“Not able to disclose for privacy reasons” is usually not true
Fellow Canadians, especially journalists, when a person or organization can’t respond to a request citing “privacy reasons”, let that be a huge red flag to your ears. Demand to know which privacy law they are referring, and to which specific section of that privacy law. Quote it in the article, to show you’ve done your due diligence. In my experience, most organizations making that claim are either misinformed, or outright lying, and we should stop accepting this behaviour immediately.