Privacy impact assessments
Subject to the Privacy Act, NSERC is committed to ensuring that the protection of privacy is a fundamental consideration in the administration of its programs and activities that collect, use, disclose, retain and dispose of personal information. The Directive on Privacy Practices and related Standard on Privacy Impact Assessment is one of several tools designed to uphold this commitment.
The directive provides a framework for conducting privacy impact assessments (PIAs) by evaluating the impact of Universities and Colleges’ activities on the personal information under its control, and developing solutions to mitigate identified privacy risks. PIAs help institutions prevent or address privacy risks. They also promote fully informed policy, program and system design choices.
The directive requires that a PIA be documented, published, and maintained for all federal programs and services that may impact privacy rights. Below, is a list of summaries of the PIAs that NSERC has completed, either independently or in collaboration with other institutions.