Canadian Dental Care Plan (CDCP) Phase 3 PIA (Updated October 2025)

Description

This privacy impact assessment (PIA) assesses the privacy implications of the activities related to Stage 3 of the Canadian Dental Care Plan (CDCP) including: member enrolment, provider participation, claims processing, and the contact centre operations.

Why a privacy impact assessment was completed

As per Section C.2.2.9 of the Treasury Board of Canada Secretariat (TBS) Directive on Privacy Practices, the CDCP Phase 3 activities meet the following criteria for initiating a PIA:

• Prior to undertaking a new program or activity that will involve the creation, collection, use, disclosure, retention or disposal of personal information for an administrative purpose.

Additional information

The initial PIA, completed in November 2024, examines Health Canada (HC)'s and Sun Life's collection, use, disclosure, retention, and disposal of personal information involved in the associated CDCP Stage 3 activities. The PIA also includes an update on the Contact Centre Activities portions of the PIA, which HC completed in October 2025.

The PIA recommended mitigation actions in several risk areas, including accountability, safeguards, retention and disposition authorities, privacy notices, and updating a Personal Information Bank (PIB).

Related personal information banks (PIBs)

Info Source describes how HC manages your personal information. Refer to the personal information bank: HC PPU 440 - Canadian Dental Care Plan.

For more information about this privacy impact assessment

For more information about this PIA, contact HC by email at: DentalEnquiries-DemandesDentaires@hc-sc.gc.ca