INFO 200 Seminar week 10
.pdf
keyboard_arrow_up
School
University of British Columbia *
*We aren’t endorsed by this school
Course
200
Subject
Information Systems
Date
Dec 6, 2023
Type
Pages
4
Uploaded by AdmiralThunder5963
INFO 200 Seminar
-
Nehmat Mann
11123478
Privacy audit
How does the organisation collect personal information? (standard forms, customer
surveys, loyalty programs, online interactions, videos etc.)
-
Canvas collects information from students, instructors and other users through various
methods.
-
Registration information- collects information during the registration process, including
the user’s name, email and, in some cases, additional contact details.
-
User profiles- can provide details such as profile pictures
-
Course enrollment- canvas collects information about the course the student is enrolling
in
-
User Activity- may track user activity such as how many times you logged in etc.
Why does the organisation collect the personal information? Does the organisation need it
for function or activity?
-
Canvas collects personal information for the following reasons:
-
Academic administration: to manage courses, enrol students and track progress
-
Communication: for student-teacher and administrative communication
-
Identification and authentication: to ensure authorised process
Are the individuals made aware that the organisation is collecting their personal
information?
-
Yes, individuals are typically made aware of the organisation’s data collection through
privacy policies and consent mechanisms.
Does the organisation inform individuals of the purpose of collecting their personal
information?
-
They typically inform individuals of the purpose of collecting their personal information
through the institution’s own privacy policy and terms of use.
-
Canvas itself may also have its own privacy policy that outlines the general purposes of
data collection and use.
Does the organisation obtain consent from individuals before collecting or using their
personal information? If so, what processes are used to obtain consent?
-
Canvas typically relies on the educational institution using the platform to obtain consent
from individuals before collecting or using their personal information. The specific
processes and methods for obtaining consent can vary by institution. Consent may be
obtained during the registration process, through acceptance of terms of use, or by
requesting explicit permission for specific data usage. Canvas itself does not directly
handle the consent process but relies on the institution's policies and practices to do so.
Students and instructors should review their institution's policies and practices regarding
consent for the collection and use of personal information within Canvas.
How does the organisation use personal information? (for specific business functions, for
activities that solicit new businesses etc.)
-
Canvas uses personal information for educational functions, communication, user
identification, compliance, research, and analytics. It does not use personal information
for soliciting new businesses or unrelated commercial activities.
Does the organisation disclose personal information to anyone outside the organisation?
-
Canvas itself, as a platform, does not disclose personal information to external parties.
However, the disclosure of personal information may occur based on the policies and
practices of the educational institution using Canvas. Educational institutions may
integrate third-party tools or services into Canvas, and these integrations could involve
sharing personal information with those third parties. Students and instructors should
refer to their institution's privacy policy and be aware of any third-party integrations that
may affect the sharing of personal information.
Does the organisation make individuals aware of the intended uses and disclosures of their
personal information? If so, how are individuals informed?
-
Yes, organizations, including educational institutions using Canvas, typically make
individuals aware of the intended uses and disclosures of their personal information
through privacy policies and terms of use. Individuals are informed through these
policies, which are often accessible on the institution's website or within the Canvas
platform.
Is the personal information the organization holds, accurate, complete and up-to-date?
-
The accuracy, completeness, and up-to-date status of personal information held in Canvas
can vary depending on the policies and practices of the educational institution using the
platform. It's the responsibility of the institution and its users (students and instructors) to
ensure that personal information provided to Canvas is accurate and updated as needed.
Canvas itself does not independently verify or maintain personal information, as it relies
on the information provided by the institution and its users.
How does the organisation store personal information? (paper files, databases,audio files,
video files )?
-
Educational institutions using Canvas typically store personal information in digital
databases and servers, which are centralized and maintained by the organization's IT
department. These databases and servers are secure and designed to protect personal
information from unauthorized access. The storage of personal information is centralized
within the organization's network infrastructure, and it's not stored in physical cabinets or
spread across multiple physical locations within the institution. Digital storage provides
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help