The Canadian Air Transport Security Authority (CATSA) is committed to protecting your personal information and your right to privacy.
Our Chief Privacy Officer is responsible for overseeing what we do with your information and for monitoring compliance with this policy and the Privacy Act.
In the course of its daily activities, CATSA, a federal Crown corporation, may gather personal information from individuals in order to fulfil its mandate of aviation security.
CATSA is committed to protecting personal information in accordance with Canada’s Privacy Act, its regulations, and applicable Treasury Board of Canada Secretariat policies, directives and guidelines. This policy was developed according to these requirements and the privacy principles underlying Canadian and international privacy protection laws.
CATSA recognizes the importance of the protection of personal information as an essential element in maintaining public trust. CATSA achieves this through the implementation of this policy, through sound personal information handling and management practices, and the delegation of clear accountabilities in the administration of CATSA’s privacy program.
What CATSA doesn’t collect:
CATSA does not collect personal information from passengers and non-passengers who walk though metal detectors or undergo a full body scanner.
Metal detectors are designed only to alert screening officers if non-permitted items are detected. Similarly, full body scanners only alert screening officers of areas of interest where objects may be revealed under clothing, but do not collect images containing identifiable personal information. These images are generic, immediately and permanently deleted, and cannot be used to identify individuals.
What personal information does CATSA collect and why?
CATSA may collect the following types of personal information from passengers and non-passengers in order to perform its mandate as Canada’s civil aviation security screening authority responsible for delivering screening services.
Detailed information on CATSA’s personal information holdings including legal authorities, purposes of collection, uses, who / what entities CATSA shares personal information with and for how long personal information is retained, is published in CATSA’s InfoSource.
Temperature Screening - Between July 30, 2020 and August 9, 2021, CATSA was mandated by the Interim Order Respecting Certain Requirements for Civil Aviation Due to COVID-19 No. 4 and any amendments thereto (“Interim Order”) pursuant to section 6.41(1) of the Aeronautics Act, to conduct temperature screening at the airports listed in the Interim Order.
This activity applied to anyone who presented themselves at a passenger or non-passenger screening checkpoint, other than: an infant; a person who provided a medical certificate certifying that their elevated temperature was not related to COVID-19; a member of emergency response provider personnel responding to an emergency; or a peace officer responding to an emergency.
The purpose of temperature screening was to limit the spread of COVID-19. This activity was a key element in the Government of Canada’s multi-layered approach to protecting public health and ensuring passengers and non-passengers entering the restricted area did not exhibit symptoms of COVID-19 in order to limit the spread of COVID-19.
Personal Information was only collected, used, disclosed and/or retained if the individual had an elevated temperature following the second of two temperature screenings.
Type of personal information
Why it is collected
|Passenger Temperature Screening
||Name, flight information, checkpoint location and that the passenger has an elevated temperature.
- Your name, flight information and checkpoint location were collected so that they could be disclosed to your air carrier to retrieve your checked baggage and to notify them that you were denied access to the restricted area.
|Non-Passenger Temperature Screening
||Name, Restricted Area Identity Card (RAIC) number of other document of entitlement identifier, checkpoint location and that the non-passenger has an elevated temperature.
- Your name, RAIC number or other document of entitlement identifier and checkpoint location were collected so that they could be disclosed to the airport authority (or to the air carrier, in the case of crew members) to notify them that you were denied access to the restricted area due to an elevated temperature reading.
|Boarding Pass Information
||Passenger name, flight information and scan information such as time of scan, screening checkpoint location, etc.
- To verify the validity of boarding passes used by the travelling public at Canadian airports.
- To investigate and respond to aviation security incidents, passenger complaints and claims.
- To improve operational and security related decisions.
Closed-Circuit Television (CCTV)
|Video recordings of individuals captured in CATSA security screening checkpoints, and at our corporate offices
- To investigate and respond to:
• Aviation security incidents
• Complaints and claims
• Screening-related performance events
- To manage testing program and audits.
- Oversight and operational compliance.
- To monitor passenger volumes and/or assess the number of screening lines in operation.
- To ensure the security, health and safety of screening personnel, passengers, non-passengers, CATSA employees and members of the public, as well as the security of their property.
- To develop and support training and certification of screening personnel.
- To monitor access to and security of corporate offices.
||X-ray images of items, including carry-on and checked baggage, belonging to passengers and non-passengers
- To ensure the security and safety of screening personnel, passengers, non-passengers, CATSA employees and members of the public, as well as the security of their property.
|Aviation Security Incident Information
Passenger personal information, such as name, flight information, boarding pass information, incident details (e.g., x-ray images of baggage, CCTV footage, incident details).
