The Privacy Office (University Secretariat) is responsible for ensuring organizational compliance with relevant legislation, acting as a source of advice, guidance, and policy direction to ensure McMaster complies with the Freedom of Information and Protection of Privacy Act (FIPPA), the Canadian Anti-Spam Legislation (CASL), and other relevant legislation.
Staff are working remotely and may be contacted via email. Staff will be responding to email on a priority basis between 8:30 am and 4:30 pm and will reply to emails as soon as possible. Mail will be received intermittently during the physical closure of the office.
What's new in the Privacy Community?
Check here for updates on privacy news and opportunities to grow your privacy awareness.
No, your company asking about vaccination status isn't an infringement of your privacy rights
Personal Health Information Protection Act (PHIPA)
The Personal Health Information Protection Act, 2004 is an Ontario law that governs the collection, use and disclosure of personal health information within the health sector. The object is to keep personal health information confidential and secure, while allowing for the effective delivery of health care. Under this legislation, persons and organizations that provide health care are collectively known as health information “custodians.
To request a confidential waste bin from Facility Services place an online service request or call ext. 24740. The service is bi-weekly and costs $14.00. Confidential Waste Bin distribution is managed by the Director, Custodial Services.
Eduroam provides roaming wireless network access for external students, staff, and faculty at partner institutions.
All McMaster faculty, staff, and students are invited to take the Primer on Privacy course. This self-directed course is available for self-registration through MOSAIC. Here are instructions onHOW TO REGISTER, and an FAQ. Please note that the course name is privacy. For issues with the course, please contact the Privacy Office
All University employees who have access to personal health information during their employment and are involved directly or indirectly in the provision of patient care, must complete mandatory training. If you aren’t sure if the training applies to you or your role, speak to your manager. This course is available for self-registration through MOSAIC. For issues with the course, please contact the Privacy Office