A concern was raised regarding whether personal data provided to the SafeUT program was
being used for research purposes without consent. The SafeUT website states that the data
collected may be used for research purposes in accordance with “institutional policies”. A
review of these policies revealed that consent is required in order to use any personal data for
research purposes. A representative from the SafeUT program indicated that they have not
used any personal data for research purposes, instead they’ve only used aggregated data
which does not contain personal data. The SafeUT representative also indicated that the
program is in the process of reviewing their online privacy notice and plans to rewrite it to
ensure that it is easier to understand and complies with all privacy notice requirements. They
are also in the process of coming into compliance with the record management requirements.