Issued to federal government institutions by the Treasury Board of Canada Secretariat

Table of Contents

• 1. Introduction
  • Purpose of this document
  • Why this document was developed.
• 2. About the Guidance Document
  • Overview
  • Benefits of using the document
  • Who should use the document?
• 3. Considerations
  • Use the document within a broader context
  • Appropriate provisions and consultation.
  • Consideration of contract and security requirements.
• 4. Getting Started
  • Building trust
  • Making an informed decision
• 5. Steps to follow
  • Steps 1 to 2, Pre-contract
  • Steps 3 to 5, Contracting.
• 6. Technological Measures to enhance Privacy and Security
  • Identification and Authentication
  • Limiting Access
  • Segregating Sensitive Information
  • Audit Trails
  • Detection, Response and Recovery
  • Inspections, Reviews or Assessments
  • Contacts
  • References
• Appendix A: Invasion-of-privacy Test
• Appendix B: Privacy Protection Checklist
• Appendix C: Key International Trade Agreements
• Explanatory Notes for the Privacy Protection Checklist
  • A. Introduction
    1. A.1 Preamble
    2. A.2 Purpose
    3. A.3 Overview
  • B. Explanatory notes concerning the Checklist questions