If your organization delivers online proctoring or participation monitoring in Canada, PIPEDA applies to you. The Personal Information Protection and Electronic Documents Act governs how the private sector collects, uses, and discloses personal information, and online proctoring sits squarely within its scope.

This guide draws from Integrity Advocate's PIPEDA compliance brief to explain exactly how IA's platform meets each of the 10 fair information principles, so your organization can deploy online proctoring with confidence that your privacy obligations are covered.

What PIPEDA Covers and Who It Applies To

PIPEDA became law on April 13, 2000, and applies to organizations' commercial activities across most of Canada. Alberta, British Columbia, and Quebec have substantially similar provincial privacy laws that apply instead, though PIPEDA continues to govern interprovincial and international transfers of personal information. For healthcare information, Ontario, New Brunswick, Newfoundland, and Labrador are also subject to similar provincial legislation.

For online proctoring specifically, PIPEDA applies to any personal information collected from test takers during identity verification or session monitoring, including images, behavioral data, and session recordings.

Why PIPEDA Compliance Matters for Online Proctoring

The impact of PIPEDA on online education services is direct. Organizations are accountable for the personal data they hold, including documentation of what data exists, why it is retained, who has access to it, and how it is protected.

PIPEDA also places emphasis on Privacy by Design, meaning privacy protections must be built into information systems from the start, not added as an afterthought. For proctoring platforms, this means the way data is collected, processed, and deleted needs to be addressed at the architecture level, not the policy level alone.

The 10 PIPEDA Principles and How Integrity Advocate Meets Each One

1. Accountability

PIPEDA requires organizations to establish a privacy management program and designate a person responsible for compliance.

Integrity Advocate's entire platform is built around protecting individual privacy while maintaining assessment integrity. This includes recognizing what constitutes personal information, minimizing collection, limiting use, deleting data as soon as it is no longer required, restricting access, and ensuring full transparency with test takers.

2. Identifying Purposes

Organizations must identify and document why personal information is being collected before or at the time of collection.

Integrity Advocate requires informed consent from each test taker through a privacy policy that explains specifically why their information is being requested and how it will be used and deleted.

3. Consent

Consent under PIPEDA must be meaningful. People must understand what they are agreeing to.

Integrity Advocate provides privacy statements and policies in plain language and in over 70 languages, so every test taker can give genuine informed consent before their session begins, regardless of their primary language.

4. Limiting Collection

Only the personal information required to fulfill a legitimate identified purpose should be collected.

Integrity Advocate is designed to minimize what it collects. For example, the platform monitors whether a user accesses other browser tabs without recording which tabs or pages were visited. On return visits, users can be verified biometrically against a prior confirmed image, eliminating the need to present government-issued ID again.

5. Limiting Use, Disclosure, and Retention

Personal information must only be used for the purpose for which it was collected, retained only as long as necessary, and not disclosed unnecessarily.

Integrity Advocate operates as an intermediary between the organization and the test taker's personal data, similar to how a payment processor protects both parties in a transaction. When a session is flagged, only the test taker's image and the minimum number of images required to substantiate a rule violation are shared with the organization. Data from fully compliant sessions is not disclosed. Integrity Advocate does not transfer or provide access to all personal information collected during a session.

6. Accuracy

Organizations must minimize the possibility of using incorrect information when making decisions about individuals.

Integrity Advocate uses AI in the review of sessions, but every automated finding requires human review and verification before any conclusion is recorded. This ensures that decisions about test takers are based on accurate, contextually reviewed information rather than algorithmic flags alone.

7. Safeguards

Personal information must be protected with security appropriate to its sensitivity.

Integrity Advocate uses 256-bit encryption in transit and at rest, stores data on AWS infrastructure in Montreal by default, and holds SOC 2 certification. The platform has maintained zero data breaches across 12 or more years of operation.

8. Openness

Organizations must make their privacy policies and practices readily available.

Integrity Advocate's privacy practices are documented and accessible to both client organizations and test takers. Organizations deploying Integrity Advocate can direct test takers to clear privacy information before any session begins.

9. Individual Access

Individuals have the right to know what personal information an organization holds about them and to have inaccurate information corrected.

Integrity Advocate proactively addresses this by sending each test taker an email after their session is completed and reviewed. The email details what information was retained and what conclusions were drawn, eliminating the need for test takers to make a formal request.

10. Challenging Compliance

Organizations must have a straightforward complaint handling and investigation process.

The post-session email creates a direct and transparent channel for test takers to raise concerns and have records corrected where required. This approach supports both the spirit and the letter of PIPEDA's challenge principle.

Privacy by Design in Practice

What separates Integrity Advocate from most proctoring platforms is that privacy is not a compliance layer added on top of the product. It is built into the architecture. Data minimization, deletion timelines, restricted disclosure, and human review in place of purely automated decisions are not policies written after the fact. They are product decisions made from the start.

That is what PIPEDA's Privacy by Design principle requires. And it is what your organization needs from a proctoring partner when your learners' data is on the line.

Download the Full PIPEDA Compliance Brief

For a complete breakdown of how Integrity Advocate meets each PIPEDA principle, including the full compliance table, download the official compliance brief.

