PEI

Information requests result in privacy breaches by 5 government agencies

P.E.I.’s Information and Privacy commissioner has ruled five different provincial government departments and agencies violated the privacy of someone who filed multiple applications under the Freedom of Information and Protection of Privacy Act.

Commissioner believes breaches were 'inadvertent,' notes practices have changed

P.E.I.'s Information and Privacy commissioner has ruled five different provincial government departments and agencies violated the privacy of someone who filed multiple applications under the Freedom of Information and Protection of Privacy Act.

The commissioner concluded all five public bodies violated the privacy of the applicant by circulating his name, mailing address, telephone number, email address and signature with copies of his requests for information. (iStock)

After submitting applications for information from the various government agencies, the applicant filed a complaint with the commissioner, saying his personal information and details about his access requests were shared among them.

The applicant argued representatives of the agencies held a meeting where they discussed his applications, and as a result, his requests were subjected to an "unequal, prejudicial and arbitrary process."

The privacy commissioner determined a meeting had taken place, but said there was insufficient evidence that "any public body improperly collected the complainant's personal information" during the meeting.

However, the commissioner concluded all five public bodies did violate the privacy of the applicant by circulating his name, mailing address, telephone number, email address and signature with copies of his requests for information. The commissioner said she believed the violation was inadvertent.

The commissioner noted all public bodies have since been told to sever personal information from information request forms.

In a separate ruling, the commissioner determined the fees the applicant was charged for information were excessive, and that one of his requests was subject to unjustified delay.

The applicant also charged one of the agencies involved, the P.E.I. Liquor Control Commission, violated his privacy by compiling personal information from internet searches, including his photo, employment history and educational background.

The commissioner agreed the information was collected, but determined that did not constitute a breach because it was publicly available, and it was gathered in order to respond to the applicant's privacy complaint.