{"id":684,"date":"2021-01-22T00:43:00","date_gmt":"2021-01-22T08:43:00","guid":{"rendered":"http:\/\/dev.wordpress.kpu.ca\/tlcommons\/?p=684"},"modified":"2021-01-21T09:54:43","modified_gmt":"2021-01-21T17:54:43","slug":"understanding-privacy-concerns-for-teaching-and-learning","status":"publish","type":"post","link":"https:\/\/dev.wordpress.kpu.ca\/tlcommons\/understanding-privacy-concerns-for-teaching-and-learning\/","title":{"rendered":"Understanding Privacy Concerns for Teaching and Learning"},"content":{"rendered":"\n

There was a time when I, like many of you, had not considered the personal information that was being collected when using technology tools. My role in the teaching and learning Commons at KPU forced me to reconsider my laissez-faire attitude about such practices. It had not crossed my mind that student data and faculty data were not looked at through the same lens. Even more importantly. I had not considered how my choices might feel coercive to students. My position of power could influence them to use these tools even if they were not comfortable sharing the information that was requested of them. After multiple requests this is the first of a series of blogs to support faculty in understanding the complexities of privacy as it relates to the use of technology in their teaching practice. <\/p>\n\n\n\n

KPU is subject to the Freedom of Information and Protection of Privacy Act of BC (\u201cFIPPA\u201d) which creates obligations for KPU to protect the Personal Information (\u201cPI\u201d) in KPU\u2019s custody or control. These obligations are shared by all KPU employees (which includes volunteers) and extend to Service Providers under contract to KPU.  When PI is shared with an outside party: Whenever KPU provides PI to a party external to KPU<\/strong> (i.e. a vendor\/Service Provider) or requires an individual to provide PI to an external party<\/strong> (i.e. in the case of vendor information technology), KPU needs to ensure safeguards are in place to protect the PI from unauthorized collection, use, disclosure, access, storage, or retention (personal communication, S. Kean, 2020).  So, what exactly is considered personal information (PI)? PI includes any information about an individual (except business contact information), this means that all our students\u2019 information is personal and needs to be protected. In the case of technology, this includes information needed to log in to an app or that is provided while interacting with the app itself, the table below lists examples of PI.  <\/p>\n\n\n\n

Email address (any email address, including KPU email address for student) <\/td><\/tr>
\u201cUnique identifiers\u201d such as Banner numbers, SIN, driver\u2019s license etc.  <\/td><\/tr>
Date of birth <\/td><\/tr>
Home address and\/or Phone number <\/td><\/tr>
Photo, Video or voice recording  <\/td><\/tr>
Sexual orientation and\/or gender <\/td><\/tr>
Employment and\/or educational history (including grades) <\/td><\/tr>
Medical, psychiatric or psychological information <\/td><\/tr>
Financial information (including credit card number) <\/td><\/tr>
Biometric data <\/td><\/tr>
Racial or ethnic origin <\/td><\/tr>
User content or participation information <\/td><\/tr>
Reflections, opinions, thoughts, feelings <\/td><\/tr>
Religious or political beliefs or associations <\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Consequences of not considering privacy.<\/strong> <\/p>\n\n\n\n

Both KPU as a public body and individual employees have privacy obligations under FIPPA.\u00a0\u00a0When decisions affecting individuals\u2019 privacy rights are made without due diligence, risks to the affected parties can include harms involving their personal safety\/security,\u00a0financial loss, identity theft, embarrassment or other.\u00a0\u00a0Risks to KPU include reputational harm and associated losses, remedies imposed by the Office of the Information and Privacy Commissioner of BC (\u201cOIPC\u201d) or other. FIPPA also\u00a0provides for\u00a0fines to be levied\u00a0in both\u00a0individuals\u00a0and organizations\u00a0for privacy offences.\u00a0<\/p>\n\n\n\n

Since all our students\u2019 information is personal under FIPPA, it is our responsibility as individuals and as an organization to protect it as much as possible. So how do we do this?  <\/p>\n\n\n\n

  • Use only KPU supported tools to ensure they have been appropriately reviewed for security and privacy. <\/li>
  • Choose tools that offer Canadian data residency, be careful some Canadian companies use US servers and data residency alone does not ensure FIPPA compliance. <\/li>
  • Contract negotiation as part of the purchase or subscription allows us to require measures from the vendor that address FIPPA compliance. <\/li>
  • Whenever students\u2019 PI is collected, whether by KPU or by a third-party vendor tool used by KPU (whether the use is optional or mandatory) a FIPPA notice will likely be required. <\/li>
  • if the PI is disclosed to anyone (I.e. other students; external parties) written consent from each individual is required; and <\/li>
  • If the PI is stored, accessed, or disclosed outside Canada, written consent from each individual is required, guidelines for use are necessary for some tools to ensure students are protected and the use of these tools by faculty is FIPPA compliant. <\/li><\/ul>\n\n\n\n

    In the next special edition blog on privacy concerns for teaching and learning, I will talk more about technology considerations. For additional support please contact tlcommons@kpu.ca<\/p>\n","protected":false},"excerpt":{"rendered":"

    There was a time when I, like many of you, had not considered the personal information that was being collected when using technology tools. My role in the teaching and learning Commons at KPU forced me to reconsider my laissez-faire attitude about such practices. It had not crossed my mind that student data and faculty…<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","iawp_total_views":12,"footnotes":""},"categories":[183,184,135,3],"tags":[189,187,68,180,130,191,185,188,186,190,137,60,129,46],"class_list":["post-684","post","type-post","status-publish","format-standard","hentry","category-privacy","category-teaching-and-learning","category-teaching-online","category-technology","tag-fippa","tag-instructor","tag-kpu","tag-kwantlen-polytechnic-university","tag-learning","tag-personal-information","tag-privacy","tag-privacy-protection","tag-professor","tag-security","tag-teacher","tag-teaching","tag-teaching-and-learning","tag-university"],"_links":{"self":[{"href":"https:\/\/dev.wordpress.kpu.ca\/tlcommons\/wp-json\/wp\/v2\/posts\/684","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dev.wordpress.kpu.ca\/tlcommons\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dev.wordpress.kpu.ca\/tlcommons\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dev.wordpress.kpu.ca\/tlcommons\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/dev.wordpress.kpu.ca\/tlcommons\/wp-json\/wp\/v2\/comments?post=684"}],"version-history":[{"count":1,"href":"https:\/\/dev.wordpress.kpu.ca\/tlcommons\/wp-json\/wp\/v2\/posts\/684\/revisions"}],"predecessor-version":[{"id":686,"href":"https:\/\/dev.wordpress.kpu.ca\/tlcommons\/wp-json\/wp\/v2\/posts\/684\/revisions\/686"}],"wp:attachment":[{"href":"https:\/\/dev.wordpress.kpu.ca\/tlcommons\/wp-json\/wp\/v2\/media?parent=684"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dev.wordpress.kpu.ca\/tlcommons\/wp-json\/wp\/v2\/categories?post=684"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dev.wordpress.kpu.ca\/tlcommons\/wp-json\/wp\/v2\/tags?post=684"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}