Privacy impact assessment summary for the management of the Saguenay–St. Lawrence Marine Park

Description

The Saguenay–St. Lawrence Marine Park management program aims to enhance the level of protection of its ecosystems for conservation purposes, while supporting educational, recreational and scientific activities, for the benefit of the present and future generations. The program regulates marine activities with a view to the sustainable use of the park’s ecosystems. It includes the management of marine activity permits, the issuance of certificates to captains and guides of marine tour operators, and patrols to ensure that water-based activities comply with the regulations in force within the park. Park staff work closely with Parks Canada’s Enforcement Branch.

Why a privacy impact assessment was completed

A Privacy Impact Assessment (PIA) was conducted for this program, as personal information is collected and used in the decision-making process. The PIA identified and assessed the risks to the privacy of this information.

As part of its activities, the program includes operational planning and management, monitoring and scientific research, regulatory enforcement, management of marine activities and uses, public awareness and education, and collaboration with federal and provincial partners, Indigenous communities, local stakeholders, and park users. The implementation of these activities may require the collection, use and disclosure of personal information, particularly in the context of permit management, compliance patrols, educational programs, or stakeholder relations. Such information is managed in accordance with applicable legislative requirements and policies governing the protection of personal information.

In addition, administrative, physical and technical safeguards that comply with Government of Canada requirements are in place. Administrative safeguards include internal privacy and security policies and procedures, staff training on privacy and the protection of personal information, as well as access control mechanisms based on the need-to-know principle and appropriate authorization. Physical safeguards include hosting systems on secure servers. Technical safeguards include built-in IT system security controls designed to protect personal information against unauthorized access, use, disclosure, modification or destruction.

Overall, the Agency complies with the Privacy Act and the Treasury Board of Canada Secretariat’s Policy on Privacy Protection. Individuals are informed of the reasons for the collection of their personal information at the time of collection through a privacy notice and a personal information bank developed specifically for the management program of the Saguenay–St. Lawrence Marine Park.

Additional information

The PIA identified limited privacy risks during the assessment. Appropriate mitigation measures were implemented immediately, and no residual risks remain.

Related personal information banks

Marine Activity Certification (PC PPU 200)

Administration of Marine Activity Permits (PC PPU 201)

Compliance with Marine Activities in the Saguenay–St. Lawrence Marine Park (PC PPU 202)

For more information about this privacy impact assessment

In order to have access to the full PIA, please submit a formal request at the following link: Access to Information and Privacy (ATIP) Online Request (apps.gc.ca).