RCMP Group Life Insurance Administration
On this page
Description
This Privacy Impact Assessment (PIA) describes the information handling practices for the contract for the RCMP and the Group Life and Disability Insurance. The contract was awarded to SEB Administrative Services Inc (SEB) in December of 2020.
A Pension Data Repository (PDR) processor has been developed to collect the required data from the Human Resources Management Information System (HRMIS) and provide this data to SEB on a bi-weekly basis via encrypted email. Data is sent from SEB to the RCMP (member pay system) and the Government of Canada Pension Centre to have deductions made to pay and pension cheques and to provide the necessary updates for reconciliation to these systems. SEB provides a portal - Flex Plus Connect, hosted on on-premise servers, where user can access different modules in a common dashboard with single sign-on functionality. FlexPlus Connect includes interactive enrolment applications that plan participants may use to select benefit options as well as the ability to update their personal and dependent information.
The data collected and stored by SEB is considered Protected B. The security requirements have been included in the Security Requirements Check List that formed part of the formal contract. A Threat and Risk Assessment was performed early in the implementation to establish the technical and non-technical security controls required to ensure the protection of the confidentiality, integrity and availability of the personal information collected, transmitted, processed, and stored by SEB Admin in support of the group life insurance program.
Why a privacy impact assessment was completed
This PIA was completed by the RCMP in accordance with section of the Directive on Privacy Practices. The PIA describes the information handling practices surrounding this contract and safeguards that are in place.
Additional information
Through the assessment, it was determined that the RCMP did not provide the Members with an adequate privacy notice statement, per paragraph 4.2.20 of the Directive on Privacy Practices. A privacy notice statement was developed through the PIA process. It is now included on the Employee Information for Insurance Enrolment form.
The assessment determined that technical and non-technical controls, processes, and procedures (enforced through the contract) are in place to safeguard the personal information associated with the RCMP LIA program to the extent possible. The RCMP and the vendor are to continue to work together to ensure those measures remain in place and remain adequate to maintain the privacy and security of the information.
Related personal information banks
- RCMP PPE 802 - RCMP Member Service Records
- RCMP PPE 806 - RCMP Member's Pay and Allowance Records
- TBS PSE 904 - Pay and Benefits
- TBS PSE 901 - Employee Personnel Record
For more information about this privacy impact assessment
Contact the RCMP's Privacy Management Division at atippolicy_politiqueaiprp@rcmp-grc.gc.ca.
- Date modified: