If your organization operates in British Columbia and uses online proctoring, the Personal Information Protection Act applies to you. PIPA is BC's provincial private-sector privacy law, and it governs how organizations collect, use, disclose, and retain personal information, including the identity and behavioral data that proctoring platforms collect from every test taker.

Unlike federal PIPEDA, which applies across most of Canada, PIPA is BC-specific legislation with its own requirements and its own Office of the Information and Privacy Commissioner (OIPC) for enforcement. Organizations operating in BC cannot assume PIPEDA compliance covers their PIPA obligations. The two frameworks are substantially similar but not identical.

This guide explains what PIPA requires, how it applies to online proctoring, and how Integrity Advocate is built to support your compliance obligations.

What Is PIPA and Who Does It Apply To?

The Personal Information Protection Act came into force in British Columbia on January 1, 2004. It applies to private-sector organizations operating in BC that collect, use, or disclose personal information in the course of their activities.

For organizations using online proctoring, PIPA applies to any personal information collected from BC-based test takers, including:

• Name and identity verification data
• Facial images and biometric confirmation
• Session recordings and behavioral monitoring data
• Device and browser activity during an assessment

The law places clear obligations on both the organization deploying the proctoring platform and the platform itself. Choosing a vendor that is not built with PIPA in mind creates compliance exposure for your organization.

What PIPA Requires

PIPA is organized around four core obligations that mirror the intent of federal privacy law while establishing BC-specific standards.

1. Collection of Personal Information

Organizations may only collect personal information that a reasonable person would consider appropriate in the circumstances. Collection must be limited to what is necessary for the identified purpose, and individuals must be notified of what is being collected and why before collection begins.

Integrity Advocate collects only the data required to verify identity and monitor assessment sessions. Test takers are informed of what data is being collected and for what purpose before their session begins, and consent is obtained as a documented step in the onboarding process.

2. Use of Personal Information

Personal information may only be used for the purpose for which it was collected, or for a directly related purpose the individual would reasonably expect.

Integrity Advocate uses session data exclusively for the purpose of assessment integrity. Data is not repurposed, analyzed for secondary uses, or shared beyond what is required to substantiate a specific finding. When a session is flagged, only the minimum information required to document the concern is shared with the organization.

3. Disclosure of Personal Information

Organizations may only disclose personal information with the consent of the individual or in specific circumstances defined by PIPA. Disclosure to third parties requires the same standard of care as the original collection.

Integrity Advocate does not sell, lease, or transfer personal data to any third party for commercial purposes. Session data is shared only with the organization that deployed the assessment, and only to the extent required for the review of flagged sessions.

4. Retention and Disposal of Personal Information

Personal information must not be retained longer than necessary to fulfill the purpose for which it was collected. Organizations must have a defined retention schedule and dispose of personal information securely.

Integrity Advocate deletes sensitive identity data, including facial images and government-issued ID, within 24 hours of session completion unless retention is required for an active dispute. Retention schedules are defined and documented, and disposal is handled securely.

Accuracy and the Case for Human Review

PIPA requires that personal information used to make decisions about individuals be as accurate and complete as possible. For online proctoring, this principle has direct implications for how session flags are handled.

Fully automated proctoring systems generate flags based on algorithmic pattern detection. If that flag is inaccurate, the decision made on the basis of it is inaccurate, and the organization is exposed both to a PIPA accuracy challenge and to a fairness complaint from the test taker.

Integrity Advocate addresses this through human review. Every flagged session is assessed by a trained reviewer before any outcome is recorded. That means the information your organization acts on reflects a reasoned judgment, not an automated signal, and is far more likely to meet PIPA's accuracy standard in the event of a challenge.

Security Safeguards

PIPA requires organizations to protect personal information using security measures appropriate to the sensitivity of the data. For biometric and identity data, that threshold is high.

Integrity Advocate uses 256-bit encryption in transit and at rest, stores data on AWS infrastructure in Montreal by default, and has maintained zero data breaches across 12 or more years of operation. The platform holds SOC 2 certification, providing independent verification of security controls.

