Information Management and Technology IM11 - Access and Privacy Program

Accessed:	2026-07-17
Purpose of series:	Records series documenting the access and privacy management program and compliance with legislation on access to information and privacy protection.
Scope and contents:	Includes (but is not limited to): procedures, guidelines, templates and forms, privacy notices, Personal Information Inventory, tracking and resolution of privacy breaches, privacy consultations and advice internal to the university, supporting documentation and related correspondence.
Cross reference:	Templates and forms see: Administration - Templates and Forms (AD80) Creation of new protocols, procedures and guidelines see: Governance - Policies, Protocols and Procedures (GV30) Investigation of privacy breaches see: Information Management and Technology - Privacy Incidents (IM13) Privacy Impact Assessments (PIA), see: Information Management and Technology - Assessments (IM14)
Exceptions:	For FOIPOP Request see: Information Management and Technology - Access Request (IM12)

Primary offices:	Privacy Office
Primary office retention trigger:	Superseded / Obsolete
Primary office disposition:	Transfer to University Archives
Primary office retention period:	5 years
Primary office retention instructions:	S/O= Activity completed, approved/final versions revised, updated,or discontinued. Once activity completed, or records are approved, final or versions are revised, updated,or discontinued retain for 5 additional years, then transfer to the University Archives for selective retention.

Secondary offices:	N/A
Secondary office retention trigger:
Secondary office disposition:
Secondary office retention period:
Secondary office retention instructions:

Retention rationale:

Expected operational use

Vital records	Electronic systems	Personal information	Official media
Yes	NAS, SharePoint, Legal Files	No	Paper, Electronic

Approval date:	Last updated:	Edited by:	Security classification:
2023-01-27	2026-06-29 17:09:56	laheyd	Internal

Notes: