Presentation is loading. Please wait.

Presentation is loading. Please wait.

VIU Workshop: Creating a Culture of Privacy Awareness June 12, 2013 By Justin Hodkinson OIPC Policy Analyst/Investigator Office of the Information & Privacy.

Similar presentations


Presentation on theme: "VIU Workshop: Creating a Culture of Privacy Awareness June 12, 2013 By Justin Hodkinson OIPC Policy Analyst/Investigator Office of the Information & Privacy."— Presentation transcript:

1 VIU Workshop: Creating a Culture of Privacy Awareness June 12, 2013 By Justin Hodkinson OIPC Policy Analyst/Investigator Office of the Information & Privacy Commissioner for British Columbia Protecting privacy. Promoting transparency.

2 Agenda Protection of Privacy60 minutes Privacy Quiz 5 minutes Coffee/Tea Break10 minutes FIPPA Basics25 minutes Question Period20 minutes Exam20 minutes Office of the Information & Privacy Commissioner for British Columbia

3 VIU Privacy Policies Arriving Soon! Office of the Information & Privacy Commissioner for British Columbia

4 Privacy Breaches Not a question of IF But a question of WHEN & HOW BIG Office of the Information & Privacy Commissioner for British Columbia

5 Common Privacy Breaches Stolen laptops or local hard drives Lost or stolen documents Blowing out of garbage trucks Lost, stolen or misplaced recycling bins Files on car roofs Inappropriate or unauthorized behaviour Browsing database Blogs Inadvertent disclosures Mailing system errors Faxing errors Office of the Information & Privacy Commissioner for British Columbia

6 Protecting PI Outside off Campus Office of the Information & Privacy Commissioner for British Columbia

7 F12-02 U of Vic Investigation Report Importance of a Privacy Management Framework & Encryption Office of the Information & Privacy Commissioner for British Columbia

8 Layering Approach to Security Office of the Information & Privacy Commissioner for British Columbia

9 Social Media Background Checks Office of the Information & Privacy Commissioner for British Columbia

10 Issues with Social Media Background Checks Accuracy Collecting irrelevant or too much information Overreliance on consent Third party information Office of the Information & Privacy Commissioner for British Columbia

11 Before you check…remember Personal information you collect is subject to FIPPA Consider less intrusive ways to meet your purpose Assess the risks Ensure you have authority to collect Develop policies and procedures to address risks Be prepared to respond to requests for access, correction or for withdrawal of consent Office of the Information & Privacy Commissioner for British Columbia

12 … don’t x Wait until after you check to assess the risks x Assume you are only collecting information about one person x Assume that the information will be accurate x Use a personal account to perform the check x Ask a 3 rd party to do the check x Think the person will not find out Office of the Information & Privacy Commissioner for British Columbia

13 What is Cloud Computing? Office of the Information & Privacy Commissioner for British Columbia

14 Weighing Your Options Office of the Information & Privacy Commissioner for British Columbia

15 Cloud Computing: Issues Office of the Information & Privacy Commissioner for British Columbia

16 What should you ask your prospective cloud provider? Office of the Information & Privacy Commissioner for British Columbia

17 What should you ask yourself? Office of the Information & Privacy Commissioner for British Columbia

18 Privacy Emergency Kit What data can VIU share during an emergency? Office of the Information & Privacy Commissioner for British Columbia

19 VIU Alumni Association’s Use of PI Office of the Information & Privacy Commissioner for British Columbia

20 Sharing PI between VIU Departments Office of the Information & Privacy Commissioner for British Columbia

21 Sharing Health Information Office of the Information & Privacy Commissioner for British Columbia

22 PIAs & Self-Generated Research Office of the Information & Privacy Commissioner for British Columbia

23 S. 35 of FIPPA Research Agreements Office of the Information & Privacy Commissioner for British Columbia

24 Sharing Students’ Email Addresses Office of the Information & Privacy Commissioner for British Columbia

25 Privacy Quiz Time! Office of the Information & Privacy Commissioner for British Columbia Protecting privacy. Promoting transparency. Presented by: Justin Hodkinson, Investigator

26 Office of the Information & Privacy Commissioner for British Columbia 1. What does P.I.A. really mean?

27 Office of the Information & Privacy Commissioner for British Columbia 2. Where can you store personal information?

28 Office of the Information & Privacy Commissioner for British Columbia 3. Retention

29 Office of the Information & Privacy Commissioner for British Columbia 4.Who are you gonna call?

30 5.Speed Round The Dean of the Business Department approaches you, the Registrar, & asks for a student’s home address. The Dean explains that she has reason to believe that the student is about to commit suicide & she wants to warn the student’s older sister, who still lives with their parents. How would you respond to this request for student information?

