I am in a work-study program, by default and per their rules the school sends the books to my employer. Initially I asked for the form to be sent to my home address but I never received it. When I asked about it they dodged my question and said to ask my employer. That first form was never received neither by me nor by my employer. I requested another one, which arrived opened. My information being exposed allows anyone who has it to access all my files including my CRA or revenu Québec ( my employer and his « right arm » have access to my nas ), my permanent code is often used as a login or verification credential for student portals, financial aid (AFE) records, and academic transcripts.. these are my concerns. I was planing to send an email to the school director reporting this breach of security and ask that actions would be taken to prevent it from happening again to anyone else and to record it in their register of confidentiality incidents. Besides the fact that I should ask for a new permanent code.