Slide 1 - CAPA by gjjur4356


									 Canadian Information Rights
  Professional Standards and
      Certification Project

Presented at Canadian Access and Privacy Association
         2010 Conference, Ottawa, Ontario

            Presented by Wayne MacDonald and Kent Ziegler
        Background and History of the CAPA
            Professional Standards and
            Certification Project (PSCP)

   The PSCP was initially funded and supported by the Office of the
    Privacy Commissioner of Canada through a grant under the
    Contributions Program. The Office of the Information
    Commissioner of Canada provided additional funding and support
    through the hiring of the project‟s National Director.

   PSCP was designed as a three stage project. The first two stages of
    the PSCP activities were overseen by the PSCP chair, Frank Work,
    Q.C, Alberta Information and Privacy Commissioner, and Wayne
    MacDonald, National Director, PSCP. Phase 3 is being overseen by
                  PSCP Phase 1

   Stage One - assessing the current state of
    professional and industry certification in
    the IAPP field;
                 PSCP Phase Two

   Stage Two – conducting research and
    developing a certification and recognition
    standard including an ethical code of
    conduct for IAPP professionals;
                 PSCP Phase Three

   Stage Three – creating a governance body
    charged with oversight of the certification
    process and governance of IAPP
    professionals in Canada.
 Certification Considerations

Core reasons:

1.   Multiple stakeholders need to be involved and committed to
     establish legitimacy.

2.   Canadian certification solution to establish credibility in the
     industry and profession.

3.   Achieving a good process takes time. CAPA is, and will be,
     consulting with the membership to receive valuable input and
     direction. It is important to thoroughly consider members‟ input
     to ensure a fair and equal process for all.

4.   Certification process should be separate from CAPA.
                         The Governance Model

                           Arms Length Non-
                              Profit Entity
                              (Board of Directors)

                  CAPA                                Other Core
CAPA Membership

                           University of Alberta

                               U of A IAPP Students
Certification FAQs

What benefit will certification be to me?

  Nearly all recognized professional fields utilize certifications to legitimize
  and support its members. Certification adds credibility to a field and there are
  many great examples;

        - professional engineer‟s association
        - chartered financial analysts, stock brokers, and accountants
        - nurses, lawyers, health and records management professionals
        - information and technology industry professionals
What level of effort/commitment is involved in
 becoming certified ?

   That depends on an individual‟s interest level. The core certification is set to
    welcome as many interested IAPP professionals as possible. Then,
    depending on an individual‟s desire, additional and more advanced
    certification levels and designations can be pursued.
Why we want CAPA member input now

   Clear and direct input early on ensures
    success and a strong model at the end

   This affects the profession’s future and
    the membership needs to be
In terms of career plans and employment
  opportunities why should I get certified? What
  will it cost?

   Certification tells your employer, clients, colleagues and oversight bodies
    that you are serious about your profession and career choice. Certification
    also adds a level of “portability” to your resume and would allow
    professionals to switch jobs more easily and move up the ranks faster as
    each level signifies added competency, commitment and proven skills.

   Costs are still to be determined but will be reasonable as this is not a
    “money-grab” and is not a “fly-by-night” certificate with no credibility
    behind it. Yet, it does require some financial support to fund the process
    and cover operational overhead costs.
Do we have to be certified in order to keep our
 jobs in the future?

   No. Certification does not mean people without it will lose their jobs. But, if
    people want to advance further or face bigger and better challenges,
    certification could be one of the tools in your “career tool box” for further
    advancement and growth in the field.

   Certifications help distinguish you from other job competitors and make
    your name and resume stand out
Will certification and professional standards
 evolve into better classifications, pay levels and
 professional recognition?

   As more and more IAPP professionals get certified and as the
    profession continues to evolve it is only natural that, as evidenced in
    other professional fields, classifications and pay levels will be
    recognized and increased accordingly.
       How is this different from other certification
                     models out there?

   This model will be developed through consultation will CAPA‟s entire
    membership base which is the largest, and oldest, in the country.

   All of Canada‟s Information and Privacy Commissioners will be offered to
    provide input and feedback into the process to ensure it has their support.

   US IAPP certification is an “entry level” certification and is more of one
    day course. This is a more robust, graduated, model that is designed to
    recognize and appreciate increasing levels of both industry experience and
    education in granting certifications. This ensures more advanced
    certifications and professionals can be distinguished from one another rather
    than a „one size fits all‟ approach.

   Will have been built in Canada, by Canadians, for Canadians.
            Why did it take so long to get here?

   Process has already involved multiple stakeholders (see
    letters of support from all Commissioners at onset).

   A strong and defensible model and process takes time:
    “good things to those who wait”.

   If a model is to be sustainable it has to have been thought
    through and cannot just be created out of thin air based
    on one organizations‟ desires.
Date               Activity                                          Outcome
November 23,       Announcement of project and request for CAPA      Members engaged.
2010               member input and involvement.

January 15, 2011   Review of CAPA membership input.                  Data collected

January 31, 2011   Consultations with Canadian stakeholder           Stakeholders consulted

February 28,       Governance body and certification process         CAPA membership decision
2011               endorsed by CAPA membership.

April 30, 2011     If approved by membership, launch certification   Certification Kick-off.

