Treasury Board of Canada Secretariat
www.tbs-sct.gc.ca
Site MapSite Map - PIA e-learning Tool
Overview Course
Course Outline
- What this course is about
- What you will learn in this course
- How the Privacy Impact Assessment (PIA) Training Program is structured
- The style of the course
- Some tips for learning On-Line
Introduction
- What will I learn in this module?
- So, what exactly is privacy?
- What's the recent history about privacy?
- Why is privacy such an important thing now?
- Are there any fundamental principle about privacy that I should know about?
- What is privacy all about in Canada?
- Module Summary
- Optional Self-Evaluation Quiz
Legislation/Policy
- What will I learn in this Module
- The Privacy Act
- Personal Information Protection and Electronic Documents Act (PIPEDA)
- The Policy on Privacy Impact Assessments (PIAs)
- The Privacy Impact Assessment Guidelines: A Framework to Manage Privacy Risk
- What Other Federal Policies or Pieces of Legislation Should I Keep in Mind?
- Is There Any Provincial Legislation or Policy That I Should Consider?
- Module Summary
- Optional Self-Evaluation Quiz
Defining PIAs
- What Will I Learn in this Module?
- So, What is a Privacy Impact Assessment?
- What Are Some of the Key Features of PIAs that I Should Know About?
- What are Some of the Benefits of PIAs and Why are They So Important?
- Module Summary
- Optional Self-Evaluation Quiz
Process Overview
- What Will I Learn in this Module?
- When Should I Think About Doing a PIA?
- What is the Process of Completing a PIA?
- Who's involved in the PIA process and when are they involved?
- Module summary
- Optional Self-Evaluation Quiz
Key Stakeholders
- What Will I Learn in this Module?
- How are Deputy Ministers and Other Heads of Institutions Involved in PIAs?
- What Does the Office of Privacy Commissioner (OPC) of Canada Do?
- How is the Treasury Board Secretariat Involved in the PIA Process?
- What are the Responsibilities of Different Departments and Agencies?
- Who is the PIA Team and What Do they Do?
- Module Summary
- Optional Self-Evaluation Quiz
Course Summary
Managing and Monitoring a PIA Course
Course Outline
- What This Course is About
- What You Will Learn in this Course
- How the Privacy Impact Assessment (PIA) Training Program is Structured
- The Style of the Course(s)
- Some Tips on Learning On-Line
Privacy Fundamentals
- What Will I Learn in this Module?
- The Concept of Privacy
- Canadian Privacy Legislation and Policy
- Module Summary
PIAs
- What Will I Learn in this Module?
- Defining PIAs
- Why Do A PIA?
- When to Do a PIA
- Key Stakeholders
- Module Summary
PIA Process
- What Will I Learn in this Module?
- What is the Process of Completing a PIA?
- PIA Process-Step One-Project Initiation
- PIA Process-Step Two-Data Analysis
- PIA Process-Step Three-Privacy Analysis
- PIA Process-Step Four-Privacy Impact Assessment Report
- The Path Forward
- PIA Project Checklist
- Module summary
Course Summary
PIA Assistant
Introduction
Assistant How-to
- Structure of the PIAA
- Navigating the structure of the Assistant
- Using the Assistant
- Completing your PIA or PPIA Report
Choosing Your Path
Determining The Requirement
PPIA Report
Overview
- PPIA Report - Overview - Introduction
- PPIA Report - Overview - Cover Page
- PPIA Report - Overview - Table of Contents
- PPIA Report - Overview - Document Change Control Table
- PPIA Report - Overview - Executive Summary
Introduction
- PPIA Report - Introduction - Rationale for a Preliminary PIA
- PPIA Report - Introduction - Report Objectives
Scope
Background
- PPIA Report - Project Background - Project Description
- PPIA Report - Project Background - Stakeholder Roles
Authorities
Personal Information
- PPIA Report - Description of Personal Information - Data Clusters
- PPIA Report - Description of Personal Information - Data Flow Description and Table
Privacy Risks
Security
PIA Plan
- PPIA Report - PIA Plan - Activities
- PPIA Report - PIA Plan - Assumptions
- PPIA Report - PIA Plan - Consultations
- PPIA Report - PIA Plan - Resource Requirements
Path Forward
PIA Report
Overview
- Introduction
- Project Flow
- Project Preparation
- Cover Page
- Table of Contents
- Document Change Control Table
- Executive Summary
Introduction
- Introduction - Report Objectives
- Introduction - Scope of the PIA
- Introduction - Reference Documentation
- Introduction - Participants
- Introduction - Legislation and Policies
- Introduction - Abbreviations Used in this Report
Project Proposal
Data Flow Analysis
- Data Flow Analysis - Introduction
- Data Flow Analysis - Business Flow Diagram & Description
- Data Flow Analysis - Data Flow Table(s)
Privacy Analysis
The Questionnaires
Questionnaire A
- Questionnaire A - For Federal Programs & Services Principle 1: Accountability for Personal Information
- Questionnaire A - For Federal Programs & Services Principle 2: Collection of Personal Information
- Questionnaire A - For Federal Programs & Services Principle 3: Consent
- Questionnaire A - For Federal Programs & Services Principle 4: Use
- Questionnaire A - For Federal Programs & Services Principle 5: Disclosure & Disposition of Personal Information
- Questionnaire A - For Federal Programs & Services Principle 6: Accuracy of Personal Information
- Questionnaire A - For Federal Programs & Services Principle 7: Safeguarding Personal Information
- Questionnaire A - For Federal Programs & Services Principle 8: Openness
- Questionnaire A - For Federal Programs & Services Principle 9: Individual Access to Personal Information
- Questionnaire A - For Federal Programs & Services Principle 10: Challenging Compliance
Questionnaire B
- Questionnaire B - Introduction
- Questionnaire B - Cross-Jurisdictional Program & Service Delivery Principle 1: Accountability
- Questionnaire B - Cross-Jurisdictional Program & Service Delivery Principle 2: Identifying Purposes
- Questionnaire B - Cross-Jurisdictional Program & Service Delivery Principle 3: Consent
- Questionnaire B - Cross-Jurisdictional Program & Service Delivery Principle 4: Limiting Collection
- Questionnaire B - Cross-Jurisdictional Program & Service Delivery Principle 5: Limiting Use, Disclosure and Retention
- Questionnaire B - Cross-Jurisdictional Program & Service Delivery Principle 6: Accuracy
- Questionnaire B - Cross-Jurisdictional Program & Service Delivery Principle 7: Safeguards
- Questionnaire B - Cross-Jurisdictional Program & Service Delivery Principle 8: Openness
- Questionnaire B - Cross-Jurisdictional Program & Service Delivery Principle 9: Individual Access
- Questionnaire B - Cross-Jurisdictional Program & Service Delivery Principle 10: Challenging Compliance
Privacy Analysis
Privacy Risk Management Plan
- Privacy Risk Management Plan - Introduction
- Privacy Risk Management Plan - Privacy Risk Mitigation
- Privacy Risk Management Plan - Summary Table
Communications Strategy
Path Forward
