Will the personal information reside only within Canada? * Check all that apply. Yes No Unknown Do you have the ability to delete personal information in the database or online service when it is no longer required? Mark only one. Yes No Other: __________________________________________ If the answer to this question is no, please consult with the IPO before proceeding with the initiative. Will a service provider / contractor be using remote access in order to access personal information within a University system? Mark only one. Yes No Other: __________________________________________ Operational Requirements Please confirm that you have reviewed the Operational Memo found at Please confirm that you will develop the initiative in a manner that is consistent with these Operational Requirements, to the extent that they are relevant. * Yes, I confirm this. Please also confirm that the people within your unit, who are responsible for meeting the relevant requirements in the Operational Memo on an ongoing basis, will be made aware of them before the initiative is implemented. Please do not proceed with your initiative until you confirm this. * Yes, I confirm this. Please note that if the results of this checklist indicate that a privacy review or a security review are not required before implementing the initiative, the IPO or Chief Information Security Officer may review and assess this initiative at a later date, for quality assurance purposes. They may need to ask the unit questions, and may offer recommendations for improvement.
Will the personal information reside only within Canada? * Check all that apply. Yes No Unknown Do you have the ability to delete personal information in the database or online service when it is no longer required? Mark only one. Yes No Other: __________________________________________ If the answer to this question is no, please consult with the IPO before proceeding with the initiative. Will a service provider / contractor be using remote access in order to access personal information within a University system? Mark only one. Yes No Other: __________________________________________ Operational Requirements Please confirm that you have reviewed the Operational Memo found at Please confirm that you will develop the initiative in a manner that is consistent with these Operational Requirements, to the extent that they are relevant. * Yes, I confirm this. Please also confirm that the people within your unit, who are responsible for meeting the relevant requirements in the Operational Memo on an ongoing basis, will be made aware of them before the initiative is implemented. Please do not proceed with your initiative until you confirm this. * Yes, I confirm this. Please note that if the results of this checklist indicate that a privacy review or a security review are not required before implementing the initiative, the IPO or Chief Information Security Officer may review and assess this initiative at a later date, for quality assurance purposes. They may need to ask the unit questions, and may offer recommendations for improvement.
Privacy-and-Security-Checklist-July-26-2017.docx