Privacy: What you need to know Elizabeth Denham Information and Privacy Commissioner for B.C. Professional Investigators’ Association of B.C. October 26, 2013
1.Overview of PIPA 2.The future of privacy enforcement
Freedom of Information and Protection of Privacy Act (1993) 2,900 “public bodies” Personal Information Protection Act (2004) 300,000 “organizations”
Facial Recognition Technology Automated Licence Plate Recognition (ALPR) BC Services Card
Public education and outreach
Who does PIPA apply to? 300,000 “organizations” in B.C. including: Corporations Charities Retailers Not-for-profits Political parties
What is “personal information” ? "personal information" means information about an identifiable individual and includes employee personal information but does not include (a) contact information (b) work product information
When can I collect, use, disclose? Collect personal information directly from the individual with their consent Collect only the amount and type of personal information you need Collect, use and disclose information only for “reasonable” purposes Personal Information Protection Act, sections 10(1), 11, 14, 17
Investigations and surveillance PIPA permits collection of personal information without consent in limited and specific circumstances
2. The future of privacy enforcement
Accountability.
Getting Accountability Right with a Privacy Management Program
Accountability in the public sector A new guidance document that reflects the unique needs of the public sector in British Columbia.
First steps
Next steps Plan Implement Audit