How schools, universities, and colleges handle your information under FIPPA, MFIPPA, and related education statutes.
TL;DR
In most provinces, schools, school boards, colleges, and universities are public bodies subject to the provincial access-and-privacy statute (FIPPA, FOIP, ATIPP). They must limit collection, protect records, and give you access and correction rights. For general student rights, see our sister site MyStudentRights.ca.
Elementary and secondary schools
Public school boards are typically covered by the municipal access-and-privacy statute (in Ontario, MFIPPA). Records include enrolment information, marks, attendance, and Ontario Student Records (OSRs).
OSR access rights are governed by the Education Act in Ontario and similar statutes in other provinces.
Colleges and universities
Colleges and universities are covered by the provincial FIPPA or equivalent. Student records can only be disclosed with consent or under specific exceptions (e.g., transcript requests authorized by the student).
Learning analytics and edtech
Schools increasingly use third-party tools for learning analytics. Under provincial privacy laws, institutions must ensure vendors meet equivalent privacy standards and must usually tell you who processes your data.
Quebec's Law 25 imposes specific cross-border transfer assessments that apply to ed-tech too.