Canadian Security Intelligence Service Act

Marginal note:Record keeping — publicly available datasets

• 11.24 (1) The Service shall, with respect to publicly available datasets,

  • (a) establish record keeping requirements for those datasets with respect to the rationale for their collection, the details of each exploitation, the statutory provision under which the result of a query or exploitation is retained and the results that were retained; and

  • (b) verify, periodically and on a random basis, if the results obtained from the querying and exploitation of those datasets were retained in accordance with subsection 11.11(2).

• Marginal note:Record keeping — approved class

  (2) The Service shall establish record keeping requirements in respect of the approved class of a Canadian dataset.

• Marginal note:Requirements

  (3) The Service shall, with respect to Canadian and foreign datasets,

  • (a) store and manage those datasets separately from all other information collected and retained by the Service under this Act;

  • (b) limit access to those datasets to designated employees and take reasonable measures to ensure that any information that they obtained, or to which they had access, is only communicated for the purpose of performing their duties or functions under this Act;

  • (c) establish record keeping requirements for those datasets with respect to the rationale for their collection and retention, the details of each query and exploitation, the results of those queries and exploitations, and if the results were retained for the purpose of performing their duties or functions under section 12, 12.1, 15 or 16; and

  • (d) verify, periodically and on a random basis, if

    • (i) the querying and exploitation of those datasets were carried out in accordance with section 11.2, and

    • (ii) the results obtained from the querying and exploitation of those datasets were retained in accordance with section 11.21.