Overview
The Privacy Act, codified as R.S.C., 1985, c. P-21, establishes rules for federal government institutions regarding the handling of personal data. Key provisions include the collection, protection, and disposal of personal information, the creation and management of personal information banks, access and correction rights for individuals, and exemptions for certain situations. The Act also outlines the responsibilities of the Office of the Privacy Commissioner, procedures for investigations, and reporting requirements to ensure compliance. Amendments and regulations under this Act provide further specificity on its application and updates to maintain relevance.