Policies, Regulations Forms and Bylaws

6720-10 | Personal Information Management Program Regulation

Date Approved: October 23 2023
Date Reviewed/Amended:


PURPOSE

As a public body that is subject to the British Columbia Freedom of Information and Protection of Privacy Act (the “Act” or FIPPA”), the Board of Education of School District No. 52 (“School District”) is committed to upholding the principles of privacy, transparency and accountability. This means that the School District recognizes the fundamental importance of maintaining the privacy and security of the personal information that it collects, uses and discloses in the course of its operations and programs. The School District also acknowledges and supports transparency with the community by facilitating access to School District records and information in accordance with the requirements of the Act.

DEFINITIONS

Where used in this Regulation, the following terms have the following meanings:

a) “Consent” means express written consent to the collection, use or disclosure of personal information;

b) “FIPPA” means the BC Freedom of Information and Protection of Privacy Act, and regulations thereto;

c) “Head” means the Superintendent/CEO, and includes any person to whom the Head has delegated (in writing) their powers to act as Head;

d) “Personal Information” means recorded information about an identifiable individual, but excludes a person’s business contact information;

e) “Procedures” means procedures enacted by the School District under its Privacy Policy;

f) “Records” include any paper or electronic media used to store or record information, including all paper and electronic records, books, documents, photographs, audio or visual recordings, computer files, email and correspondence;

g) “Staff” means all persons employed or engaged by the School District to carry out its operations and includes independent contractors and volunteers.

PRINCIPLES

School District Staff are responsible for:

• making reasonable efforts to familiarize themselves with this Procedure and the requirements of FIPPA, including by participating in privacy training initiatives offered by the School District;

• following responsible information management practices to ensure that the School District collects, uses and discloses Personal Information in compliance with FIPPA and      

            • other applicable laws;

• seeking at all times to protect Personal Information against unauthorized collection, use and disclosure, including by limiting the sharing of sensitive Personal Information on a need to know basis;     

• cooperating with School District procedures to facilitate the appropriate release of Records within its custody or control in response to access requests received from members of the community under FIPPA;

• cooperating with School District procedures for the completion of privacy impact assessments; and

• reporting privacy breaches to the School District in accordance with the School District’s Procedures.

ACCOUNTABILITY

The Superintendent is the “head” of the School District for the purposes of FIPPA and is responsible for the implementation of this Procedure.

The Head is responsible to appoint, oversee and, if appropriate, delegate responsibility to a Privacy Officer for the School District to supervise its Personal Information management program.

COMMITMENT TO PRIVACY PROTECTION:

The School District protects the privacy of students, staff and individuals whose Personal Information it collects, uses, shares and retains, and expects all Staff to follow responsible information management practices to ensure that the School District fully complies with its obligations under FIPPA and other applicable laws.

The School District and Staff respect the privacy and confidentiality of Personal Information entrusted to them in the course of their duties, and collects, uses and discloses Personal Information only where authorized by FIPPA.

PURPOSES FOR COLLECTING PERSONAL INFORMATION

The School District communicates the purposes for which Personal Information is collected at or before the time the information is collected, unless otherwise permitted or required by FIPPA.

In the ordinary course of carrying out its programs and activities, the School District collects Personal Information of its students for purposes including:

• registration, enrollment and transfer of students;

• to provide and deliver educational programs and services;

• to accommodate students with special needs;

• to communicate with students and respond to inquiries or complaints;

• to prepare and provide assessments of student performance;

• to supervise and ensure the safety and security of the School District (such as through the use of video surveillance);

• to investigate and respond to accidents, safety events, misconduct and similar incidents;

• to ensure compliance with applicable School District bylaws, policies and other laws;

• to make all required reports and filings to the Ministry of Education and Child Care; and

• for other purposes set out in the Procedures or required under applicable laws.

In the ordinary course of carrying out its employment programs and activities, the School District collects the Personal Information of prospective, current and former Staff for purposes including:

• hiring and recruitment;

• to manage and administer the employment relationship;

• to communicate with authorized union representatives;

• to administer employment compensation and benefits;

• to evaluate performance and manage disciplinary incidents;

• to supervise and ensure the safety and security of the School District (such as through the use of video surveillance);

• to investigate and respond to accidents, safety events, misconduct and similar incidents;

 • to ensure compliance with applicable School District policies and other applicable laws; and

• for other purposes set out in the Procedures or required under applicable laws.

COLLECTION, USE AND DISCLOSURE OF PERSONAL INFORMATION:

The School District limits the Personal Information it collects to information to what is related to and necessary in order to carry out its programs and activities or for other purposes authorized by FIPPA.

The School District seeks to collect Personal Information by fair, lawful and transparent means, including by collecting Personal Information directly from the individual, except where otherwise authorized by FIPPA.

The School District seeks to inform individuals from whom it collects Personal Information the purposes for which the information is being collected, the legal authority for collecting it and the name and contact information of someone at the School District who can answer questions about the collection and use of the information;

The School District limits the internal and external use and sharing of Personal Information to what is required and authorized by FIPPA or consented to by the individual.

The School District only uses or discloses Personal Information for the purpose for which it was collected, except with the individual’s consent or as otherwise required or permitted by FIPPA or other laws.

SECURING PERSONAL INFORMATION:

The School District protects Personal Information by ensuring it has reasonable security safeguards in place which are appropriate to the sensitivity of the information. Such security safeguards shall include consideration of physical security, organizational security and electronic security.

All Staff have a duty to protect the privacy and security of Personal Information collected and used by them as part of their ongoing employment responsibilities, including by complying with the terms of this Procedure, and all related Procedures.

The School District provides training to all Staff to ensure they have the requisite knowledge to ensure compliance with the terms of this Procedure and the FIPPA.

RETENTION:

The School District does not seek to retain Personal Information longer than necessary to satisfy the School District’s applicable operational, instructional, financial and legal needs.

Personal information that is no longer required for either administrative, operational, financial, legal or historical purposes shall be securely destroyed in a confidential manner in accordance with School District policies and approved record retention procedures 6710-10.

ACCURACY AND CORRECTION: The School District shall make reasonable efforts to ensure the accuracy of the Personal Information that they collect and use in the course of performing their duties.

Individuals have the right to request the correction of their Personal Information, and the School District will receive and respond to such requests in accordance with the FIPPA and School District Procedures.

 ACCESS TO INFORMATION:

The School District supports appropriate transparency and accountability in its operations by making information available to the public as permitted or required under FIPPA.

The Head shall, on at least an annual basis, consider and designate categories of Records that will be made available to the public without the need to make a request in accordance with FIPPA.

The School District recognizes that individuals may make requests for access to Records within the custody and control of the School District, and the School District will respond to such requests in accordance with FIPPA and the Procedures.

The School District recognizes that individuals have a right to access their own Personal Information within the custody and control of the School District and will facilitate such access in accordance with the requirements of FIPPA.

COMPLAINTS AND INQUIRIES

Questions or complaints about the School District’s information management practices should be directed to the Privacy Officer at:

hr@sd52.bc.ca. The School District will respond to all complaints in writing.