Privacy & Risk

GenAI Tools and Privacy Impact Assessment (PIA)

Under British Columbia’s Freedom of Information and Protection of Privacy Act, a Privacy Impact Assessment (PIA) is required for university tools and initiatives that handle personal information. At UBC, PIAs are conducted on a case-by-case basis, with a focus on proactively mitigating privacy risks associated with information handling. Please consider this page and website as educational resources only, providing information without official endorsement.

The PIA for each tool varies with its use and for interim guidelines on use of GenAI tool usage at UBC, see Interim PIA Guidelines: Generative AI Tools. Guidance specific to instructors can be found through the Privacy Impact Assessments for GenerativeAI Instructional Use.


PIA Guidelines

The AI Tools at UBC Guidelines below list AI tools that have undergone PIA review by UBC’s Safety & Risk Services team. The PIA for each tool varies with its use and data collection; tools may have multiple PIAs. This list represents a subset of ongoing assessments. Tools covered include Microsoft 365 Copilot, Chat GPT, GitHub Copilot, and DALL-E. Tool uses cases can include content creation, analysis and summarization.

Please evaluate your specific needs before using an AI tool and consider if a PIA is required.


Privacy & Risk Guidance