Privacy Act — Summary for Users
The Government of Canada’s Privacy Act gives individuals the right to access personal information held by federal institutions and to request correction of inaccurate information. This page explains how Digital Canada applies privacy principles in plain language. It does not replace the official text of the statute or institution-specific policies.
Who holds your information
Personal information in this portal is attributed to Digital Canada Program Office. In a production deployment, schedules of personal information (standard personal information banks) would be published in Info Source so you can see what is collected, for what purpose, and how long it is kept.
Retention and disposal
Personal data retained according to program schedules; audit logs 24 months. Retention balances service delivery, audit, and legal hold requirements. When information is no longer needed, it is securely destroyed or anonymized according to approved procedures.
Access and correction requests
You may request access to your personal information under the Privacy Act. Response timelines and exemptions (for example, information obtained in confidence from other governments) are set out in law. If you believe information is incomplete or inaccurate, you may request a correction; where correction is refused, a notation of your request may be attached to the file.
Complaints to the Privacy Commissioner
If you are not satisfied with how an institution handled your personal information, you may complain to the Office of the Privacy Commissioner of Canada (OPC). The OPC can investigate and report; it does not order compensation in the same way a court might, but its findings influence practice across government.
Contact
For privacy questions related to this program, use the coordinated inbox: privacy•••@digital-canada.example.
Last reviewed policy statement: 2026-01-15.