De La Rosa asks about app encryption, deletion, and retention
Chair asks whether mobile app data is encrypted in transit, whether users can delete data, and whether a retention policy exists. Morrisroe says he will follow up on encryption and deletion, and agrees conceptually to work on a retention policy.
Can OTI ensure that the mobile app data is encrypted in transit, or is that up to another party?
That's a good question.
I'm pausing because I don't know if I can give you a definite answer, but OTI could give you a definite answer.
If I can get back to you on that, I'd feel more comfortable.
So we'll follow up with that one.
And then can OTI allow for user data from 311 app to be deleted if requested?
I'd like to take that same approach, if you don't mind, if I can just get back to you so I can make sure we get to you the correct.
Okay.
So when looking at the privacy policy, there is no set retention policy listed for personal information except for voice recordings, meaning that personal information is possibly stored indefinitely.
We retain user information for as long as it's necessary to fulfill user submitted requests or to provide ongoing assistance to a user.
If a user has set up an account with 311 contact center, the user's information will be retained until the user deletes the account.
For compliance reasons, some users'information may be retained after deletion of the account.
That's a quote from the privacy policy.
Would you agree that we should set a data retention policy for personal information?
I appreciate that question, and I appreciate you mentioning on the voice side there is a purging period.
Say that again.
On the voice side.
Sorry, the call center side.
Recordings, the voice recordings.
And conceptually, yes, I think we should look at that, and we'd be happy to work with you on that.
Great.
Do you think...
Okay, that's fine.
Okay, I think you answered our questions.