AICPA/CICA Privacy Maturity Model

The AICPA/CICA Privacy Maturity Model (PMM) is based on Generally Accepted Privacy Principles (GAPP) and the Capability Maturity Model which has been in use for almost 20 years. In developing the PMM, it was recognized that each organization’s personal information privacy practices may be at various levels, whether due to legislative requirements, corporate policies or the status of the organization’s privacy initiatives. It was also recognized that, based on an organization’s approach to risk, not all privacy initiatives would need to reach the highest level on the maturity model. Each of the 73 GAPP criteria is broken down according to the five maturity levels. This allows entities to obtain a picture of their privacy program or initiatives both in terms of their status and, through successive reviews, their progress. (For more information, visit the CICA Privacy Resource Centre online.)

FINTRAC ANNUAL REPORT 2010 - Ten Years of Connecting the Money to the Crime

During 2010, FINTRAC, as Canada’s financial intelligence unit, celebrated its tenth anniversary. (Refer to the publication FINTRAC ANNUAL REPORT 2010 - Ten Years of Connecting the Money to the Crime.)

FINTRAC made 579 (556 in 2008-09) disclosures of information relevant to investigations of money laundering, terrorist financing, and/or threats to the security of Canada. Turnaround time on cases improved 17%, and requests for assistance went up 36%. By using electronic media for case disclosures, it sharply reduced delivery times, and provided a more flexible product for law enforcement and intelligence partners to work with.

FINTRAC published a new series of strategic intelligence assessments focusing on terrorist groups and countries arousing national security concerns, as well as reports informing partners about current and emerging typologies and trends in money laundering and terrorist financing. It was also the Canadian lead for the FATF typology project about the use of new payment methods for money laundering purposes.

The Office of the Privacy Commissioner (OPC) issued a report praising the Centre's management of personal information, and recommended the appointment of a Chief Privacy Officer. FINTRAC was pleased to implement this and other OPC recommendations.

(See Highlights from FINTRAC's 2010 Annual Report.)

Leading by Example: Key Developments in the First Seven Years of PIPEDA

The Office of the Privacy Commissioner of Canada recently released the publication Leading by Example. Reviewing leading cases, the 63-page book is designed to help businesses comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and improve their privacy practices.