Individual Rights Under PIPA

PIPA gives BC residents the right to access their personal information and to request corrections where information is inaccurate or incomplete. Organizations must respond to access requests within 30 business days.

Integrity Advocate proactively addresses this by notifying test takers by email after each completed and reviewed session. The notification details what information was retained and what conclusions were drawn, reducing the likelihood of formal access requests and creating a transparent record that supports both individual rights and organizational accountability.

The OIPC and Enforcement

The Office of the Information and Privacy Commissioner for British Columbia oversees PIPA compliance and has the authority to investigate complaints, conduct audits, and order organizations to take corrective action. The OIPC has been active in the technology and education sectors and has issued findings against organizations that failed to meet PIPA's standards for consent, collection limitation, and data security.

Organizations using non-compliant proctoring platforms carry real exposure. The liability does not rest solely with the vendor. If your platform collects more data than is necessary, fails to obtain meaningful consent, or retains data beyond its purpose, your organization is accountable.

Built for Privacy Across Jurisdictions

Integrity Advocate is designed to support compliance across multiple privacy frameworks simultaneously. Whether your organization operates under PIPA in BC, PIPEDA federally, GDPR for international learners, or FERPA for US-based education, the same foundational principles apply: collect only what is necessary, use it only for its stated purpose, protect it properly, and delete it when it is no longer needed.

That is not a compliance checklist. It is how the platform is built.

Want to see how Integrity Advocate supports your PIPA obligations in practice?
Book a Demo

{{post-cta}}

If your organization is a university, college, hospital, or designated agency in Ontario, the Freedom of Information and Protection of Privacy Act applies to every vendor you work with that handles personal information, including your online proctoring platform.

FIPPA has governed Ontario institutions since June 10, 2006. It establishes a uniform regulatory framework for how personal information is collected, used, disclosed, retained, and destroyed. For online proctoring, which collects identity data, session recordings, and behavioral information from learners, FIPPA compliance is not optional. It is a condition of operating within Ontario's public sector ecosystem.

This guide walks through FIPPA's seven key principles and explains exactly how Integrity Advocate meets each one.

What Is FIPPA and Who Does It Apply To?

The Freedom of Information and Protection of Privacy Act serves two purposes. First, it gives individuals the right to access information held by Ontario government institutions. Second, and more relevant to online proctoring, it protects the privacy of individuals by limiting how institutions and their service providers collect, use, and disclose personal information.

FIPPA applies to all Ontario government ministries and any agency, board, commission, corporation, or other body designated as an institution under the regulations. In practice, this includes Ontario universities, colleges, hospitals, and a broad range of publicly designated organizations.

When an Ontario institution uses an online proctoring platform, the vendor handling learner data becomes accountable to FIPPA standards. Choosing a vendor that does not meet those standards creates compliance risk for your institution.

Why FIPPA Compliance Matters for Online Proctoring

FIPPA places emphasis on Privacy by Design, meaning privacy protections must be built into information systems from the ground up, not layered on after the fact. For proctoring platforms, this means the architecture itself must reflect the principles of collection limitation, purpose restriction, and timely data destruction.

Organizations using proctoring vendors that collect more data than necessary, retain it longer than required, or share it without appropriate controls are exposed to FIPPA investigations, Information and Privacy Commissioner findings, and reputational risk with learners who have a right to know how their data is handled.

FIPPA's Seven Key Principles and How Integrity Advocate Meets Each One

1. Authority to Collect and Manner of Collection

FIPPA limits the collection of personal information to authorized activities and requires that collection come directly from the individual except in limited circumstances.

Integrity Advocate collects only what is required to verify a learner's identity and monitor their session. If a learner is not permitted to access other browser tabs during their assessment, Integrity Advocate monitors exactly that and nothing more. Other proctoring providers routinely collect browsing history, desktop file lists, and program inventories that go well beyond what any assessment requires.

The only data Integrity Advocate receives from sources other than the learner directly is the learner's first name, last name, and email address, which comes from the Learning Management System solely for the purposes of identity verification and session communication.

