In February, ERAC provided an update to advise that Microsoft is unable to restrict Office 365 data from transiting outside of Canada on its way to Canadian end points. Additionally, Microsoft has confirmed that current and future functionality that runs within the MS365 A3 applications, such as spell checker tools, may process data outside of Canada.
The MS365 A3 Privacy Impact Assessment template with sample consent form has been revised to reflect these circumstances. The revised PIA template is now available for you to customize on the ERAC website: pia.bcerac.ca.
As all software products and services are subject to change and each district is unique in its use of these products, we suggest you take this opportunity to review your district’s processes and consent forms.