I found it rather amusing that an intelligence agency would have such a privacy policy, as much of the work they do specifically involves violating people's personal privacy (though I suppose they could argue that the privacy they violate is somehow impersonal). If their privacy policy were, in fact binding, then a subject of an investigation could terminate the investigation (and require that any files compiled be destroyed) simply by visiting the CSIS website. As a result, my website contained a link to this privacy policy from early 2002 to early 2006, (that's right, it took four years for CSIS to correct this).

Needless to say, even though they corrected their privacy policy, I still think CSIS is dumb (and boring too, but that's not particularly relevant here). I also don't think it's a good idea to give special powers to dumb (and boring) people.

You can verify this on the Internet Archive.

Note to CSIS: I still visited the website, the personal privacy of whose visitors you are committed to respecting. Don't think that I'll accept the adoption of a new policy for the current website as releasing you from this commitment.