Every employee of Kwantlen Polytechnic University needs to have a basic understanding of FIPPA, including employees of third party service providers (all of whom may collect, use or disclose personal information) in order to:
Manage records and requests for information in compliance with Kwantlen policy and the legislation, ex.: when notified of an access request, employees must not destroy any responsive records.
Protect the privacy of students and employees by exercising reasonable security practices around the storage and access of personal information.
Understand that individuals have a general right to access and if necessary, correct, records pertaining to their personal information.
Retain records for at least one year if the record contains information used to make a decision that directly affects an individual, but longer if directed to do so by the KPU Records Retention Schedule.
Give the public access to Kwantlen records following FIPPA's informal and formal request procedures.
Resolve complaints about possible unauthorized collection, use or disclosure of an individual's personal information and inform complainants of their right to make a complaint with the BC Office of Information and Privacy Commissioner.