As a nonprofit or private organization in British Columbia, you are subject to the Personal Information Privacy Act (PIPA). PIPA does not prohibit personal information storage outside of Canada; however, you must still take measures to protect the information, even when it’s not in your custody. Please note – if your organization holds personal information that is under BC Housing’s control, you cannot store it outside of Canada.
If you decide to enter into an agreement or contract with a service provider that will store personal information outside of Canada, let’s say in the United States of America, that information will be in the custody of a US company, stored on US soil and subject to US law.
What it all comes down to is risk assessment, understanding the data (sensitivity) that is being stored, how the data is used, how it is secured and deciding how much oversight you need over the data. In order to help make your assessment, the following should be considered/actioned:
Understanding the data is key.
Remember that no matter where your data is stored, you are responsible for its protection, and cloud storage in Canada needs to be assessed closely, too.
Freedom of Information and Protection of Privacy Act (FOIPPA)
a. Public bodies are not permitted to store, disclose or access personal information outside Canada, except in the limited circumstances authorized in FOIPPA. This precludes the use of many cloud services. If you hold data that is under the control of a public body, you will need to consult with the public body before storing or disclosing their data outside Canada. Review your contracts/agreements carefully.
The Housing Provider Technology Support team is always available to help with questions and concerns. Reach out to us through our Contact page.
Resources:
Canadian Privacy Law, Cloud Computing and How it Applies to Nonprofits
Canada’s Federal and Provincial Privacy Law for Non Profits and Charities
Cloud Computing for Small and Medium-sized Enterprises document
Frequently Asked Questions About Cloud Computing
Cloud Computing in the BC Government
Please help us improve our website by providing your feedback
Please help us improve our website by providing your feedback