Launch of privacy and information security review
January 20, 2012
I'm pleased to let you know that that former BC Information and PrivacyCommissioner David Flaherty, an internationally-recognized expert in privacy issues, has agreed to lead the external review I have commissioned to examine the security of sensitive personal information at the University of Victoria. Information on Dr. Flaherty's appointment and the terms of reference for the review are being publicly released today.
The review will address the events leading up to the privacy breach and the university's subsequent response. In addition it will also examine the university's plans and measures to protect sensitive personal information and make appropriate recommendations.
At Dr. Flaherty's recommendation, the university is conducting an internal assessment as part of his review. The internal assessment will operate under Dr. Flaherty's guidance and will be led and coordinated by Prof. Jamie Cassels, QC, of UVic's Faculty of Law and former Vice-President Academic and Provost and Dean of Law at our university. Prof. Cassels will seek and receive input from members of the university community and will be able to call upon people with specific knowledge of existing policies, procedures and practices related to security matters.
Dr. Flaherty's review is expected to be completed within four months. The report will be public, although some associated material may remain confidential for reasons of security and personal privacy, or under the terms of BC's Freedom of Information and Protection of Privacy Act.
I know the last two weeks have been challenging and frustrating for our community and I would like to thank you for your cooperation and support. I would also like to acknowledge the hard work and dedication of all the frontline staff who have worked so hard to deal with the consequences of the theft.
All the best,
David H.Turpin, CM, PhD, FRSC
President and Vice-Chancellor