Language selection


Dairy Farm Investment Program Privacy Impact Assessment


This Privacy Impact Assessment (PIA) has been authored to assess the privacy risks related to the implementation of a new investment program for the dairy sector. The Dairy Farm Investment Program (DFIP) will provide the dairy sector (limited to cow) with non-repayable funds totaling $250 million over the course of the five-year program (end date March 31, 2022). The majority of dairy farmers are located in Ontario and Quebec and are mostly family-owned operations; with some represented as corporations and others as sole proprietors. Consequently, Agriculture and Agri-Foods Canada anticipates corporations and sole proprietors will seek funding under the Dairy Farm Investment Program; therefore, personal information will be collected under the program. The DFIP application requires tombstone information related to the farm and employees, as well as some other more sensitive information, such as financial information and the social insurance number (SIN).


As the Dairy Farm Investment Program involves the collection and management of personal information, a PIA was conducted to determine if there were any privacy risks, and if so, to make recommendations for their resolution or mitigation.


The scope of this PIA is limited to the DFIP application process and claims process. While there is a future planned release of a dedicated online system to support applications and claims submissions, at the writing of this PIA, sufficient information was known about the system and detailed in this PIA, such as the Threat and Risk Assessment (TRA), Statement of Sensitivity (SoS), data elements being stored, as well as other aspects. Therefore, an update to this PIA based on the deployment of the dedicated DFIP system is not anticipated.


As a result of the PIA, measures have been determined to mitigate any risks associated with the collection of personal information. These include ensuring that the collection is compliant with the Treasury Board Secretariat policy requirements, limiting the collection, ensuring records are safeguarded for an appropriate time frame and creating a personal information bank (PIB).

For further information, please contact the Access to Information and Privacy Office.

Report a problem on this page
Please select all that apply:

Date modified: