Reporting to Commissioner
 11. (1) On or before March 31 in each year, a service provider shall report the following information to the Commissioner: 1. The number of requests for access to a record under subsection 313 (1) of the Act received by the service provider in the previous year. 2. The number of times a service provider, in response to a request made under subsection 313 (1) of the Act in the previous year, refused to provide access to a record or part of a record and the number of times the service provider relied on each of the clauses or, in the case of a refusal under clause 312 (1) (d) of the Act, each of the subclauses, under subsection 312 (1) of the Act to do so. 3. The number of times the service provider responded within 30 days of receiving a request for access to a record under subsection 313 (1) of the Act and the number of times the service provider extended the deadline to respond to such a request to not more than 90 days under subsection 314 (3) of the Act. 4. The number of requests to correct a record made to a service provider under subsection 315 (2) of the Act in the previous year and the number of times a service provider, in response to such a request, i. refused the request because it did not find that the correction was warranted under subsection 315 (9) of the Act, ii. relied on each of either subsection 315 (6) or (10) of the Act to refuse the request, or iii. received a statement of disagreement under subsection 315 (12) of the Act. 5. The number of times the service provider responded within 30 days of receiving a request to correct a record under subsection 315 (2) of the Act and the number of times the service provider extended the deadline to respond to such a request to not more than 90 days under subsection 315 (4) of the Act. 6. The number of times personal information in the service provider’s custody or control that was collected for the purpose of providing a service was stolen. 7. The number of times personal information in the service provider’s custody or control that was collected for the purpose of providing a service was lost. 8. The number of times personal information in the service provider’s custody or control that was collected for the purpose of providing a service was used without authority. 9. The number of times personal information in the service provider’s custody or control that was collected for the purpose of providing a service was disclosed without authority. 10. The number of times personal information in the service provider’s custody or control that was collected for the purpose of providing a service was used in a manner that is outside the scope of the service provider’s description of its information practices under clause 311 (1) (a) of the Act. 11. The number of times personal information in the service provider’s custody or control that was collected for the purpose of providing a service was disclosed in a manner that is outside the scope of the service provider’s description of its information practices under clause 311 (1) (a) of the Act. (2) The report required by subsection (1) shall be transmitted to the Commissioner by the electronic means and format determined by the Commissioner. 12. Omitted (provides for coming into force of provisions of this Regulation).  Français