A privacy breach occurs when there is unauthorized access, collection, use, disclosure or destruction of identifiable personal information.
These activities are considered "unauthorized" if they occur outside of the legal authorities (allowances) provided under the FOIP Act [Sections 33 - 42]
Mount Royal University may only collect, use, disclose or dispose of personal information if there is a legal authority provided under the FOIP Act that allows the University to do so.
Procedurally, an individual who believes that their own personal information has been collected, used or disclosed in contravention of the Act may ask the Privacy Commissioner to review the matter.
Alternatively, the individual also has the option under the MRU Privacy Policy to report a breach concern directly to the University in order to (internally) investigate the matter.
To initiate an internal investigation process - the individual must submit their complaint (in writing) by completing Part 1 of the Privacy Breach Report. Additionally, the individual may forward pertinent documentation relevant to the concern directly to foip@mtroyal.ca
Upon receipt, the University will complete Part 2 of the Report as part of the investigation process in response to received Part 1 - submitted by the individual.
(*) If the matter is urgent - email directly to foip@mtroyal.ca
FOIP Notification Statement
Personal information collected by the MRU FOIP Office is collected under the authority of the FOIP Act - section 33(c). The collected information will be used to help mitigate harm and respond to privacy breaches. Your personal information is protected under the Act and can be reviewed upon request subject to the provisions under the Act. Questions about the collection, use and disclosure of your personal information can be directed to the MRU FOIP Office (Contact Info -
here)
Individuals are advised that Complainants have the right under section 65(3) of the FOIP Act to ask for a review by the Privacy Commissioner at any time in the process. Notably, the submitted complaint must also be in writing and (where applicable) be received by the Commissioner within 60 days of the University notifying the individual of a decision.
The contact information for the Privacy Commissioner is provided below:
Office of the Information and Privacy Commissioner of Alberta
Government of Alberta
Suite 2460, 801 - 6th Ave SW
Calgary, Alberta
T2P 3W2
(P): 1-888-878-4044
