You are now in the main content area

Privacy and Security


TMU has undertaken to review the privacy and security risks associated with moving to the cloud using the international standard of Privacy by Design. TMU will continue to monitor and assess privacy and security risks

Your data will reside in multiple foreign jurisdictions and will be subject to the laws of those jurisdictions including the USA Freedom Act (formerly known as the Patriot Act). Google maintains multiple shared copies of our data in different locations to mitigate against local system failures and IT security risks.

Google will not own our data. All data is the property of TMU and/or you, the end user, and the contract with Google will have no impact on the intellectual property rights, custody, or control of faculty, staff, and student data.


All students, faculty and staff are provided with all the features of Google Workspace for Education, including TMU Gmail. You will continue to be responsible for how you use and share confidential information (including personal information) in accordance with university policies.

The only Google Workspace that TMU has made available are apps that have undergone a privacy and security risk assessment. TMU endeavours to make privacy and security default settings in all Google Workspace apps in order to protect users’ communications and data. In some cases you will be able to alter these settings; we are committed to assisting you in making informed decisions about the implications of changing settings.

On February 20, 2018, TMU allowed a number of allowed third-party apps that can be used with TMU Google accounts. Applications in this list (opens in new window)  are not recommended. No privacy or security assessments have been done on them and they should not be used to hold university records without a prior privacy and security assessment.

There will be no advertising or data mining for faculty, staff, and student accounts. Google may display ads in Alumni accounts.

TMU will continue to authenticate your user name and your password. TMU application passwords (example the password you use to log into my.torontomu) will not be sent to Google if you access Gmail or other Google Workspace apps via the web. (with the exception of mobile devices and desktop client using IMAP/POP).

Yes. We have a website that provides information on tips for securing your computer, your data and protecting your identity. The number one tip to protecting your identity is choosing good passwords and protecting them (opens in new window) 

You can also watch the recorded session entitled Privacy and Information Security for Going Google! (opens in new window)  The session provides useful information on privacy protection and information security best practices related to email and records management.