Non-passenger personal information including employer information.
- To investigate and review aviation security incidents that occur at one of CATSA’s security screening checkpoints.
Claims, complaints and inquiries
|Name, contact information, complaint / claim, incident details.
- To support the resolution of passengers' and non-passengers’ claims (loss of property, injury), complaints and inquiries.
|Access to information / privacy requests
||Requestor name and contact information
- To process requests made by individuals for CATSA records or for access to their own personal information.
CATSA is a federal Crown corporation committed to protecting personal information in accordance with Canada’s Privacy Act.
CATSA recognizes and accepts its responsibility to protect the privacy of individuals who interact with CATSA and to safeguard their personal information with adherence to, and respect for the following privacy principles:
- CATSA does not collect more personal information than necessary to fulfil the purpose for which it is collected.
- Personal information is collected directly from individuals, or otherwise with the individual’s consent or as permitted by law.
- CATSA takes all reasonable steps to ensure that personal information used in a decision-making process is accurate, up-to-date, and complete as possible.
Use and Disclosure
- Personal information may only be used for identified purposes or consistent purposes as outlined in InfoSource.
- CATSA will only disclose personal information with the consent of the individual or as permitted by the Privacy Act or any other applicable law (e.g., disclosures to law enforcement agencies as per Section 8(2) of the Privacy Act).
Safeguarding Personal Information
- We treat your personal information strictly confidential and we have implemented appropriate physical, organizational and technical security measures designed to help protect your personal information against loss or theft, unauthorized access, disclosure, copying, use or modification.
- CATSA restricts access to personal information on a need-to-know basis and provides training to ensure safeguarding measures are followed.
Retention and Disposal of Personal Information
- CATSA retains personal information for only a period of time that is necessary, to meet legal, business and legislative requirements for CATSA, the Government of Canada, and Canadians, after such time, it is permanently destroyed in a secure manner.
- Standard retention periods for CATSA’s personal information holdings are as follows, unless information is related to an aviation security incident, subject to a legal action, audit, investigation, or an access to information and / or privacy request:
- CCTV images and video footage: 30 days
- Boarding pass information: 30 days
- Personal information related to aviation security incidents: 6 years after resolution
- X-ray images: images are overwritten, therefore retention periods vary depending on the volume of images processed at each particular checkpoint, (e.g., the busier the checkpoint, the faster the images are overwritten)
- Passenger complaints, claims or enquiries: 6 years after resolution
- Access to Information / Privacy Requests: 2 years
- Temperature Screening: 2 years
You may submit a privacy request to access personal information that CATSA collects and retains about you or to request a correction to your personal information. Click here to learn more about how to submit a privacy request.
Monitoring, Reporting and Reviews
CATSA conducts monitoring activities to ensure compliance with this policy.
CATSA fulfils annual reporting obligations. Annual Reports on the Administration of the Privacy Act can be found on the CATSA website, as well as the Government of Canada’s website.
This Policy is reviewed regularly for effectiveness against legislative compliance.
Last updated on August 9, 2021.
Need More Information?
Questions about this policy or other CATSA privacy questions may be sent to email@example.com.
If you are not satisfied that we have adequately respected your privacy, you may wish to contact the Office of the Privacy Commissioner at www.priv.gc.ca.
- CATSA does not automatically gather any personal information from you, such as your name, phone number, e-mail or street address during your visit to its website. This information is only obtained if you supply it voluntarily by contacting us via e-mail and completing an on-line form.
- All personal information you do provide is protected under the Privacy Act. This means that, at the point of collection, you will be informed that your personal information is being collected, the purpose for which it is being collected and that you have a right of access to the information.
- CATSA employs software programs to monitor network traffic to identify unauthorized attempts to upload or change information, or otherwise cause damage. This software receives and records the Internet Protocol (IP) address of the computer that has contacted our website, the date and time of the visit and the pages visited. We make no attempt to link these addresses with the identity of individuals visiting our site unless an attempt to damage the site has been detected.
- Information on individual visitors (when supplied through an on-line form) is used by CATSA employees to respond to claims, complaints and inquiries. We only share the information you give us with other government departments if it relates to that department. We do not use the information to create individual profiles, nor do we disclose this information to anyone outside of the federal government unless permitted by law.