31 Office of the Information & Privacy Commissioner for British Columbia Web Cam & VideoSurveillance Video Surveillance

32 Office of the Information & Privacy Commissioner for British Columbia More Information Video Surveillance: http://www.oipc.bc.ca/news/rlsgen/Video_Surveill ance_Guidelines(March2008).pdf Social Media Background checks: http://www.oipc.bc.ca/pdfs/private/Guidelines- SocialMediaBackgroundChecks.pdf Cloud Computing: http://www.oipc.bc.ca/pdfs/private/Cloud_computing_fo r_SMEs_guidance_document.pdf

33 Office of the Information & Privacy Commissioner for British Columbia

34 FOI ACCESS Office of the Information & Privacy Commissioner for British Columbia

35 10 Principles for Privacy Compliance Be accountable Identify the purpose Obtain consent Limit collection, use, disclosure Limit retention Be accurate Use appropriate safeguards Be open Give access Challenging compliance

36 Office of the Information & Privacy Commissioner for British Columbia About the OIPC… Independent office of the Legislature Oversees privacy and access issues in the public (FIPPA) and private sector (PIPA) Power to investigate, mediate & adjudicate Guidelines, public education & reports

37 Role of the OIPC Office of the Information & Privacy Commissioner for British Columbia

38 What is “personal What is “personal information” ? information” ?  Information that can identify an individual: name, address, phone number, ID number.  Information about an identifiable individual: physical description, educational qualifications, blood type.

39 Office of the Information & Privacy Commissioner for British Columbia Access basics Anyone can ask for their own personal information Student can ask for exam questions but VIU will not disclose them Must remove certain information May remove other information

40 What is purpose of FIPPA? FIPPA passed in 1992 - Purposes of this Act 2 (1) The purposes of this Act are to make public bodies more accountable to the public and to protect personal privacy by (a) giving the public a right of access to records, (b) giving individuals a right of access to, and a right to request correction of, personal information about themselves, (c) specifying limited exceptions to the rights of access (d) Preventing the unauthorized collection, use or disclosure of personal information by public bodies, … Office of the Information & Privacy Commissioner for British Columbia

41

42

43 Employee Records & Investigations Office of the Information & Privacy Commissioner for British Columbia

44

45 Reasons for Extensions Office of the Information & Privacy Commissioner for British Columbia

46 Safeguarding basics Security Practices Retention Practices Disposal Practices

47 Custody & Control Office of the Information & Privacy Commissioner for British Columbia

48 Clarify Requests & Talk with Applicants Office of the Information & Privacy Commissioner for British Columbia

49 Fees Office of the Information & Privacy Commissioner for British Columbia

50 Fee Estimates Office of the Information & Privacy Commissioner for British Columbia

51 Questions? Office of the Information & Privacy Commissioner for British Columbia

52 Thank you Office of the Information and Privacy Commissioner for British Columbia Telephone: (250) 387-5629 (general) (250) 387-0035 (my direct line) Toll-free access call Enquiry BC at one of the numbers listed below and request a transfer to (250) 387- 5629: Vancouver: (604) 660-2421 Elsewhere in BC: (800) 663-7867 Email: info@oipc.bc.ca or JHodkinson@oipc.bc.cainfo@oipc.bc.ca Facsimile: (250) 387-1696


Download ppt "VIU Workshop: Creating a Culture of Privacy Awareness June 12, 2013 By Justin Hodkinson OIPC Policy Analyst/Investigator Office of the Information & Privacy."

Similar presentations


Ads by Google