Appearance before the Standing Committee on Access to Information, Privacy and Ethics

On the Privacy Breaches at the Canada Revenue Agency

December 5, 2024

Briefing package for the Privacy Commissioner of Canada for his Appearance before the Standing Committee on Access to Information, Privacy and Ethics (ETHI) on the Privacy Breaches at the Canada Revenue Agency (CRA), on December 5, 2024.

---

Table of Contents

1. Commissioner’s Statement
2. Consolidated Issue Sheets
3. Chronology of Events
4. Canada Revenue Agency’s Taxpayers Bill of Rights
5. OPC Announcement: Commissioner launches investigations into cyberattacks on Canada Revenue Agency and other federal organizations
6. OPC Report to Parliament: Investigation of unauthorized disclosures and modifications of personal information held by Canada Revenue Agency and Employment and Social Development Canada resulting from cyber attacks
7. Statement from the Office of the Chief Information Officer of the Government Canada on recent credential stuffing attacks (August 15, 2020)
8. TBS Policy on Privacy Protection
9. TBS Directive on Privacy Practices
10. OPC Annual Report 2023-2024
11. FPT Resolution: Protecting Employee Privacy in the Modern Workplace
12. OPC: Receiving a privacy breach notification
13. OPC: Identity theft
14. OPC: Tips for using privacy settings