As the fall semester continues online, reports of the implementation of an invasive proctoring software are being sent out to students. The software will be able to:

• Capture images of student's faces and private homes, as well as take screenshots of the student's computer screen
• Know the computer's IP addresses and addresses of web connections made while the application is running
• Access system activity
• Access the computer's MAC address

All of these things are an invasion of privacy. The implementation of this will require students to:

• Aquire webcams, hardware, and faster internet. Causing an issue for students with strained resources
• Install closed source software they may not trust and that may not support their current operating system
• Give up privacy with little power to refuse
• Stay in constant view of the camera and restrict "suspicious" body movements, which can lead to anxiety and stress

After major security breaches at other universities, it is clear that proctoring software endangers students, such as in the case of Western University: 

https://www.cbc.ca/news/canada/london/western-students-alerted-about-security-breach-at-exam-monitor-proctortrack-1.5764354

The same is true for ProctorU, which has also had major data breaches which have compromised student safety:

https://blog.avast.com/proctoru-breach-learnings-avast

It is clear from these findings that there is no such thing as a secure proctoring app. The following is taken from the privacy policies and websites of the third party software providers that supply our proctoring software, of which many are based in the USA with little accountability for our data:

Respondus Monitor and LockDown Browser:

Data recorded from Respondus Monitor in conjunction with the LockDown Browser:

- Facial recognition information

- "Keyboard and screen activity"

- Access to "applications and processes running on the computer or device"

- "The default data retention period for Respondus Monitor is five years."

Data Recorded from the Respondus Monitor also includes:

- Stored video and audio recordings which can be accessed by the university and proctors

- Student grades and photo identification

- "Random samples of video and/or audio recordings "... "may be shared with researchers (research institutions and/or biometric experts)"

- "Respondus does not warrant the security of any information collected using its services [....] Respondus shall not be liable if a security breach occurs, if the site malfunctions, or if information is misused or mismanaged in any way to your detriment or the detriment of a student or third party, whether by Respondus, your institution, or an unauthorized third party."

Examity:

- "Information We Collect: [...] Information that you provide directly to us by filling in forms on our Website, including your name, email address, street address, telephone number, or other information." and "Age (40 years or older), race, color, citizenship, physical or mental disability, sex (including gender, gender identity, gender expression)." and "Education records"

Also collected: "A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number"

- "while we strive to protect your personally identifiable information, we cannot guarantee that it will be 100% secure. Your transmission of your data to our Website thus is done entirely at your own risk."

- "We may disclose your personal information to third parties if we are involved in a merger, acquisition, or sale of any or all of our business and/or our assets to a third party..."

ProctorU:

- "Neither ProctorU nor its vendors, affiliates, or any person associated with ProctorU makes any warranty or representation with respect to the [...] security, or reliability of the Services..."

-  "Neither ProctorU nor anyone associated with ProctorU represents or warrants [...] that the Services are free of viruses or other harmful components..."

- "ProctorU will not be liable for any loss or damage caused by a distributed denial-of-service attack, viruses, or other technologically harmful material that may infect your computer equipment, computer programs, devices, or data due to your use of the Services."

"We require you to share your photo ID on camera and we use that ID in conjunction with biometric facial recognition software to authenticate your identity"

"Testing: During testing, we automatically track your keystroke pattern to ensure it matches the biometric profile created before the start of your exam."  

Further info regarding specific software and references can be found in this document:

https://docs.google.com/document/d/1c_omhcH-lLklTMyP3qZGisu-hhTFAcfbvCC0Vsc8afM/mobilebasic

We, the undersigned, students of McMaster University, request:

• An immediate stop to the use of proctoring techniques or software that invade privacy 
• A prohibition in the use of video capture and lockdown browsers to monitor students' movement during an examination
• A restructuring of assessments to allow for equitable marking without the use of invasive proctoring techniques.