1. The employment relationship as the privacy laboratory Elizabeth Denham Information and Privacy Commissioner for B.C. Privacy, Law and the Contemporary Workplace Faculty of Law, Queen’s University November 22, 2013

3. The free market

6. @

7. Applies to 300,000 “organizations” Consent not necessary to collect, use or disclose personal information that is reasonably necessary to manage the employment relationship. Personal Information Protection Act

8. B.C. OIPC Orders F13-04 (UBC) & P12-01 (Schindler Elevator Corporation)

9. B.C. OIPC Orders F13-04 (UBC) & P12-01 (Schindler Elevator Corporation) GPS used to track vehicle location and monitor distance, speed, acceleration, idling time, on/off information. The employer argued information was about vehicles, not employees. The B.C. OIPC disagreed.

11. Commissioner determined the data is “personal information” Schindler & UBC both authorized to collect in the circumstances Employers inadequately notified employees – new notice required B.C. OIPC Orders F13-04 (UBC) & P12-01 (Schindler Elevator Corporation)

12. B.C. OIPC Orders F13-04 (UBC) & P12-01 (Schindler Elevator Corporation)

13. Personal Information and Protection of Electronic Documents Act (PIPEDA) Federal legislation

14. Wansink v. TELUS Communications Inc. (F.C.A.), 2007 FCA 21, [2007] 4 F.C.R. 368

15. If an employer is acting reasonably in the management of the employment relationship, the employer can rely on the implied consent of the employees. Wansink v. TELUS Communications Inc. (F.C.A.), 2007 FCA 21, [2007] 4 F.C.R. 368

17. Employers using social media to manage employment relationship could collect: Inaccurate information Excessive information Third-party information Risks of social media collection

19. B.C. OIPC Mediation Summary P11-01-MS Investigation of BC NDP use of social media The BC NDP requested social media passwords for all personal accounts held by leadership candidates.

20. “An organization may collect personal information only for purposes that a reasonable person would consider appropriate in the circumstances...” section 11, B.C. Personal Information Protection Act B.C. OIPC Mediation Summary P11-01-MS Investigation of BC NDP use of social media

21. Employment related record checks 2012: Published investigation report on the use of Criminal Record Checks by the B.C. Government 2013: Launched investigation of police information checks as employment screening tool (public & private sector)

22. Bring your own device (BYOD)

24. Employers and BYOD Adopt a BYOD policy, because employees may already be using devices at work Consider tech solutions that keep personal and work data separate Balance security considerations with employee privacy

25. Alberta Information and Privacy Commissioner v. United Food and Commercial Workers, Local 401 Latest Case: 2013 SCC 62

26. Image © Mark Yuen, Vancouver Sun

27. A successful employer-employee relationship is built on trust, collaboration and mutual respect. Privacy-invasive technologies can undermine that relationship. The bottom line:

28. www.oipc.bc.ca @BCInfoPrivacy