<?xml version="1.0" encoding="UTF-8"?><marc:collection xmlns:marc="http://www.loc.gov/MARC21/slim">
  <marc:record>
    <marc:leader>00000nam  2200000zi 4500</marc:leader>
    <marc:controlfield tag="001">9.933577</marc:controlfield>
    <marc:controlfield tag="003">CaOODSP</marc:controlfield>
    <marc:controlfield tag="005">20240514091131</marc:controlfield>
    <marc:controlfield tag="006">m     o  d f      </marc:controlfield>
    <marc:controlfield tag="007">cr cn|||||||||</marc:controlfield>
    <marc:controlfield tag="008">240207e201911##onc     o    f000 0 eng d</marc:controlfield>
    <marc:datafield tag="040" ind1=" " ind2=" ">
      <marc:subfield code="a">CaOODSP</marc:subfield>
      <marc:subfield code="b">eng</marc:subfield>
      <marc:subfield code="e">rda</marc:subfield>
      <marc:subfield code="c">CaOODSP</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="043" ind1=" " ind2=" ">
      <marc:subfield code="a">n-cn---</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="086" ind1="1" ind2=" ">
      <marc:subfield code="a">H14-565/2019E-PDF</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="086" ind1="1" ind2=" ">
      <marc:subfield code="a">H14-565/2019-1E-PDF</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="245" ind1="0" ind2="0">
      <marc:subfield code="a">Audit of the management of privacy practices at Health Canada and the Public Health Agency of Canada : </marc:subfield>
      <marc:subfield code="b">final report / </marc:subfield>
      <marc:subfield code="c">Office of Audit and Evaluation.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="246" ind1="1" ind2="7">
      <marc:subfield code="a">Audit of the management of privacy practices at HC and PHAC : </marc:subfield>
      <marc:subfield code="b">final report</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="264" ind1=" " ind2="1">
      <marc:subfield code="a">[Ottawa] : </marc:subfield>
      <marc:subfield code="b">Health Canada and the Public Health Agency of Canada = Santé Canada et l'Agence de la santé publique du Canada, </marc:subfield>
      <marc:subfield code="c">November 2019.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="300" ind1=" " ind2=" ">
      <marc:subfield code="a">1 online resource (ii, 9 pages) + </marc:subfield>
      <marc:subfield code="e">1 management response and action plan (2 pages)</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="336" ind1=" " ind2=" ">
      <marc:subfield code="a">text</marc:subfield>
      <marc:subfield code="b">txt</marc:subfield>
      <marc:subfield code="2">rdacontent</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="337" ind1=" " ind2=" ">
      <marc:subfield code="a">computer</marc:subfield>
      <marc:subfield code="b">c</marc:subfield>
      <marc:subfield code="2">rdamedia</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="338" ind1=" " ind2=" ">
      <marc:subfield code="a">online resource</marc:subfield>
      <marc:subfield code="b">cr</marc:subfield>
      <marc:subfield code="2">rdacarrier</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="500" ind1=" " ind2=" ">
      <marc:subfield code="a">Cover title.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="500" ind1=" " ind2=" ">
      <marc:subfield code="a">Issued also in French under title: Audit de la gestion des pratiques de protection des renseignements personnels à Santé Canada et à l'Agence de la santé publique du Canada : rapport définitif.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="520" ind1=" " ind2=" ">
      <marc:subfield code="a">"We examined the management of privacy practices at Health Canada (HC) and the Public Health Agency of Canada (PHAC). All employees are responsible for privacy practices, but the Privacy Management Division (PMD), located within HC's Corporate Services Branch (CSB), leads the overall coordination of privacy efforts for HC and PHAC. PMD's responsibilities include the development of privacy policies, procedures, and practices; the delivery of privacy training and awareness programs to staff; assessing and reporting on privacy breaches; coordinating HC and PHAC input for InfoSource; and providing privacy analysis and advice using a number of tools, including Privacy Impact Assessments (PIAs) and Privacy Protocols"--Executive summary, page ii.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="610" ind1="1" ind2="0">
      <marc:subfield code="a">Canada. </marc:subfield>
      <marc:subfield code="b">Health Canada</marc:subfield>
      <marc:subfield code="x">Auditing.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="610" ind1="2" ind2="0">
      <marc:subfield code="a">Public Health Agency of Canada</marc:subfield>
      <marc:subfield code="x">Auditing.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="650" ind1=" " ind2="0">
      <marc:subfield code="a">Privacy, Right of</marc:subfield>
      <marc:subfield code="x">Government policy</marc:subfield>
      <marc:subfield code="z">Canada</marc:subfield>
      <marc:subfield code="x">Auditing.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="710" ind1="1" ind2=" ">
      <marc:subfield code="a">Canada. </marc:subfield>
      <marc:subfield code="b">Health Canada. </marc:subfield>
      <marc:subfield code="b">Office of Audit and Evaluation, </marc:subfield>
      <marc:subfield code="e">issuing body.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="710" ind1="2" ind2=" ">
      <marc:subfield code="a">Public Health Agency of Canada. </marc:subfield>
      <marc:subfield code="b">Office of Audit and Evaluation, </marc:subfield>
      <marc:subfield code="e">issuing body.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="775" ind1="0" ind2="8">
      <marc:subfield code="t">Audit de la gestion des pratiques de protection des renseignements personnels à Santé Canada et à l'Agence de la santé publique du Canada : </marc:subfield>
      <marc:subfield code="w">(CaOODSP)9.938231</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="856" ind1="4" ind2="0">
      <marc:subfield code="q">PDF</marc:subfield>
      <marc:subfield code="s">912 KB</marc:subfield>
      <marc:subfield code="u">https://publications.gc.ca/collections/collection_2024/sc-hc/H14-565-2019-eng.pdf</marc:subfield>
      <marc:subfield code="z">Report</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="856" ind1="4" ind2="0">
      <marc:subfield code="q">PDF</marc:subfield>
      <marc:subfield code="s">782 KB</marc:subfield>
      <marc:subfield code="u">https://publications.gc.ca/collections/collection_2024/sc-hc/H14-565-2019-1-eng.pdf</marc:subfield>
      <marc:subfield code="z">Management response and action plan</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="856" ind1="4" ind2=" ">
      <marc:subfield code="q">HTML</marc:subfield>
      <marc:subfield code="s">N/A</marc:subfield>
      <marc:subfield code="u">https://www.canada.ca/en/public-health/corporate/transparency/corporate-management-reporting/internal-audits/reports/management-privacy-practices-2019.html</marc:subfield>
      <marc:subfield code="z">Report</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="856" ind1="4" ind2=" ">
      <marc:subfield code="q">HTML</marc:subfield>
      <marc:subfield code="s">N/A</marc:subfield>
      <marc:subfield code="u">https://www.canada.ca/en/public-health/corporate/transparency/corporate-management-reporting/internal-audits/reports/management-privacy-practices-2019/management-response-action-plan.html</marc:subfield>
      <marc:subfield code="z">Management response and action plan</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="986" ind1=" " ind2=" ">
      <marc:subfield code="a">ISA 18-01</marc:subfield>
    </marc:datafield>
  </marc:record>
</marc:collection>
