ºÚÁϲ»´òìÈ

ºÚÁϲ»´òìÈ Institute of Technology and Advanced Learning (ºÚÁϲ»´òìÈ) is committed to ensuring that all personal information collected, used, disclosed, stored and discarded is done so in accordance with Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA) and all other applicable legislation in order to protect the privacy of individuals.

This policy pertains to all personal information in ºÚÁϲ»´òìÈ’s custody and control, excluding personal health information that is governed by the Personal Health Information Protection Act. Personal information in the custody and control of ºÚÁϲ»´òìÈ for the purpose of scholarly research is outside of the scope of this procedure.

ºÚÁϲ»´òìÈ maintains a glossary of terms specific to the institution. The ones in use for this document are defined below.

This policy adheres to the following protection of privacy principles: 

1. Accountability - ºÚÁϲ»´òìÈ is responsible for the personal information under its custody and control. 
1. ºÚÁϲ»´òìÈ publishes its policies and practices related to the management of personal information through the corporate website. 
2. Accuracy - ºÚÁϲ»´òìÈ takes reasonable steps to ensure personal information is as accurate, complete, and up-to-date as is necessary for the purposes for which it was collected. 
1. An individual may challenge the accuracy and completeness of their information and have it amended as appropriate. 
3. Consent – ºÚÁϲ»´òìÈ provides individuals the opportunity to provide informed consent for the collection, use, and disclosure of personal information except when pre-empted by law. 
1. Identifying purposes – ºÚÁϲ»´òìÈ explicitly identifies the purpose for the collection of personal information at or before the time information is collected. 
4. Access - Upon request and except when pre-empted by law, an individual must be informed of the existence, use, and disclosure of their personal information and shall be given access to that information.  
5. Collection – ºÚÁϲ»´òìÈ only collects personal information required for its business purposes when collection is authorized by law. 
1. ºÚÁϲ»´òìÈ collects personal information directly from an individual unless there is a reasonable requirement from another source permitted under FIPPA. 
6. Use and disclosure - Personal information is not used or disclosed for purposes other than those for which it was collected, except with the informed consent of the individual or as required by law. 
7. Retention – ºÚÁϲ»´òìÈ disposes of personal information according to approved records retention schedules. 
8. Safeguards – ºÚÁϲ»´òìÈ ensures the appropriate security protections that correspond to the sensitivity of the information in its custody and control.