Privacy Principles

Key Concepts

  • Notice: Collection documents must include notice identifying purpose for which information is collected and used.
  • Accuracy: Reasonable steps shall be taken by the collector to ensure the information is accurate, complete, up-to-date, and relevant to the purpose for which information is collected.
  • Use: Personal information shall not be used or disclosed other than for purposes collected, except with consent of the individual or when required by law.
  • Access: Except under express provisions of the law, an individual shall be permitted to inspect all personal information in any record containing personal information that is maintained by reference to that individual.
  • Amendment: An individual has a right to request in writing an amendment of a record.
  • Sensitive personal information generally requires an extra level of protection and restricted and confidential information requires a higher duty of care.
  • Collection of personal information shall be limited to that which is necessary for lawful purposes directly related to a function or activity of the collector.
  • Individuals who have access to or control of personal information, whether electronic or hardcopy, must safeguard the information against loss, unauthorized access, use, modification or disclosure.
  • To the greatest extent possible, personal information should be collected from the individual to whom the information pertains.
  • Access to and use of personal information shall be limited to legitimate business purposes and directly connected to the purpose for which it was collected.
  • Personal information must not be used for commercial purposes.