What counts as personal information?

Any recorded information about an identifiable individual (names, emails, IDs, demographics, images, voice, etc.). Handle it under FIPPA and TRU policy.

Learn More

When you can use AI with personal information

Only within approved enterprise tools and repositories, with need‑to‑know access and retention rules.

For new automations/agents (e.g., Copilot Studio, Power Automate) that touch personal data, consult your area privacy lead for a Privacy Impact Assessment and apply privacy protection schedules to contracts/services as required.

Learn More

Consent & collection notices

  • If you newly collect personal information from the public (e.g., forms feeding an AI triage), provide a Collection Notice stating purpose, legal authority, and contact—per FIPPA’s rules—before collection.
Learn More
  • If something goes wrong (breach)….FIPPA requires breach notification to individuals and the Office of the Information & Privacy Commissioner when risk is significant; TRU must maintain a privacy management program. Follow internal reporting routes immediately.
Learn More