Human Capital Management Branch Curriculum Vitae Database Initiative: Privacy impact assessment summary

On this page

• Description
• Why a privacy impact assessment was completed
• Additional information
• Related personal information banks
• For more information about this privacy impact assessment

Description

In summer 2025, the Human Capital Management Branch at Public Services and Procurement Canada (PSPC) created a centralized Curriculum Vitae (CV) database to better manage the large volume of résumés they receive. The Workforce Strategies and Programs team developed a CV Submission Form to collect key candidate details, making it easier to filter and find suitable candidates for managers. This activity launched in September 2025 and focuses on supporting at‑level recruitment.

Why a privacy impact assessment was completed

The creation and administration of a centralized CV database is a new activity using personal information that will eventually be used to make hiring decisions about individuals. For this reason, completing a privacy impact assessment (PIA) is necessary in order to remain compliant with the Treasury Board of Canada Secretariat Directive on Privacy Practices.

Additional information

This PIA identified 7 risks and 1 compliance issue.

Five of these risks relate to the procedures in place for collecting and disclosing personal information. The remaining 2 risks relate to the documentation and retention of personal information.

The program worked with PSPC’s Privacy Management Division to modify their tools and procedures for this activity. These corrective measures were completed in April 2026.

The PIA also identified 1 compliance issue related to PSPC’s internal policy instruments about personal information. These policy instruments will be updated by the Access to Information and Privacy Directorate by summer 2027.

Related personal information banks

Standard class of records: Recruitment and staffing, PRN 920
Standard personal information bank: Application for employment, PSU 911

Standard classes of records: Classification of positions, PRN 919; and Recruitment and staffing, PRN 920
Standard personal information bank: Staffing, PSE 902

Standard class of records: Communications, PRN 941
Standard personal information bank: Internal communications, PSU 915

For more information about this privacy impact assessment

For more information about this assessment, you can contact PSPC’s Privacy Management Division at tpsgc.vieprivee-privacy.pwgsc@tpsgc-pwgsc.gc.ca.