
You can reach out to the specific University area that holds your personal information:
To find out what historical information the University may hold about your family member, visit the University of Toronto Archives.
If your family member has been deceased for less than 30 years, please submit a FIPPA request to access these records.
If you are responsible for administering an estate, you may be able to access personal emails sent or received from the UTMail+ account for the deceased person.
To make a request, please contact our office at privacy@utoronto.ca.
The University keeps information about you for a length of time defined by the University’s File Plan and record retention schedules. Please visit the University of Toronto Archives & Records Management Services for more information. The University keeps information about you for a length of time defined by the University’s File Plan and record retention schedules and then it is securely destroyed.
Look for the unsubscribe button at the bottom of the marketing email and follow the instructions.
You can contact the Privacy Office at privacy@utoronto.ca.
The University has numerous measures in place to ensure your information is secured and your privacy is protected.
Learn more about How the University Uses, Collects, and Protects Your Student Information.
No.
The University will require explicit consent from the student before any access can be granted to parents or guardians.
All information about students is their personal information.
Immediately report the incident to the following:
If possible, remotely wipe the device using device management tools if possible, such as Apple’s Find My iPhone or Microsoft’s Intune.
If you clicked on a link or opened an attachment in a suspicious email, immediately contact security.response@utoronto.ca for assistance and forward the suspicious email to report.phishing@utoronto.ca.
For more information, please visit Information Security.
If your emails, notes, chat messages, cell phone text messages are in your capacity as University staff or faculty member, then it is likely these records will be subject to FIPPA. For more information, please contact the Privacy Office at privacy@utoronto.ca.
Contact your Freedom of Information Liaison (FOIL) for next steps.
Personal information can only be shared internally on a ‘need to know’ basis. In other words, where it is necessary for the recipient to have the relevant personal information to provide services or otherwise conduct University business in accordance with their role at the University.
If you are unsure about whether the sharing of information is ‘necessary’, please contact the Privacy Office at privacy@utoronto.ca.
Under FIPPA, it is mandatory to complete a PIA where new personal information is being collected or there has been a change in how personal information is collected or used.
For more information, please visit Information Security (UTORid required).
The University has a general notice of collection which outlines the purposes for which personal information is collected and used. If you are collecting personal information for purposes not defined in the general notice of collection, you may require a separate, specific notice.
If the activity falls outside the purposes in the notice of collection and is an optional (i.e., not mandatory) activity, you may require a consent instead of a notice.
For assistance, please contact the Privacy Office at privacy@utoronto.ca.
No, unless you have express consent.
For assistance, please contact the Privacy Office at privacy@utoronto.ca.
The Privacy Office offers training through the Security Awareness Training platform.
Our office also provides FIPPA training. Please contact the Privacy Office at privacy@utoronto.ca for more information.
For information about records retention or records manage, please visit the University of Toronto Archives and Records Managements Services.
Generative AI tools can produce information that looks convincing but may be incorrect, fabricated, or misleading. It is important to verify the information, beware of the privacy and information-security risks, and be alert to misinformation.
Additionally, content created by Generative AI tools provided by the University of Toronto may be accessible by third parties through legal and statutory processes, including FIPPA. However, content created for the purpose of academic research is generally not subject to freedom of information requests.
For full guidance, best practices, and detailed explanations, please visit Information Security’s guidelines on using artificial intelligence intelligently.