The CAPTURE Project’s collection, use, disclosure and retention of personal information is governed by the BC Freedom of Information and Protection of Privacy Act. It is subject to the independent oversight of the Information and Privacy Commissioner for British Columbia.
The platform will collect and store both de-identified and aggregate data to allow chronic disease prevention practitioners to manage their own interventions and evaluations. The platform will also provide access to the non-identifiable, aggregate data for comparisons across programs, organizations, and initiatives. Once the platform is more fully populated, protocols that allow access to data for research purposes will be developed.
CAPTURE does no direct collection of data; it acts as a secondary collector of data from data providers (practitioners and program managers). Data providers (called Data Stewards) contributing to the platform will remain the owners of their data and are responsible for its collection and use according to legislative requirements in their own jurisdiction. CAPTURE’s role is to act as a service provider/server host for the platform and CAPTURE repository, and to ensure appropriate and reasonable safeguards are in place to secure the data, the platform, the server, and backups.
In early 2010, the CAPTURE Project undertook a comprehensive scoping review that resulted in a plan for implementing a privacy, security and data sharing framework. This framework plan will guide the CAPTURE project team in making design, development and implementation decisions that ensure its commitment to meet or exceed legislative requirements, industry standards and best practices for privacy and security protection.
Key elements include:
- The adoption of the internationally-recognized 10 Fair Information Privacy Principles as the basis for the CAPTURE Project’s privacy and security policies and procedures;
- Establishing comprehensive information sharing and terms of use agreements;
- Identifying data holdings and the purposes for collection, use and disclosure;
- Ensuring that the appropriate administrative, technical and physical security safeguards are in place;
- Communicating CAPTURE’s privacy practices with its stakeholders, including the public.
The CAPTURE Project recognizes that achieving and maintaining excellence in its privacy and security practices is an ongoing process requiring attention on a day-to-day basis. Once the framework is implemented, the Project will monitor it and conduct reviews every two years to ensure that its policies and procedures are relevant, up-to-date and reflect current best practices.
For more information about the CAPTURE Project’s information, privacy, and security practices, please take the time to read the attached report or contact privacy@thecaptureproject.ca.
Attachments
Privacy, Security, and Data Sharing of Health Promotion Interventions and Evaluations: Key Learnings from The CAPTURE Project
