Messaging Services PIA - PIA and ISA Completion

[bspeersbcgov]

Describe the issue The tool GC Notify requires an Information Sharing Agreement (ISA) and Privacy Impact Assessment (PIA).

Additional context All ISAs require a Privacy Impact Assessment (PIA). Following the new PIA process, this PIA will emphasize the process as a whole rather than the individual tool, and thus should be applicable to a wider-range of tools.

How does this benefit the users of our platform? Users of our platform can make use of this messaging PIA for other messaging tool applications, although an additional in-person assessment will be necessary to ensure these new tools meet the PIA requirements. The PIA will also be useful as a template for a future Common Components PIA.

Definition of done Completed PIA signed and ready for final signature including all necessary edits to the ISA and PIA drafts.

Deliverables

• [x] Develop final draft with Ministry Privacy Officer (MPO)
• [x] Submit draft to Corporate Privacy Office (CPO)
• [x] Meet regularly with CPO on PIA and ISA
• [x] Edit PIA and ISA as needed through review process
• [ ] Agreement review by CPO contract review
• [ ] Legal review process
• [ ] Revisions of ISA by Federal Government
• [ ] Collect program area signatures
• [ ] Submit for final signature

[bspeersbcgov]

Process stalled by legal review process. Require additional levels of assessment (added to this ticket today)