Question Period Note: IDENTITY THEFT AND DATA BREACHES

The Department’s response to protect Canadians' personal information in the face of identity theft and data breaches involving the Social Insurance Number (SIN).

• The Government uses the Social Insurance Number (SIN) to deliver some of its largest programs, including Employment Insurance, the Canada Pension Plan, Old Age Security, and the Canada Student Loans Program.

• The Department is committed to protecting the privacy and integrity of the personal data it collects and retains from Canadians through strong and well-established policies and procedures that are constantly reviewed and strengthened.

• The Department updates information on its website to help Canadians understand how to protect their SIN, who can ask for the SIN, and what steps to take when they suspect that their SIN is being used fraudulently. This information will help Canadians recognize how to protect themselves against identity theft, and what to do in the event of a data breach.

• In proven cases of fraud or identity theft, the Department works closely with the victims to determine the best course of action in an effort to prevent further fraudulent activity, including the issuance of a new SIN.

• Introduced in 1964, the SIN is a nine-digit number used as a file number for a variety of Government of Canada programs and benefits. The SIN plays a vital role in the sound management of many programs and services across the federal government. This includes ensuring that Canadians’ accounts are accurately identified and to share data for administration purposes.

• The SIN Program processes over 1.5 million SIN transactions a year including the issuance of over one million new SINs, changes to the SIN record such as name changes, renewals, and requests for replacement or confirmations of SIN.

• Replacement SINs are only issued in cases of proven fraud. This policy is maintained because obtaining a new SIN is a complex affair. It requires an individual to update their SIN with their financial institutions and employers, to monitor 2 SINs instead of 1 SIN, and does not protect the individual from fraud given that the old SIN will always exist and remain associated to them.
• Providing a SIN is not legally required for:
o Proving identity;
o Completing a job application;
o Completing an application to rent property;
o Completing a credit-card application or banking transactions (line of credit, loan);
o Writing a will; and,
o Applying to a university or college.

• Although this practice is unauthorized, it is not prohibited for private-sector organizations to ask for a SIN.

• In cases of proven SIN fraud, Canadians can call Service Canada or visit a Service Canada centre. Officials will review the information and provide assistance and guidance to help Canadians mitigate the risks of fraud.

• Several of the federal government's largest programs, including Employment Insurance (EI), Canada Pension Plan (CPP), Old Age Security (OAS), and the Canada Student Loans Program (CSLP), use the SIN Program to issue over $117 billion in benefits annually. It is used to validate the identity of individuals applying for these benefits to ensure ESDC is paying the right person the right benefit at the right time.

None