slander,

(a) anything said, any information supplied or any document or thing produced in good faith in the course of an investigation carried out by or on behalf of the Privacy Commissioner under this Act is privileged; and

(b) any report made in good faith by the Privacy Commissioner under this Act and any fair and accurate account of the report made in good faith in a newspaper or any other periodical publication or in a broadcast is privileged.

1980-81-82-83, c. 111, Sch. II “67”.

68. (1) No person shall obstruct the Privacy Commissioner or any person acting on behalf or under the direction of the Commissioner in the performance of the Commissioner’s duties and functions under this Act.

(2) Every person who contravenes this section is guilty of an offence and liable on summary conviction to a fine not exceeding one thousand dollars.

1980-81-82-83, c. 111, Sch. II “68”.