The complainant alleged that the Correctional Service of Canada (CSC) had improperly withheld information under subsection 19(1) (personal information) of the Access to Information Act. This was in response to an access request for emails sent to and from the Warden at Millhaven Institution containing the words “outbreak”, “covid”, “mask”, isolate”, “lockdown” or “Structured Intervention Units (SIU)” between April 19 and 25, 2021. The allegation falls within paragraph 30(1)(a) of the Act. The investigation confirmed that portions of the withheld information such as names and contact information of staff and offenders for the purpose of COVID-19 contract tracing, performance appraisals, information related to intra-regional transfers and the names and birthdates of offenders, as well as details regarding an offender’s criminal history met the requirements of subsection 19(1). The Information Commissioner ordered CSC to disclose the information that does not meet the requirements of subsection 19(1), such as the type of incidents in the situation reports. CSC gave notice to the Commissioner that it would implement the order. The complaint is well founded.