Compliance
Built aroundBC driving school rules
BC law sets what you record, how long you keep it, who reads it, and what an email may say.
Not legal advice. copilotBC is not endorsed by ICBC. The signing instructor owns the record.
Sources
Where the rules come from
Four laws touch one lesson.
- 01
The record
Motor Vehicle Act Regulations, Division 27
What a school keeps per student and lesson, and the statement given before training. copilotBC prints an ICBC-aligned training record.
- 02
The signature
BC Electronic Transactions Act, s.11
A typed name and ticked attestation, tied to one record. copilotBC keeps the name, the wording, the time with timezone, and the device.
- 03
The privacy
BC Personal Information Protection Act
Collection, access, copies, corrections and destruction. PIPEDA Part 1 does not cover a BC school’s in-province data.
- 04
The messages
Canada’s anti-spam legislation
Who sent it, and a mailing address.
One record, start to finish
The life of atraining record
From the first lesson to the end of the six-year term.
01Created
Filled while you teach
Student name, licence or permit number and class. Date of birth, address and phone when given. Date, start and end time, length, subject, training type and fee. Your name on every record.
MVAR 27.06(4)MVAR 27.06(4)(a)
02Signed
Signed, then locked
You sign. The student signs on your device, or on theirs by a one-use QR code or link that expires within a day. Then the record locks. Corrections are dated addenda that cannot be changed or removed.
BC ETA s.11
03Kept
Deletion refused
The server refuses to delete a taught student or a signed lesson. A never-taught student can be deleted. Kept six years, the MVAR period for records made since June 1, 2021. The print carries the notice.
MVAR 27.06(4)
04Released
Anonymised after the term
After six years, a sweep strips name, licence number, birth date, address, contacts and notes, and deletes unsigned lessons. Each action logs a permanent dated entry. No record is six years old yet, so nothing has been removed.
BC PIPA
Requirement, then answer
Each rule, and where it lives
Where something is not built, the row says so.
What the law asks for
Where it lives
Who the student is
MVAR 27.06(4)(a)
Student record
Name, licence or permit number, class. Birth date, address, phone when given.
Instructor name on every lesson
MVAR 27.06(4)(a)
Student training record
Printed on every record.
Per-lesson date, times, length, subject, type and fee
MVAR 27.06(4)
Lesson log
The lesson log. Night driving flagged on the record and GLP practice log.
A written statement before training or fees
MVAR 27.06(2)
Pre-training disclosure
Generated from settings, or your own PDF. Each signature keeps its version.
Instructor licence, vehicle insurance and registration copies
MVAR 27.06(4)(c), (d)
Required documents
You keep the copies. We track expiry and warn twice.
Records ready for an inspector
MVAR 27.06
Inspection export
A training record (based on MVAR 27.06) and consent form (based on ICBC DTC205), with the six-year notice and attestation block.
Records kept six years
MVAR 27.06(4)
Retention
Deletion refused once taught. Logged anonymising sweep after the term.
A signature showing identity and intent
BC ETA s.11
Lesson sign-off
Your account, the student’s typed name matched to the record, one unticked attestation box, a storage notice, verbatim wording, clock with timezone, device, checksum.
A copy of their information
BC PIPA s.23
Export records
Export records gives the whole file as JSON plus printables. Other requests go to the privacy contact.
Correction, or annotation of an opinion
BC PIPA s.24
Correction requests
Corrections appended and dated. Opinions annotated, never overwritten.
Where the records are stored
Data residency
Where records live
Firestore in Toronto (northamerica-northeast2). Some services, like email and card payments, run outside Canada. The privacy policy lists each.
Access only for those entitled
BC PIPA
Who can read
Server checks every query against your account. We do not open student files in normal operations. Owners see seated instructors’ records and past school records.
Reasonable security
BC PIPA
How it is guarded
HTTPS only, HSTS, strict CSP, server-side validation. Firestore rules are the final gate.
Traceable changes
Operational control
Activity log
The activity log. Entries cannot be edited or removed.
Declaration of Completion and GLP course reviews
ICBC MV2910, MV2916
Out of scope
Not built. Out of scope until an instructor becomes a GLP-approved school.
Messaging
What reaches a student,and what it says
Two messages send on their own: a lesson reminder, and a notice when a lesson is confirmed or cancelled. Portal families also get a push notification.
No links, nothing promotional
A reminder is the date, time, length, plan and sender. A build check fails if a link is added.
Named, with an address
Every email carries the school’s name, address and contact details, and says copilotBC sent it for the school.
Cancellations always arrive
The planned opt-out stops reminders only. Cancellations still go out.
Text reminders are planned
Nothing sends a text today. The consent and STOP wording waits on carrier approval.