West

1. Mitacs internships are funded by federal and provincial public funds, and therefore any information related to the internships should be considered public and must be made publicly available.

2. A student’s university email address and university mailing address are considered personal information.

3. Universities have copies of all submitted and approved program applications, so when someone from a university asks for internship lists including intern names and departments, it is ok if we send them the lists, no matter what purpose the list will be put to.

4. A research institute is interested in gender representation and country of origin of our interns, so they ask for relevant aggregated statistics for the last three years. Mitacs did not get consents to provide data to this institute, so we must get a new consent from the interns whose information is being provided.

5. Mitacs is legally required to take every possible measure to protect personal information.

6. Mitacs is required to provide individuals with the personal information we have collected about them.

7. Mitacs is required to let individuals know any time there has been a breach of their personal information.

8. It’s ok for Mitacs to collect information that we’re not sure exactly how we’re going to use, as long as we get a broad, general consent that could cover almost any purpose.

9. We must release the information from an academic supervisor’s exit survey to their intern if the intern requests it, because the survey contains personal information about the intern.

10. Mitacs requires that program participants complete surveys at the end of internships, and these surveys are hosted on a third-party site. Mitacs has no control over this site, and therefore is not responsible for personal information on that site.

11. Mitacs has decided to use a “Software as a Service” provider that is not in Canada. Some of the information we process through this provider is personal information collected from our program participants. Mitacs is therefore required to let the program participants know that their data may be sent out of the country.

12. Which of the following are considered personal information?

13. At what point are we required to collect consent to use someone’s personal information?

14. Who is Mitacs’ Chief Privacy Officer?