MENU

Thrive Health – Information collection and sharing

SFU is collecting self-declared COVID-19 vaccine information under the general authority of the University Act (R.S.B.C. 1996, c.468) and the Freedom of Information and Protection of Privacy Act (RSBC 1996, c.165) (“FIPPA”) s.26(a), (c), and (e).

As SFU’s service provider, Thrive is collecting, storing, and managing the self-declared COVID-19 vaccination statuses of the SFU community on SFU’s behalf. While the vaccine declarations are SFU records as defined by FIPPA, SFU has chosen to put safeguards in place to restrict SFU’s access to the information entered into Thrive. The information entered into Thrive will be kept secure and confidential from those in the SFU community. The information submitted will not be shared with one’s colleagues, peers, supervisors, professors, etc.

One designated employee from SFU will extract a list from Thrive of student or employee ID numbers of individuals who have not self-declared and create a list of their email addresses. Another list of email address will be created for those who self-declared either “not fully vaccinated” or “prefer not to disclose”, without identifying which of those options was declared. The lists will not contain names of individuals. A second designated SFU employee will then email the individuals on the lists, from the a thrive_health@sfu.ca email address, with reminders and information about declaring or about rapid-screening and vaccines.

In addition, SFU will have access to aggregate, non-personalized data about how the community has self-declared.

At a future date, should SFU collect additional information through Thrive, such as proof of vaccination to audit the self-declared status, a collection notice setting out the authority, purpose, and uses of that information will be shared with the community at that time, as required by FIPPA.

Should you choose not to use Thrive, SFU offers an alternative option of self-declaration through a fillable form emailed to covid19@sfu.ca. If this option is used, a designated SFU employee will have access to the personal information entered onto the form, but the information will otherwise be kept confidential from others at SFU. For those who declare either “not fully vaccinated” or “prefer not to disclose” on the form, the designated employee will add their student or employee ID number to the above-mentioned list extracted from Thrive, again not keeping track of individual names on that list.

SFU is required by FIPPA to retain for one year any personal information that is used by SFU “to make a decision that directly affects the individual”, for example, a decision related to planning the provision of services on campus, or a decision about whether an individual is emailed notices and reminders. These records will not be retained longer than necessary for their use or as required by law.

  1. Employee or student ID number for those who self-declared either “not fully vaccinated” or “prefer not to disclose”, without identifying which of those options was declared.
  2. Employee or student ID number of those who have not self-declared.
  3. Aggregate, non-personalized data about how the community has self-declared.

Two designated employees, one to extract a contact list, and one to send the emails.

The self-declaration is being collected for the purpose of enabling SFU to provide individuals with education and resources related to COVID-19 vaccinations and testing. Aggregate data will be used to plan the provision of, and monitor the safety of, in-person services across SFU campuses during the COVID-19 pandemic. The information will be used to support the application of SFU policies and health and safety plans and procedures.

Self-declaration information entered into Thrive will be kept secure and confidential from those in the SFU community. The information submitted will not be shared with one’s colleagues, peers, supervisors, professors, etc.

SFU is required by FIPPA to retain for one year any personal information that is used by SFU “to make a decision that directly affects the individual”, for example, a decision related to planning the provision of services on campus, or a decision about whether an individual is emailed notices and reminders. These records will not be retained longer than necessary for their use or as required by law.