The Privacy Act (the Act) provides Canadian citizens and permanent residents with the right of access to and correction of personal information about themselves that is under the control of a government institution. The Act also provides the legal framework for the collection, retention, use, disclosure, disposition and validation of the accuracy of personal information in the administration of programs and activities by government institutions subject to the Act. This report has been prepared and tabled in Parliament in accordance with section 72 of the Act. It covers the period from April 1, 2018, to March 31, 2019, for the Impact Assessment Agency of Canada (IAAC). The annual report is intended to ensure accountability for the actions and decisions of the institution in their administration of the Act.