Download the PIPEDA Compliance Brief →

Ready to see how it works in practice?
Book a Demo →

{{post-cta}}

The Family Educational Rights and Privacy Act has governed student education records in the United States since 1974. For most of its history, compliance meant controlling access to paper files and transcripts. Today, it means carefully evaluating every technology platform that touches student data, including online proctoring.

If your institution is subject to FERPA and you use online proctoring, the data your proctoring vendor collects may constitute part of a student's education record. That makes vendor selection a FERPA decision, not just a technology decision.

This guide explains what FERPA requires, how it applies to online proctoring, and how Integrity Advocate is built to support your institution's compliance obligations.

What Is FERPA and Who Does It Apply To?

The Family Educational Rights and Privacy Act is a United States federal law that protects the privacy of personally identifiable information in students' education records. It applies to any educational institution that receives funding from the US Department of Education, which includes virtually all public schools, colleges, and universities.

FERPA gives students two primary rights. First, the right to access their own education records. Second, the right to control the disclosure of those records to third parties. Institutions that violate FERPA risk losing federal funding.

Under FERPA, an education record includes any record directly related to a student that is maintained by an institution or a party acting on its behalf. When a proctoring platform collects session data, identity images, and behavioral flags tied to a specific student, that data can fall within the definition of an education record.

How FERPA Applies to Online Proctoring

FERPA addresses proctoring vendors through the concept of a school official with legitimate educational interest. Institutions can share student education records with third-party vendors without explicit student consent if the vendor meets specific criteria:

• The vendor performs a service or function that the institution would otherwise perform itself
• The vendor is under the direct control of the institution with respect to the use and maintenance of education records
• The vendor uses the data only for the purposes for which the disclosure was made
• The vendor does not re-disclose the data without authorization

This means your proctoring vendor must operate as a legitimate school official under your institution's direction, not as an independent party free to use student data for its own purposes.

Proctoring vendors that use student session data for product development, algorithmic training, secondary research, or any purpose beyond delivering the proctoring service are operating outside what FERPA permits.

What FERPA Requires of Proctoring Vendors

For a proctoring vendor to support rather than undermine your FERPA compliance, they must be able to demonstrate the following:

Data Use Limitation

Student data collected during proctoring sessions must be used only for the purpose of delivering the proctoring service. It cannot be sold, transferred, or used for any secondary purpose without explicit institutional authorization.

Integrity Advocate uses session data exclusively for assessment integrity purposes. Student data is not sold, leased, repurposed for research, or used to train algorithms beyond the scope of the specific session it was collected for.

No Unauthorized Re-disclosure

FERPA prohibits vendors from re-disclosing student education records to third parties without authorization from the institution.

Integrity Advocate does not disclose session data to any third party beyond the institution that deployed the assessment. When a session is flagged, only the minimum information required to document the specific concern is shared. Data from sessions with no violations is not shared at all.

Collection Limitation

While FERPA does not specify collection limits as precisely as some privacy laws, the requirement that vendors act under institutional direction and use data only for authorized purposes creates an implicit obligation to collect only what is necessary.

Integrity Advocate collects only the data required to verify a student's identity and monitor their session. Browser history, desktop file contents, and program inventories are not collected. If a student is not permitted to access other tabs during their exam, Integrity Advocate monitors that and nothing more.

Data Security

Institutions are responsible for ensuring that the vendors they work with protect student data with appropriate security measures.

Integrity Advocate uses 256-bit encryption in transit and at rest, stores data on AWS infrastructure in Montreal by default, and has maintained zero data breaches across 12 or more years of operation. The platform holds SOC 2 certification, providing independent verification of security controls. Student identity images and session recordings are deleted within 24 hours of session completion for sessions with no violations.

Student Notification

FERPA gives students the right to know what information is maintained about them. Integrity Advocate proactively addresses this by sending every student an email after their completed and reviewed session, detailing what data was retained and what conclusions were drawn.

FERPA and the Annual Notification Requirement

FERPA requires institutions to notify students annually of their rights under the Act. If your institution uses online proctoring, that notification should include information about how proctoring session data is handled, how long it is retained, and what rights students have to access it.

Working with a proctoring vendor that provides clear, documented data practices makes this notification straightforward. Working with a vendor whose data practices are opaque or poorly documented creates a disclosure problem your institution has to solve on its own.

FERPA in the Context of AI-Based Proctoring

One area where FERPA compliance is increasingly relevant is the use of automated AI systems to make decisions about students based on session data. When an algorithm flags a student for suspected misconduct and that flag becomes part of the student's record, the accuracy of that flag matters under FERPA.

Integrity Advocate's human review process directly addresses this concern. Every automated finding is reviewed by a trained person before any conclusion is recorded. Students are not penalized based on an algorithm alone, and the information that enters any record reflects a reviewed, documented judgment rather than an automated output.

FERPA Is a Floor, Not a Ceiling

FERPA sets minimum standards for the protection of student education records. Institutions in states with stronger privacy laws, or those serving students subject to GDPR, PIPEDA, or other frameworks, need to meet the higher standard where applicable.

