“Until its organizational culture shifts from a narrow focus on data collection, under warrant or otherwise, to sound stewardship of data at every step of its lifecycle, CSIS will continue to place itself at risk of non-compliance with the law and Ministerial Direction,” the review warned.
