Privacy Management Program

Program Overview

In accordance with the directions of the minister responsible for the Freedom of Information and Protection of Privacy Act (FIPPA), the Office of the University Counsel has published information about UBC's Privacy Management Program, highlighting practical and operational controls for privacy functions across business units and the university. We are all responsible and accountable for following the program.

The program components include internal policies, standards, procedures, guidelines, and other privacy-related processes, such as the process of conducting privacy impact assessments, handling privacy breaches, and privacy awareness and education activities.

Looking to the Future

It's not just about policy and compliance

The responsibility for monitoring UBC’s privacy management program is held by UBC’s Privacy and Information Security Management (PrISM) program, which is a collaborative cross-portfolio initiative operated jointly by the Office of the University Counsel, Safety & Risk Services (SRS), and the Office of the CIO. The PrISM SRS team continually monitors UBC’s privacy management program and makes recommendations to improve the effectiveness of the program.

The program framework is anticipated to expand to demonstrate long-term strategic planning and to meet the demands of other regulatory and compliance functions as well as organizational changes.