General Privacy Principles
Individuals own their own information and have a legal right to privacy protection
- Treat students as stakeholders in the collection, use and disclosure of their personal information.
- Student are loaning their personal information to Kwantlen Polytechnic University in exchange for services provided by the university. But in so doing students do not cede ownership of their personal information.
- Students are entitled to request and receive copies of any and all personal information in the possession of the university.
Public bodies may only collect personal information which relates directly to, and is necessary for, an operating program or activity of the public body
- Collect only the personal information necessary to provide the service.
- Share information on a need-to-know, rather than a want-to-know basis, and then only with authorized individuals who specifically need to know.
Information may only be used for the purpose for which it is collected
- Additional consent is not required to use information for the purpose for which it was provided, intended and collected.
- Consent must be obtained to collect or use personal information for other purposes. Exception: Essential personal information may be shared without consent, provided it is absolutely necessary and in the interest of the student or necessary to the functioning of the department. This may be the case with medical or mental conditions which impact a student’s performance or which pose a health or safety risk to the student or instructors. This is discretionary and must be carefully considered.
Public Interest Paramount: Protection of public heath and safety overrides protection of privacy
Issues of concern to the health and safety of students, employees or others can and should be reported to appropriate authorities, even without the permission or consent of the individuals whose privacy rights are affected. For further information refer to: Practice Tool for Exercising Discretion: Emergency Disclosure of Personal Information by Universities, Colleges and other Educational Institutions published in 2008 by the Office of the the Information and Privacy Commissioner.
“The head of a public body must, without delay, disclose to the public, to an affected group of people or to an applicant, information about a risk of significant harm to the environment or to the health or safety of the public or a group of people.” Freedom of Information and Protection of Privacy Act, Section 25.
