Investigative Bodies Added to Privacy Regulations

Summary#

The final rule titled Regulations Amending the Privacy Regulations (SOR/2026-147) updates who federal departments can share personal information with for law enforcement and investigations. It adds three directorates to Schedule II and removes an obsolete reference; the change took effect on June 22, 2026.

What it does#

• Adds these investigative bodies to Schedule II of the Privacy Regulations:
  • Environmental Enforcement Directorate (Environment and Climate Change Canada)
  • Wildlife Enforcement Directorate (Environment and Climate Change Canada)
  • High Net Worth Compliance Directorate, Compliance Programs Branch (Canada Revenue Agency)
• Removes the now-defunct Security Intelligence Review Committee from Schedule II.
• Clarifies that federal institutions may, at their discretion, disclose personal information to the listed directorates for enforcing laws or carrying out lawful investigations under the Privacy Act. It does not force disclosure or give new investigative powers to those directorates.

Who's affected#

• Environment and Climate Change Canada and its enforcement officers (through the two added directorates).
• Canada Revenue Agency staff in the High Net Worth Compliance Directorate.
• Other federal departments and agencies that hold personal information and might share it to support investigations.
• People whose personal information is held by federal institutions and could be disclosed to these directorates during investigations or enforcement activities.
• Office of the Privacy Commissioner of Canada, which was consulted and raised privacy-related concerns about information sharing (see below).

Why it matters#

• Practically, it should make it faster and easier for environmental, wildlife and certain tax investigators to get information they need from other federal bodies. That can speed up enforcement, help stop or prevent violations, and improve coordination between agencies.
• The rule does not expand investigators’ search or seizure powers. Agencies say they will issue guidance and training on when to request information and will seek warrants or production orders when privacy interests are stronger.
• The Office of the Privacy Commissioner of Canada accepted the additions but warned about privacy risks and urged clear policies on when a warrant or other independent legal authority is needed.
• For most members of the public and businesses, this change mostly affects how quickly and smoothly federal investigations can access existing federal records; the government says it does not create new costs or new powers to collect personal information.