“Patients often have to give intimate access to their bodies to the health-care professional. That makes privacy and confidentiality pretty close to ultimate values in health-care ethics,” he said.

“Any violation of that is extremely serious.”

To read the entire article, please follow the link to The Winnipeg Free Press. 

The internet is full of data about you. Do you know where it is, and who can see it? Every time you download an app, check in on a Google Map or catch a Pokémon, personal information about you is created and retained. Do you know what that information consists of, and who has access to it?

Privacy means the right of an individual to seclude themselves, or information about themselves, from others and the right to share information about themselves selectively.

We often choose to share information about ourselves in return for a benefit or service. We have the right to share our information, but also the responsibility to ensure we understand what we are sacrificing, and how our information is being used or shared.

What can you do to mark Data Privacy Day?

1. Review the privacy settings on all of your social media accounts.
2. Use strong passwords for all of your accounts, and do not use the same password for multiple accounts.
3. Read the permissions applications request when you install apps.
4. Think before you post, not only about your own privacy, but also about the privacy of your friends and family.

Remember, information security starts with you!

On a wider scale, the University also works to protect the privacy of members of our community and maintain the security of the information intrusted to us.

Protect the information, identity and privacy of others and become educated about privacy resources available at the University of Manitoba.

Under the provincial privacy legislation, The Freedom of Information and Protection of Privacy Act (FIPPA) and The Personal Health Information Act (PHIA), the University of Manitoba has an Access and Privacy Office that facilitates the University’s compliance with the legislation.

Services provided by the Access and Privacy Office:

• Guidance to support University compliance with access and privacy legislation
• Coordination of University responses to access to information requests
• Leadership and support of the University’s records management program
• Privacy training programs
• Privacy breach investigations
• Privacy risk assessments on new and existing information management systems

See more at the Access and Privacy Office website.

Additionally, there is the Information Security and Compliance unit within Information Services and Technology (IST). Their goal is to maintain and enhance the security and integrity of information, computing resources and technology at the UM.

Know what policies are in place at the University of Manitoba.

A privacy policy governs how the institution collects, processes, stores, and deletes personal information.

University of Manitoba Website Privacy Statement
Access and Privacy Policy and Procedures

The data classification guideline governs how the institution organizes the data it interacts with and what rules are in place for processing it.

Data Security Classification Guidelines

An information security policy articulates how the institution governs and prioritizes information security activities.

Information Security & Compliance Policies and Procedures

Collect and use only the minimum amount of personal information for an authorized purpose.

And only provide access to personal information to the minimum amount of people who need to know for an authorized purpose.

Only use the information that has been collected for its intended purpose.

If you need to use the information for another reason, check with Access and Privacy Office and refer to applicable policies.

Destroy or de-identify personal information when you no longer need it.

The University has a comprehensive records management program that determines the appropriate length of time that information needs to be maintained before destruction or transfer to Archives. 

Check out our Common Records Schedules for University administrative records. Contact the Access and Privacy Office if your unit has records that fall outside of the Common Records Schedules.

According to the Canada Business Network website, “There are many social engineering tactics, but the basic idea is the same for all: a hacker will pretend to be someone they are not, and will try to trick or bully someone into giving away sensitive information that the hacker needs to carry out their attack.”

Technology makes manipulation through phishing easy. Setting up and operating a phishing attack is fast, inexpensive and low risk: any cybercriminal with an email address can launch one.

According to Verizon’s 2017 Data Breach Investigations Report, the education sector saw a rise in social engineering–based attacks. Students, staff, and faculty all lose when personal data and research are disclosed to unauthorized parties.

Phishing played a part in more than 40 per cent of these breaches. Knowing what you’re up against can help you be more secure in your online life. 

Here are the six signs of a suspicious email:

1. Stranger danger: A sender address that does not match the sender name
2. No John Hancock: A signature that is overly generic
3. Hover to discover: Mouse over links in email to reveal their true URL. If the name and the URL do not match, delete the email.
4. Do not open unexpected attachments: They are a cybercriminal’s #1 choice for spreading malicious software.
5. Trust your instincts: Does that email feel ‘off’ in some way? It probably is. Forward it to spam[at]umanitoba[dot]ca to confirm the message.
6. Is it urgent? Slow down. An “IMPORTANT MESSAGE” may be a phishing attempt. Cybercriminals want you to do what you’re told, when you’re told. Think before you click.

If an email you’ve received contains two or more of the indicators listed above, delete it or forward the message to spam[at]umanitoba[dot]ca.

For more information about phishing attacks, visit the Information Security and Compliance web page at http://umanitoba.ca/computing/ist/security/phishing.html.

You exist in digital form all over the Internet — your digital footprint includes email and social media accounts, health and banking records, and more — it is essential to ensure that the “digital you” matches what you are intending to share and that the information you need to protect from unauthorized users is secured appropriately.

Here are some steps you can take to protect your online information, identity, and privacy.

• Use a unique password for each site. Hackers often use previously compromised information to access other sites. Choosing unique passwords keeps that risk to a minimum.
• Keep your operating system current by accepting the latest updates. Hardware and software vendors regularly release patches for system flaws that can be exploited by malicious programs.
• Know what you are sharing. Always be cautious about what you post publicly.
• Check your privacy settings on all of your social media accounts. You can even use a wizard to walk you through the settings.
• Guard your date of birth and telephone number. These key pieces of information are used for verification, and you should not share them publicly. If an online service or site asks you to share this critical information, consider whether it is important enough to warrant it.
• Keep your work and personal presences separate. Because your employer has the right to access your email account, you should use an outside service for private emails. This also helps you ensure uninterrupted access to your private email and other services if you switch employers.
• There are no true secrets online. Use the billboard test: Would you be comfortable with everyone reading a message or post? If not, don’t share it.

Don’t stop here! Keep what’s private, private by reviewing the links below for more information about how and why:

• Visit the U of M’s Access and Privacy website to understand the University’s obligation to protecting your personal information.
• Explore three reasons to care about your privacy in a university setting: Read the article “I have nothing to hide. Why should I care about privacy?”
• Download the “STOP. THINK. CONNECT.” Tip Sheet: Using Public Computers & Wireless Networks.

Remember, Information security starts with you!

Visit the IST website for more about Information Security and Compliance at the U of M.