April 27, 2022

Security Clearance for Access to Sensitive Information
Human Pathogens and Toxins Act licensed facilities must limit access to sensitive information related to human pathogens and toxins (see 4.10.12 of the Canadian Biosafety Standard). Information management security keeps sensitive information accessible only to those who need it.
Information related to Risk Group 3, Risk Group 4 and security sensitive biological agents is considered sensitive when it includes 2 or more of the following elements:
- pathogen or toxin identity
- pathogen or toxin storage location
- security access control methods, including access codes and passwords
Most people with authorized access to sensitive information related to security sensitive biological agents have a valid Human Pathogens and Toxins Act security clearance. The list of personnel with a valid Human Pathogens and Toxins Act security clearance should only be accessible on a need-to-know basis.
For questions restricting access to sensitive information, please contact the Centre for Biosecurity at biosafety.biosecurite@phac-aspc.gc.ca.
You can find more guidance on information management and security in Chapter 7 of the Canadian Biosafety Guideline: Developing a comprehensive biosecurity plan.