Whereas public bodies are responsible for the management and protection of personal information under the Freedom of Information and Protection of Privacy Act FOIPPA; And whereas personal information is stored and gathered through many methods including digital technology; And whereas local governments face major challenges with digital technology including capacity and the lack of knowledge and awareness around cyber security; And whereas Section 69 5 of FOIPPA legislation, which states that local governments are required to conduct Privacy Impact Assessments PIA on new initiatives for which no PIA has been conducted or before implementing a significant change to an existing initiative, places hardship on local governments to allocate more staff and resources to meet these requirements, along with costs of upgrades to digital technology: Therefore be it resolved that UBCM ask the Province of BC to allocate additional resources to assist local governments with assessing and maintaining cyber security health by collaborating with Information Technology Professionals to produce relevant and effective Privacy Impact Assessments.
Ministry of Citizens Services The protection and resiliency of our government data, systems and assets is a top priority especially where it includes personal information of British Columbians. This is a shared responsibility across public sector organizations. As people do more and more online, personally and professionally, cyber awareness and education becomes a shared interest for all of us in BC. The Province, through the Office of the Chief Information Officer, offers guidance to local governments and continues to collaborate, promote shared awareness and assist broader public sector organizations with privacy and cybersecurity resources. In 2023, the Province initiated its CyberBC pilot program to promote cyber education, awareness and grow cybersecurity capacity across the B.C. public sector. In 2024, the Province established a Corporate Supply Arrangement to support the broader public sector with their cybersecurity programs and procuring cybersecurity advisory services through pre-qualified vendors. As our work is increasingly digital, we are mindful of best practices for managing government information to mitigate cybersecurity risks. Privacy and cybersecurity are more than just technology and processes. It includes organizational culture that helps promote understanding and awareness of the privacy and security safeguards that are put in place to protect our organizations, ensure business continuity and enable our commitments to delivering reliable and secure services to people in British Columbia. By working together, we can better safeguard information and help reduce the impact of cybersecurity threats throughout the province.