The complainant alleges that the Canada Border Services Agency (CBSA) did not conduct a reasonable search in response to an access request under the Access to Information Act. This was in response to a request for any assessments of cybersecurity and data breach risks associated with the ArriveCan application.

The complainant questioned the fact that they have received no information regarding specific named companies and/or expenses which they felt should have been found in the documents received, given the subject of their access request.

The OIC sought information from CBSA related to the program areas tasked to search for records and the parameters of the search. The OPI most likely to have records relevant to the access request under their control, searched for records in the appropriate repositories and provided these records to the Access to Information and Privacy unit for processing. As a result, the Information Commissioner concluded that CBSA conducted a reasonable search for records.

The complaint is not well founded.