2. Notice Requirements

FIPPA requires that individuals be informed of the collection of their personal information before it occurs.

Integrity Advocate presents its privacy policy to every user at the start of every session. Users must actively accept the policy before any personal information is collected. The privacy policy and session instructions are available in dozens of languages to ensure that consent is genuinely informed, regardless of the learner's primary language.

3. Proper Use and Disclosure

FIPPA limits the use and controls the sharing of personal information to authorized activities only.

Integrity Advocate provides a full human review service specifically designed to limit what gets shared with client organizations. When a session produces no violations, no session media is shared. When a session is flagged, only the minimum information required to document the specific concern is shared, with unrelated personal information redacted. This is the opposite of how most proctoring platforms operate, where full session recordings are routinely handed over to institutions regardless of whether a violation occurred.

4. Accuracy

FIPPA requires that processes be in place to keep personal information accurate.

Integrity Advocate session findings represent a documented snapshot of what occurred during a specific assessment. Because findings are based on human review rather than automated algorithmic flags, the information recorded is assessed for accuracy before it becomes part of any record. Session data does not change over time, which eliminates the risk of drift or corruption that can affect systems relying on ongoing data updates.

5. Retention

FIPPA requires that individuals be able to obtain access to their own personal information for a defined period.

Integrity Advocate eliminates the need for learners to submit formal access requests by proactively notifying every user by email after their session is completed and reviewed. The notification details what information was retained beyond the session and what conclusions were drawn. Learners know exactly what is on file about them without having to ask.

6. Security

FIPPA requires that personal information be kept secure and confidential.

Integrity Advocate uses 256-bit encryption for all data in transit and at rest, stores data on AWS infrastructure in Montreal by default, and has maintained zero data breaches across 12 or more years of operation. The platform holds SOC 2 certification, providing independent third-party verification of security controls. Compliant user identification images and session media are deleted within 24 hours of session completion. Personal data that does not exist cannot be breached.

7. Disposal and Destruction

FIPPA requires that the disposal and destruction of personal information be authorized and secure.

Every piece of personal data collected by Integrity Advocate carries a programmatically applied time-to-live setting. When a session is complete, deletion occurs automatically and exactly as communicated to the learner. There is no manual process, no exception handling, and no risk of data persisting beyond its intended retention period.

Built for Ontario Institutions

FIPPA is one of several privacy frameworks that Ontario institutions need to navigate. Depending on the nature of your program and the location of your learners, PIPEDA, PIPA, GDPR, and FERPA may also apply. Integrity Advocate is built to support compliance across multiple frameworks simultaneously, with the same foundational Privacy by Design architecture underlying each.

For Ontario institutions specifically, Integrity Advocate provides the documentation, audit trail, and data handling practices your compliance and legal teams need to demonstrate that your proctoring vendor meets FIPPA's standards.

‍

{{post-cta}}

The Family Educational Rights and Privacy Act has governed student education records in the United States since 1974. For most of its history, compliance meant controlling access to paper files and transcripts. Today, it means carefully evaluating every technology platform that touches student data, including online proctoring.

If your institution is subject to FERPA and you use online proctoring, the data your proctoring vendor collects may constitute part of a student's education record. That makes vendor selection a FERPA decision, not just a technology decision.

This guide explains what FERPA requires, how it applies to online proctoring, and how Integrity Advocate is built to support your institution's compliance obligations.

What Is FERPA and Who Does It Apply To?

The Family Educational Rights and Privacy Act is a United States federal law that protects the privacy of personally identifiable information in students' education records. It applies to any educational institution that receives funding from the US Department of Education, which includes virtually all public schools, colleges, and universities.

FERPA gives students two primary rights. First, the right to access their own education records. Second, the right to control the disclosure of those records to third parties. Institutions that violate FERPA risk losing federal funding.

Under FERPA, an education record includes any record directly related to a student that is maintained by an institution or a party acting on its behalf. When a proctoring platform collects session data, identity images, and behavioral flags tied to a specific student, that data can fall within the definition of an education record.

