Privacy Impact Assessments for GenerativeAI Instructional Use

This page outlines the current state of Privacy Impact Assessments (PIA) with regards to teaching and learning uses for Generative AI Tools at UBC, currently the PRISM Interim Report on guidelines for Generative AI Tool Use. A PIA is a risk management and compliance review process used to identify and address potential information privacy and security issues, thus avoiding costly program, service, or process redesign and minimizing exposure to potential privacy breaches.

Note: This guidance only addresses whether you can require tool use for your class. It does not cover situations where students use the tools by choice. For academic integrity cautions, or guidelines for tool use in your class, please visit the Academic Integrity at UBC ChatGPT FAQ page. For further instructional guidance around optional use for students, please visit the FAQ item on whether you can require GenAI in your course.

Approved with caution for required course use

The following tools have been approved for required use — with caution — within a course at UBC.

Does it require personal information for signup?

Does it protect personal information?

Can it be recommended or required for use by students in your course?

  • ChatGPT 3.5

    Updated:

    No, not for ChatGPT Version 3.5.
    No. It will share information entered into the tool outside Canada. Some device data such as IP Address may be stored.
    Yes, with caution: Students should be instructed on safe use of this tool, because the risk of accidentally entering personal information or intellectual property is high.
  • Microsoft Copilot for Organizations

    Updated:

    No. Students can use it with their existing UBC credentials; this information will not be shared with the tool.
    Partially. Some security and privacy protections exist. Only “Low Risk” Information should be submitted, as defined by Information Security Standard U1.
    Yes, with caution: Students should log in with their UBC credentials, be reminded not to enter personal information or intellectual property into the tool, and follow the other practices listed on the guidance page.

Not approved for required course use

You are currently unable to require use of the following tools within a course at UBC. This guidance does not cover situations where students use the tools by choice.

Does it require personal information for signup?

Does it protect personal information?

Can it be recommended or required for use by students in your course?

  • ChatGPT 4

    Updated:

    Yes, for ChatGPT Version 4.0.
    No. It will share information entered into the tool outside Canada. Some device data such as IP Address may be stored, and any personal data that is collected.
    No. Students must not be required to sign up for or use ChatGPT Version 4.