ccmMercury: Privacy Impact Assessment for Global Affairs Canada Workflow System

Global Affairs Canada published a Privacy Impact Assessment (PIA) for its ccmMercury workflow system. The PIA was developed to meet the Department's commitment to protecting personal information and the Management of Information Technology Security requirements for major services. The ccmMercury system, developed by WorkDynamics Technologies Inc., has been in use at the department since 2001.

Use Cases

• Assess privacy compliance for government IT systems based on the PIA framework described.
• Study the integration of security and privacy assessments in legacy workflow systems based on the system's history.
• Analyze the structure and requirements of a formal Privacy Impact Assessment based on the document's content.
• Benchmark government IT security practices for off-the-shelf software configured for internal access.

Strengths

• Document is published by a formal government department, Global Affairs Canada.
• Assessment is tied to a specific, named system (ccmMercury) with a known vendor and deployment year (2001).
• Explicitly meets formal government requirements for security and privacy assessments.

Limitations

• Description metadata is limited; actual data quality requires manual inspection after download.
• Column-level documentation is absent; field semantics must be inferred after download.
• Data format is HTML, which may require parsing to extract structured information.

Provenance

Source

Global Affairs Canada | Affaires mondiales Canada

Collection Method

Developed as part of departmental compliance for a major IT service.

Freshness

Last updated 2026-07-09 13:11:30.960735; freshness should be verified.