Integrity Advocate is built to support compliance across multiple frameworks simultaneously. The same Privacy by Design architecture that meets FERPA's requirements also supports PIPEDA, FIPPA, PIPA, POPIA, and GDPR, making it a consistent choice for institutions with a geographically diverse student population.

‍

{{post-cta}}

Online proctoring collects sensitive personal information — names, government-issued ID, facial images, behavioral data. That means any organization using a proctoring platform in Canada isn't just making a technology decision. They're making a privacy decision. And under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), that decision carries real accountability.

This guide breaks down what PIPEDA requires, how it applies to online proctoring specifically, and how Integrity Advocate is built to meet every one of its 10 principles so your program can operate with confidence.

What Is PIPEDA and Who Does It Apply To?

PIPEDA is Canada's federal private-sector privacy law. It governs how organizations collect, use, and disclose personal information in the course of commercial activity. For educational institutions, certifying bodies, and training providers using online proctoring, PIPEDA applies to any personal data collected from test takers, including biometric data, session recordings, and identity verification images.

Non-compliance isn't just a legal risk. It's a trust risk. When test takers don't trust how their data is handled, confidence in your program erodes, and that's a problem no assessment result can fix.

The 10 PIPEDA Principles and How Integrity Advocate Meets Each One

PIPEDA is organized around 10 fair information principles. Here's how Integrity Advocate addresses each:

1. Accountability

An organization is responsible for the personal information under its control. Integrity Advocate maintains a clearly defined data governance structure and designates responsibility for PIPEDA compliance internally. Clients receive documentation to support their own accountability obligations.

2. Identifying Purposes

The purposes for collecting personal information must be identified before or at the time of collection. Integrity Advocate collects only the data required to verify identity and monitor assessment sessions, nothing more. Collection purposes are communicated clearly to test takers before any session begins.

3. Consent

Individuals must give meaningful consent for the collection, use, or disclosure of their personal information. Test takers are informed of what data is collected and why before they begin, and consent is obtained as part of the session onboarding process.

4. Limiting Collection

Personal information collected must be limited to what is necessary. Integrity Advocate follows a minimal data collection model. Sensitive data, including facial images and government-issued ID, is deleted within 24 hours of session completion unless retention is required for dispute resolution.

5. Limiting Use, Disclosure, and Retention

Data must not be used or disclosed for purposes other than those for which it was collected, and must be retained only as long as necessary. Session data is used solely for the purposes of assessment integrity. Integrity Advocate does not sell, share, or repurpose personal data for any secondary use.

6. Accuracy

Personal information must be as accurate, complete, and up-to-date as necessary. Integrity Advocate's human review process ensures that session flags are assessed by a trained reviewer, not an algorithm alone, before any outcome is recorded. This reduces the risk of inaccurate findings based on automated misclassification.

7. Safeguards

Personal information must be protected by appropriate security safeguards. Integrity Advocate uses 256-bit encryption in transit and at rest, stores data on AWS infrastructure in Montreal by default, and has maintained zero data breaches across 12+ years of operation.

8. Openness

Organizations must make their privacy policies and practices readily available. Integrity Advocate's privacy practices are documented and available to clients and test takers. Organizations deploying Integrity Advocate can point test takers to clear, accessible privacy information before their session begins.

9. Individual Access

Individuals have the right to access their personal information held by an organization. Integrity Advocate supports client organizations in responding to data access requests in accordance with PIPEDA requirements.

10. Challenging Compliance

Individuals must be able to challenge an organization's compliance with these principles. Integrity Advocate provides the documentation and audit trail that organizations need to respond to any compliance challenge, including detailed session records and human reviewer notes, not just automated flags.

Why Human Review Matters for PIPEDA Compliance

One PIPEDA principle that automated proctoring platforms often struggle with is accuracy. Fully automated systems issue flags based on algorithmic pattern detection. If that flag is wrong, and automated systems do produce false positives, the data on record is inaccurate, the outcome may be unfair, and the organization is exposed.

Integrity Advocate's human review model addresses this directly. Every flagged session is reviewed by a trained person before any decision is recorded. That means the information your organization acts on is accurate, defensible, and consistent with what PIPEDA requires.

Built for Privacy From the Ground Up

PIPEDA compliance isn't a feature Integrity Advocate added. It's reflected in foundational design decisions:

• Minimal data collection, only what's required for the session
• 24-hour deletion of sensitive identity data post-session
• No secondary use of personal data for advertising, research, or resale
• Data stored in Canada, AWS Montreal by default
• SOC 2 certified for four consecutive years
• GDPR and PIPEDA compliant, designed for organizations operating across jurisdiction

Your Program Deserves a Proctoring Partner You Can Stand Behind

Choosing a proctoring platform means trusting a vendor with your learners' most sensitive personal information. That trust needs to be backed by more than a checkbox. It needs to be backed by architecture, policy, and a track record.

Integrity Advocate has operated for 12+ years with zero data breaches and 98% client retention. We're built to be the partner your compliance team can point to with confidence.

{{post-cta}}