How FERPA Applies to Online Proctoring

FERPA addresses proctoring vendors through the concept of a school official with legitimate educational interest. Institutions can share student education records with third-party vendors without explicit student consent if the vendor meets specific criteria:

• The vendor performs a service or function that the institution would otherwise perform itself
• The vendor is under the direct control of the institution with respect to the use and maintenance of education records
• The vendor uses the data only for the purposes for which the disclosure was made
• The vendor does not re-disclose the data without authorization

This means your proctoring vendor must operate as a legitimate school official under your institution's direction, not as an independent party free to use student data for its own purposes.

Proctoring vendors that use student session data for product development, algorithmic training, secondary research, or any purpose beyond delivering the proctoring service are operating outside what FERPA permits.

What FERPA Requires of Proctoring Vendors

For a proctoring vendor to support rather than undermine your FERPA compliance, they must be able to demonstrate the following:

Data Use Limitation

Student data collected during proctoring sessions must be used only for the purpose of delivering the proctoring service. It cannot be sold, transferred, or used for any secondary purpose without explicit institutional authorization.

Integrity Advocate uses session data exclusively for assessment integrity purposes. Student data is not sold, leased, repurposed for research, or used to train algorithms beyond the scope of the specific session it was collected for.

No Unauthorized Re-disclosure

FERPA prohibits vendors from re-disclosing student education records to third parties without authorization from the institution.

Integrity Advocate does not disclose session data to any third party beyond the institution that deployed the assessment. When a session is flagged, only the minimum information required to document the specific concern is shared. Data from sessions with no violations is not shared at all.

Collection Limitation

While FERPA does not specify collection limits as precisely as some privacy laws, the requirement that vendors act under institutional direction and use data only for authorized purposes creates an implicit obligation to collect only what is necessary.

Integrity Advocate collects only the data required to verify a student's identity and monitor their session. Browser history, desktop file contents, and program inventories are not collected. If a student is not permitted to access other tabs during their exam, Integrity Advocate monitors that and nothing more.

Data Security

Institutions are responsible for ensuring that the vendors they work with protect student data with appropriate security measures.

Integrity Advocate uses 256-bit encryption in transit and at rest, stores data on AWS infrastructure in Montreal by default, and has maintained zero data breaches across 12 or more years of operation. The platform holds SOC 2 certification, providing independent verification of security controls. Student identity images and session recordings are deleted within 24 hours of session completion for sessions with no violations.

Student Notification

FERPA gives students the right to know what information is maintained about them. Integrity Advocate proactively addresses this by sending every student an email after their completed and reviewed session, detailing what data was retained and what conclusions were drawn.

FERPA and the Annual Notification Requirement

FERPA requires institutions to notify students annually of their rights under the Act. If your institution uses online proctoring, that notification should include information about how proctoring session data is handled, how long it is retained, and what rights students have to access it.

Working with a proctoring vendor that provides clear, documented data practices makes this notification straightforward. Working with a vendor whose data practices are opaque or poorly documented creates a disclosure problem your institution has to solve on its own.

FERPA in the Context of AI-Based Proctoring

One area where FERPA compliance is increasingly relevant is the use of automated AI systems to make decisions about students based on session data. When an algorithm flags a student for suspected misconduct and that flag becomes part of the student's record, the accuracy of that flag matters under FERPA.

Integrity Advocate's human review process directly addresses this concern. Every automated finding is reviewed by a trained person before any conclusion is recorded. Students are not penalized based on an algorithm alone, and the information that enters any record reflects a reviewed, documented judgment rather than an automated output.

FERPA Is a Floor, Not a Ceiling

FERPA sets minimum standards for the protection of student education records. Institutions in states with stronger privacy laws, or those serving students subject to GDPR, PIPEDA, or other frameworks, need to meet the higher standard where applicable.

Integrity Advocate is built to support compliance across multiple frameworks simultaneously. The same Privacy by Design architecture that meets FERPA's requirements also supports PIPEDA, FIPPA, PIPA, POPIA, and GDPR, making it a consistent choice for institutions with a geographically diverse student population.

‍

{{post-cta}}