Informed Consent FOIP & CASL

FOIP

As a general rule, the FOIP Act states that the university, as a public body, may use personal information only:

a. for the purpose for which the information was collected or compiled, or for a use consistent with that purpose. This purpose is described in the FOIP notification statement displayed to the individual when the information was initially collected; or
b. if the individual the information is about has identified the information and consented, in the prescribed manner, to the use.

Informed consent must specify to whom the personal information may be disclosed and how the personal information may be used. Generally, the form must be signed by the individual. In some instances verbal consent is sufficient; please contact the IPO if you would like more information.

The form available below is in the "prescribed manner" as required by FOIP, and is the IPO's recommended form to use in order to obtain an individual's informed consent to disclose his or her personal information.

Informed Consent for Disclosure of Personal Information form (Word 52 KB)

CASL (Canadian Anti-Spam Legislation)

When you set up a new process for collecting personal information, consider whether you will be using it to send commercial electronic message's (CEMs). If so, you must obtain a CASL compliant consent from the individual before you send the CEM (subject to some limited exceptions).

For further information about CASL requirements, please see the Office of General Cousel CASL information at this link:

Canadian Anti-Spam Legislation (CASL) Guidance

(You will have to scroll more than half way down the page.)

Information and Privacy Office
November 2022