It’s a simple Google . Not everything can be disclosed
Section 22(1)(b) of the Privacy Act (R.S.C., 1985, c. P-21) allows a government institution to refuse to disclose personal information if the disclosure could reasonably be expected to be injurious to the enforcement of any law of Canada...