Protection of privacy and Canvas

Protection of privacy rights and responsibilities at SFU is administered according to the provisions of BC’s Freedom of Information and Protection of Privacy Act (the Act) and the University’s Information Policies, published in its Policy Gazette

SFU must comply with protection of privacy requirements under the Act, which specifies when and how the University, its employees, service providers and volunteers are permitted to collect, access, use, disclose, store and retain personal information.

By using the learning management system, you acknowledge that you read, understand and agree to the notifications and policies that are displayed or linked to on this page.

Why and how does SFU collect your personal information using Canvas? 

The personal information obtained through Canvas@SFU, the University’s learning management system, and external learning tools, is collected under the general authority of the University Act (R.S.B.C. 1996, c.468). It is related directly to and needed by the University to operate its academic programs and provide instruction. The information will be used for teaching, learning, assessing student academic performance and assigning grades. If students have any questions about the collection and use of this information please contact the instructor for your course.  If employees have any questions about the collection and use of this information please contact the head of your department. 

IT Services integrate learning tools within Canvas@SFU at the full system level that collect and store student and instructor personal data at SFU, inside Canada or outside Canada (e.g. Google Docs) only when the tool passes the External Learning Tool Privacy Impact Assessment Checklist. 

Instructors could use external learning tools that may or may not be integrated with their Canvas@SFU courses, which collect and store student and instructor personal data at SFU, inside Canada or outside Canada only when the tool passes the External Learning Tool Privacy Impact Assessment Checklist. 

Are you permitted to access personal information when using Canvas outside Canada? 

Authorized end users (i.e., instructors, students and administrators) can access the personal information within Canvas@SFU worldwide over the Internet. 

SFU employees: Disclosure to you outside Canada is authorized only if necessary to perform employment duties when you are temporarily travelling outside Canada.  In all other situations, access must be in Canada only. 

Students: By voluntarily accessing the learning management system from outside Canada, you are deemed to give SFU your consent to disclose your personal information to you when outside Canada.  

Where is personal information disclosed and stored when using Canvas? 

The Act establishes protection of privacy rules with which the University and its employees must comply as well as the companies we retain under contract to handle personal information on our behalf.

Personal information is to be stored and accessed only in Canada unless students and instructors know and give prior written permission to disclose and store their personal data outside Canada.

Personal information may be disclosed and stored elsewhere inside Canada by a supplier of educational technology and services only when: 1) SFU, through Procurement Services, retains the service provider under a contract that includes the University’s protection of privacy agreement (also referred to as a Privacy Protection Schedule) or 2) students and instructors know and give prior written permission. 

Where is Canvas@SFU data stored?

Student and instructor personal information is communicated using encrypted network transmission when users connect to the learning management system over the University’s information technology network. Personal data is stored on SFU servers located at the Burnaby campus except when using External Learning Tools (also referred to as external apps) that collect and store the data on servers controlled by the company supplying the educational technology and services.