Personal Information Management Program

Administrative Procedure: 178

PERSONAL INFORMATION MANAGEMENT PROGRAM
Background
As a public body that is subject to the British Columbia Freedom of Information and Protection of Privacy Act (the “Act” or FIPPA”), the District is committed to upholding the principles of privacy, transparency, and accountability. This means that the District recognizes the fundamental importance of maintaining the privacy and security of the personal information that it collects, uses, and discloses in the course of its operations and programs. The District also acknowledges and supports transparency with the community by facilitating access to District records and information in accordance with the requirements of the Act.

Procedures
1. Definitions
Where used in this Procedure, the following terms have the following meanings:
1.1 “Consent” means express written consent to the collection, use or disclosure of personal information;
1.2 “FIPPA” means the BC Freedom of Information and Protection of Privacy Act, and regulations thereto;
1.3 “Head” means the Secretary-Treasurer, and includes any person to whom the Head has delegated (in writing) their powers to act as Head;
1.4 “Personal Information” means recorded information about an identifiable individual, but excludes a person’s business contact information;
1.5 “Procedures” means procedures enacted by the District under its Privacy Policy;
1.6 “Records” include any paper or electronic media used to store or record information, including all paper and electronic records, books, documents, photographs, audio or visual recordings, computer files, email and correspondence;
1.7 “Staff” means all persons employed or engaged by the District to carry out its operations and includes independent contractors and volunteers.

2. Principles
School District Staff are responsible for:
2.1 making reasonable efforts to familiarize themselves with this Procedure and the requirements of FIPPA, including by participating in privacy training initiatives offered by the School District;
2.2 following responsible information management practices to ensure that the District collects, uses, and discloses Personal Information in compliance with FIPPA and other applicable laws;
2.3 seeking at all times to protect Personal Information against unauthorized collection, use and disclosure, including by limiting the sharing of sensitive Personal Information on a need-to-know basis;
2.4 cooperating with District procedures to facilitate the appropriate release of Records within its custody or control in response to access requests received from members of the community under FIPPA;
2.5 cooperating with District procedures for the completion of privacy impact assessments; and
2.6 reporting privacy breaches to the District in accordance with the School District’s Procedures.

3. Accountability
3.1 The Secretary-Treasurer is the “head” of the District for the purposes of FIPPA and is responsible for the implementation of this Procedure.
3.2 The Head is responsible to appoint, oversee and, if appropriate, delegate responsibility to a Privacy Officer for the District to supervise its Personal Information management program.

4. Commitment to Privacy Protection:
4.1 The District protects the privacy of students, staff, and individuals whose Personal Information it collects, uses, shares, and retains, and expects all Staff to follow responsible information management practices to ensure that the District fully complies with its obligations under FIPPA and other applicable laws.
4.2 The District and Staff respect the privacy and confidentiality of Personal Information entrusted to them in the course of their duties, and collects, uses, and discloses Personal Information only where authorized by FIPPA.

5. Purpose for Collecting Personal Information
5.1 The District communicates the purposes for which Personal Information is collected at or before the time the information is collected, unless otherwise permitted or required by FIPPA.
5.2 In the ordinary course of carrying out its programs and activities, the District collects Personal Information of its students for purposes including:
5.2.1 registration, enrollment, and transfer of students;
5.2.2 to provide and deliver educational programs and services;
5.2.3 to accommodate students with special needs;
5.2.4 to communicate with students and respond to inquiries or complaints;
5.2.5 to prepare and provide assessments of student performance;
5.2.6 to supervise and ensure the safety and security of the District (such as through the use of video surveillance);
5.2.7 to investigate and respond to accidents, safety events, misconduct and similar incidents;
5.2.8 to ensure compliance with applicable District bylaws, policies and other laws;
5.2.9 to make all required reports and filings to the Ministry of Advanced Education; and
5.2.10 for other purposes set out in the Procedures or required under applicable laws.

6. In the ordinary course of carrying out its employment programs and activities, the District collects the Personal Information of prospective, current, and former Staff for purposes including:
6.1 hiring and recruitment;
6.2 to manage and administer the employment relationship;
6.3 to communicate with authorized union representatives;
6.4 to administer employment compensation and benefits;
6.5 to evaluate performance and manage disciplinary incidents;
6.6 to supervise and ensure the safety and security of the District (such as through the use of video surveillance);
6.7 to investigate and respond to accidents, safety events, misconduct and similar incidents;
6.8 to ensure compliance with applicable District policies and other applicable laws; and
6.9 for other purposes set out in the Procedures or required under applicable laws.

7. Collection, Use and Disclosure of Personal Information:
7.1 The District limits the Personal Information it collects to information to what is related to and necessary in order to carry out its programs and activities or for other purposes authorized by FIPPA.
7.2 The District seeks to collect Personal Information by fair, lawful and transparent means, including by collecting Personal Information directly from the individual, except where otherwise authorized by FIPPA.
7.3 The District seeks to inform individuals from whom it collects Personal Information the purposes for which the information is being collected, the legal authority for collecting it and the name and contact information of someone at the District who can answer questions about the collection and use of the information;
7.4 The District limits the internal and external use and sharing of Personal Information to what is required and authorized by FIPPA or consented to by the individual;
7.5 The District only uses or discloses Personal Information for the purpose for which it was collected, except with the individual’s consent or as otherwise required or permitted by FIPPA or other laws.

8. Securing Personal Information:
8.1 The District protects Personal Information by ensuring it has reasonable security safeguards in place which are appropriate to the sensitivity of the information. Such security safeguards shall include consideration of physical security, organizational security, and electronic security.
8.2 All Staff have a duty to protect the privacy and security of Personal Information collected and used by them as part of their ongoing employment responsibilities, including by complying with the terms of this Procedure, and all related Procedures.
8.3 The District provides training to all Staff to ensure they have the requisite knowledge to ensure compliance with the terms of this Procedure and the FIPPA.

9. Retention:
9.1 The District does not seek to retain Personal Information longer than necessary to satisfy the District’s applicable operational, instructional, financial, and legal needs.
9.2 Personal information that is no longer required for either administrative, operational, financial, legal, or historical purposes shall be securely destroyed in a confidential manner in accordance with District policies and approved record retention protocols.

10. Accuracy and Correction:
10.1 The District shall make reasonable efforts to ensure the accuracy of the Personal Information that they collect and use in the course of performing their duties.
10.2 Individuals have the right to request the correction of their Personal Information, and the District will receive and respond to such requests in accordance with the FIPPA and School District Procedures.

11. Access to Information:
11.1 The District supports appropriate transparency and accountability in its operations by making information available to the public as permitted or required under FIPPA.
11.2 The Head shall, on at least an annual basis, consider and designate categories of Records that will be made available to the public without the need to make a request in accordance with FIPPA.
11.3 The District recognizes that individuals may make requests for access to Records within the custody and control of the District, and the District will respond to such requests in accordance with FIPPA and the Procedures.
11.4 The District recognizes that individuals have a right to access their own Personal Information within the custody and control of the District and will facilitate such access in accordance with the requirements of FIPPA.

12. Complaints and Inquiries
12.1 Questions or complaints about the District’s information management practices should be directed to the Privacy Officer at <insert contact information>.
12.2 The District will respond to all complaints in writing.

Revised: February 2023

Procedure 178