Introduction
Statistics Canada is installing a new automated access control system that replaces the system that has been in place since autumn 2002. At the same time, Statistics Canada is expanding its closed circuit television monitoring program by increasing the number of cameras and adding the capability to record.
Objective
A privacy impact assessment of the new automated access control system and the closed circuit television monitoring program was conducted to determine if there were any privacy, confidentiality and security issues, and if so, to make recommendations for their resolution or mitigation.
Description
The automated access control system allows Statistics Canada to maintain the security posture required by the Government Security Policy for the protection of both its employees and assets.
This new system introduces enhanced security features, such as physical barriers, to prevent forceful entry and will require employees to “swipe out” when leaving the building. A system log is automatically generated, logging the entry and exit of employees. This feature supports a greater level of safety and security for Statistics Canada employees, in particular when they are in the buildings after normal hours working hours such as evenings and weekends.
Statistics Canada currently uses a limited number of closed circuit television cameras. Based on recommendations following an evaluation of its physical security posture conducted in 2007, it will be increasing the number of cameras, each of which will have the capacity to make a recording. These cameras will be placed in public areas, not in any area where persons would have an expectation of privacy.
The use of any information collected by the access control system and from the recordings made by the CCTVs will be strictly restricted to specific purposes, that is to say, security- and safety-related investigations. In all cases, any authorized use will require the approval of the Departmental Security Officer.
The personal information is part of the Personal Information Bank, Security Video Surveillance and Temporary Visitor Access Control Logs and Building Passes (PSU 907). Upon request, Statistics Canada will provide employees and others with access to their personal information related to this PIB.
Conclusion
This privacy impact assessment did not identify any privacy risks that cannot be managed using either current safeguards or others that have been specifically developed for the installation of a new automated access control system and the increased use of closed circuit television monitoring.