Privacy Notice

Who am I reporting to?

  • You are reporting to the Canadian Centre for Cyber Security (Cyber Centre). Part of the Communications Security Establishment (CSE), the Cyber Centre is Canada’s authority on cyber security.
  • We are trusted experts in cyber security with a clear and focused mandate to collaborate with government, the private sector and academia.

What information is collected?

  • All personal information provided through the online form, or otherwise attached or forwarded with the online form, is collected by the Cyber Centre.
  • Depending on what you submit, the online form may contain a text box where you can provide more details about your submission on a voluntary basis. If you choose to provide more information, please ensure that you do NOT include sensitive personal information such as:
    • Your date of birth
    • Identification information (e.g. social insurance number)
    • Financial information
    • Medical information
    • Confidential identifiers, such as system passwords
  • If you are making a submission on behalf of another person/your company, please ensure that you have their consent.

Why is this information collected?

  • The personal information that you provide is collected under the authority of the Communications Security Establishment Act.  The information helps the Cyber Centre provide advice, guidance and services to help ensure the protection of electronic information and information infrastructures of importance to the Government of Canada. These systems are collectively referred to as “systems of importance”.

How is the information handled?

  • Personal information will be retained in accordance with the Privacy Act, the Privacy Regulations and the Library and Archives of Canada Act.
  • If you provide your contact details in the online form and further information about the nature and details of your submission is required, you may be contacted by the Cyber Centre.

How will the information be protected?

  • All personal information provided when you fill out the submission form is protected under the Privacy Act. The information you provide is subject to the Access to Information Act. However, your personal information will not be disclosed without your consent.
  • Protecting your personal information involves the use of appropriate administrative, technical, and physical security safeguards. These measures are employed by the Cyber Centre to protect your personal information against loss or theft; unauthorized access, use, or disclosure; as well as unauthorized modification or destruction.

Will personal information be shared with others?

  • Cyber threat information you provide including any personal information may be shared with the Cyber Centre’s partners to help them fulfill their lawful duties in accordance with CSE authorities and policies. This can be necessary to protect systems of importance.
  • We may share the information with domestic and international partners involved with cyber security (both in the public and private sector), as well as with operators of systems of importance to help protect those infrastructures.

Will I be able to access the information provided at any time and can I correct any errors?

  • The Privacy Act provides you with a right of access to your personal information. You may request corrections if you believe that your personal information is inaccurate or incomplete.
  • You may avail yourself of these rights by contacting CSE’s Access to Information and Privacy Coordinator at ATIP-AIPRP@cse-cst.gc.ca. You are also entitled to contact the Office of the Privacy Commissioner of Canada concerning the handling of your personal information.

Where will the information be stored?

Who can I contact if I have any other questions?