The complainant alleged that the Canadian Broadcasting Corporation (CBC) had improperly withheld information under section 17 (safety of individuals) and subsection 19(1) (personal information) of the Access to Information Act in response to an access request. The request was for all communications between specific CBC and Twitter employees since January 1, 2018, which was prior to Twitter becoming X. The allegation falls under paragraph 30(1)(a) of the Act. During the investigation, the CBC disclosed some of the information it had withheld under subsection 19(1) and section 17 but also applied subsection 16(2) (facilitating the commission of an offence) to some of the remaining information withheld under section 17. The Commissioner concluded that this information did not meet the requirements of either subsection 16(2) or section 17. The CBC argued that disclosing the name and contact information of a member of its information security team would facilitate the commission of an offence by making it possible for hackers to access CBC computer systems. However, the CBC did not show how disclosing the information would reasonably be expected to lead to this result. In addition, the employee’s name and contact information were already available on LinkedIn and elsewhere online. The CBC also withheld the names and Twitter handles of several CBC journalists who were the subject of online posts the CBC had identified as instances of harassment and requested to be taken down, although it disclosed the content of the posts themselves during the investigation. The CBC argued that also disclosing the identifying information of journalists who were calling out online harassment could lead to these individuals’ being subject to retaliatory online attacks, resulting in psychological harm. The Commissioner found that the threats to individuals’ safety envisioned under section 17 could include psychological harm. Nonetheless, she concluded that, in this case, the CBC neither showed that the harm went beyond distress nor addressed the reasonable expectation of the harm occurring if the information were disclosed. The Commissioner ordered the CBC to disclose the information withheld under subsection 16(2) and section 17. The CBC gave notice to the Commissioner that it would implement the order. The complaint is well founded.