Privacy impact assessment summary for Parks Canada partnering, sponsorship and donation activities

Description

This Privacy Impact Assessment (PIA) examines the privacy implications associated with Parks Canada’s Partnering, Sponsorship, and Donation activities. These activities support collaboration with external organizations, individuals, and stakeholders to advance Parks Canada’s mandate to protect and present Canada’s natural and cultural heritage. The PIA assesses how personal information is collected, used, disclosed, retained, and safeguarded in support of donation administration, due diligence, recognition, and stakeholder engagement.

Overview and PIA initiation

Parks Canada conducts partnering, sponsorship, and donation activities as part of its ongoing operations under the External Relations and Visitor Experience Directorate, with national oversight provided by the Partnering and Outreach Branch. These activities involve limited collection of personal information related to donors, partners, and stakeholders.

The PIA was initiated to ensure compliance with the Privacy Act, Treasury Board Secretariat policies and directives, and the expectations of the Office of the Privacy Commissioner of Canada. The assessment was undertaken in accordance with the Treasury Board Secretariat’s Directive on Privacy Impact Assessments, recognizing that these activities involve the collection and handling of personal information for administrative purposes, including decision‑making related to accepting donations or entering into collaborative arrangements.

Summary of analysis and recommendations

The PIA concluded that Parks Canada’s Partnering, Sponsorship, and Donation activities present a low level of privacy risk. Personal information collected is limited in scope, directly related to program delivery, and handled exclusively by authorized Parks Canada employees on a need‑to‑know basis. No third‑party service providers or information‑sharing arrangements are involved, and personal information is retained within Canada.

The assessment confirmed that existing practices align with privacy principles, including limiting collection, use, and disclosure, ensuring accuracy, and applying appropriate safeguards.

Additional actions identified in the PIA include strengthening access controls for internal systems, completing a formal security assessment for the Stakeholder and Partner Engagement Registry, and reinforcing staff awareness through targeted privacy training. No compliance issues were identified.

Related personal information banks

Partnering Sponsorships and Donations Activities PC PPU 004

For more information about this privacy impact assessment

In order to have access to the full PIA, please submit a formal request at the following link: Access to Information and Privacy (ATIP) Online Request (apps.gc.ca).