Privacy impact assessment summary for the Parks Canada Reservation Service

Description

Parks Canada is the federal Agency responsible for administering national parks, national historic sites, and national marine conservation areas. Since 2004, Parks Canada has been operating a reservation service, online and through a call centre, so visitors can purchase desired products and services prior to their visit. This system is also valuable to support operations on Parks Canada’s places.

Why a privacy impact assessment was completed

The Parks Canada Reservation Service uses a Software as a Solution (SaaS) system under contract. Anticipating the end of the contractual arrangement, Parks Canada, in collaboration with Public Services and Procurement Canada, developed a competitive Request for Proposal (RFP). The purpose was to renew the contract for a fully operational reservation system. This renewed system integrates new functionalities and offers and will host personal information on a cloud-based solution. The Agency took the opportunity to review the existing PIA. The revision examined the overall aspects of the business model and data-flows as well as the policies and procedures relating to the system and call centre.

Additional information

No significant privacy risks were identified, as appropriate mitigation measures have been integrated into program design. These include limiting the collection of personal information to the minimum required, ensuring that all elements are described in the institution specific Personal Information Bank, and restricting access to authorized individuals on a need-to-know basis. In addition, a Privacy Notice Statement is provided at the time of collection to inform individuals of all required elements regarding the collection, use, and protection of their personal information in accordance with Treasury Board requirements. Together, these measures reduce potential risks and support compliance with the Privacy Act and TBS requirements.

Related personal information banks

Institution specific Personal Information Bank

Parks Canada Reservations Services PC PPU 068

For more information about this privacy impact assessment

In order to have access to the full PIA, please submit a formal request at the following link: Access to Information and Privacy (ATIP) Online Request (apps.gc.ca).