June, 2011         CAPA certification announced at University of     Full Canadian Certification Model
                   Alberta Access and privacy Conference.            Rolled Out

November 2012      Update of Certification to CAPA membership at     Members updated.
                   annual conference
Now, the Details
The Certifications

There are three proposed levels of

1.   “IAPP Pro.” = IAPP Professional (core or initial level)

2.   “IAPP Cert.” = IAPP Certified

3.   “IAPP (Chartered)” = IAPP Chartered Member (most advanced)
Accredited Information Access and Privacy
Protection Professional (“IAPP Pro”)

   Requirements: 2000 hours (or approx. 1 year full time, 8hrs
      per day) of employment in the IAPP profession
      completion of University of Alberta IAPP Certificate program

   Note: a U.S. IAPP “CIPP or CIPP/C” designation is deemed
      to be functionally equivalent to 750 hours of full time
      employment in an IAPP position.
Certified Information Access and Privacy
Protection Professional (“IAPP Cert.”)

     Requirement: 5 years of full time employment in the IAPP

     + completion of University of Alberta IAPP Certificate
      Program (or validated 10 years of full time employment in the
      IAPP profession) Eg. Letter from employer or other
      “Attestor” (eg. any Chartered IAPP).
Chartered IAPPs

   Chartered IAPPs are the most seasoned IAPP veterans and this
    distinguished designation is only given to those who are committed
    to continually improving and updating their educational and
    professional knowledge and annually affirm their ongoing
    professional improvement and industry involvement.

   They are actively involved in the IAPP professional community and
    devote a certain amount of hours to promoting the profession and
    supporting CAPA.

   Some Chartered members may be denoted thus : “IAPP Chartered,
    Inactive” which means for at least one year they were an active
    chartered member but have since not been able to fulfill the ongoing
    requirements to maintain active status. They are still qualified as a
    Chartered professional however.
Chartered Information Access and Privacy
Protection Professional (“IAPP Char.”)

           Requirement: 10 years full time employment in the IAPP profession

           + already possess an undergraduate or baccalaureate university degree or better

           + completion of University of Alberta IAPP Certificate Program (or 15 years of
            full time employment in the IAPP profession)

           + ongoing professional development and education requirement

           + ongoing IAPP community involvement activity

           + received endorsement from IAPP Char. Committee which is comprised of
            sub committee of all Chartered members


* special functional and professional equivalency exemption from CAPA or University of Alberta.
Chartered IAPPs

Chartered members must annually complete 15 hours of professional development,
   based on the following:

   1 day conference = 8 hours
   Webinars = length of webinar
   1 book pertaining to any facet of IAPP field = 15 hours
   1 magazine article pertaining to any facet of IAPP field = 1 hour
   Any other IAPP focused educational or learning activity approved in writing by CAPA = # of
    hours as determined by CAPA (you are encouraged to obtain approval in advance)

Chartered members must also annually complete 30 hours of IAPP community
   involvement activities, based on the following:

   Sitting, or serving, on any CAPA board, committee, project or special activity = 30 hours
   Sitting on any board or committee in any CAPA recognized IAPP association= 20 hours
   Writing an IAPP related article for any group, association or organization = 10 hours
   Speaking at a CAPA recognized conference on an IAPP topic = 30 hours
   Any other IAPP oriented activity approved in writing by CAPA = # of hours as determined
    by CAPA (you are encouraged to obtain approval in advance)

Additional clarification of activities to meet ongoing requirements will be developed by CAPA as
Exemption and Special Approval Process

   CAPA does have an exemption process whereby they may exempt (upon
    request or by their own volition), any person(s) CAPA determines has
    warranted a given accreditation level or has otherwise met or obtained
    functional equivalencies for the professional and educational requirements
    of the given level through some other combination of experience, education,
    and ability.

   For example, anyone who a privacy or information commissioner
    personally “attests” as being qualified to be considered for a given
    certification (eg. all legal counsel for IAPP commissioners).

   Anyone who the University of Alberta attests as being qualified to be
    considered for a given certification (eg. all UofA IAPP instructors.)
What, no tests?

   CAPA does not require its members to take special competency based exams
    like other associations may offer as the accreditation program primarily
    rests upon an individual having completed the entire University of Alberta
    IAPP program or having significant, validated, experience in lieu thereof.

   The U of A program is a full year university level program consisting of five
    courses all of which contain multiple competency exams, tests, and research
    paper requirements in a controlled university testing environment.

   This affirms that members are properly tested to university level standards
    and as a result is the most comprehensive and difficult testing regime in
    North America for IAPP professionals.
Code of Conduct and Ethics

   1. Members will achieve and maintain a high level of competence, through education and
    experience prior to entering the profession, as well as on a continuing basis. Members will
    continuously enhance their educational and technical proficiency.

   2. Members will maintain a high level of personal and professional integrity, honesty, and
    truthfulness, and avoid being involved in or being seen to be involved in a conflict of interest.

   3. Members will maintain a high standard of professional conduct.

   4. Members will preserve all confidential information that comes into their possession before,
    during and after their professional or employment relationship. A member will not use
    confidential information to damage the interests of an institution or client.

   5. Members will promote and maintain cordial and collegial relationships with the profession and
    other professions and support the IAPP community generally.

   6. Members will recognize their clients and employers' personal, social, cultural and
    organizational considerations.

Wayne MacDonald
Director, Government Studies, University of Alberta and CAPA Programme Director

Ph: 780-492-2862
CAPA Secretariat: see website:

To top