The university collects personal information about students, faculty and staff in order to operate effectively and efficiently as a post-secondary institution. The university is required to protect personal information and ensure it is only used and disclosed for appropriate purposes.
Personal information includes any information about an identifiable individual, but excludes the salary and employment responsibilities of an employee of the university, travel expenses of any individual travelling at the expense of the university, academic ranks or departmental designations of faculty, and degrees or certificates granted by the university.
We can only use protected personal information with express consent, with implied consent (for the purpose for which it was collected or a use consistent with that purpose) or without consent in very limited circumstances. When considering whether to use or disclose personal information of students, employees, or others, please start by considering whether it is protected personal information. If it is, and we don’t have express consent, ask yourself - what were the purposes for its original collection, what was the individual informed of in regards to our use and disclosure of the information, and is this new or intended use or disclosure is consistent with the original purpose.