Can a service provider access from outside of Canada University information systems containing personal information?
Yes. Pursuant to sections 30.1(b) and 33.1(1)(p), personal information in identifiable form can be stored in a foreign country if temporary storage is necessary to the process of installing, implementing, maintaining, repairing, troubleshooting or upgrading an electronic system or equipment that includes an electronic system, or to recover data following the failure of an electronic system. However, storage must be temporary and only for the minimum time necessary to achieve those purposes noted above. With regard to data recovery, temporary storage is acceptable only after the system failure has occurred and only for as long as is necessary to restore the system. Please note, access from outside Canada should only be allowed as a means of last resort. To determine if there is no alternative to access from outside Canada, apply a “necessary test” or “escalation strategy.
Related Questions
- I am a systems integrator and/or IT service provider, and would like to become a partner? A: We encourage new distribution partnerships, please contact us today!
- I am a logistics service provider and I would like to use shipX to collaborate with my customers. Do customers need to install shipX on their systems?
- Can a service provider access from outside of Canada University information systems containing personal information?
