GreatNorthCollective/greatnorth-canada-federal-laws-text huggingface dataset:
Personal Information Protection and Electronic Documents Act — P-8.6
In obtaining consent, the reasonable expectations of the individual are also relevant. For example, an individual buying a subscription to a magazine should reasonably expect that the organization, in addition to using the individual’s name and address for mailing and billing purposes, would also contact the person to solicit the renewal of the subscription. In this case, the organization can assume that the individual’s request constitutes consent for specific purposes. On the other hand, an individual would not reasonably expect that personal information given to a health-care professional would be given to a company selling health-care products, unless consent were obtained. Consent shall not be obtained through deception.
Personal Information Protection and Electronic Documents Act — P-8.6
4.3.6 The way in which an organization seeks consent may vary, depending on the circumstances and the type of information collected. An organization should generally seek express consent when the information is likely to be considered sensitive. Implied consent would generally be appropriate when the information is less sensitive. Consent can also be given by an authorized representative (such as a legal guardian or a person having power of attorney).
Personal Information Protection and Electronic Documents Act — P-8.6
The way in which an organization seeks consent may vary, depending on the circumstances and the type of information collected. An organization should generally seek express consent when the information is likely to be considered sensitive. Implied consent would generally be appropriate when the information is less sensitive. Consent can also be given by an authorized representative (such as a legal guardian or a person having power of attorney).
Personal Information Protection and Electronic Documents Act — P-8.6 (a)
4.3.7 Individuals can give consent in many ways. For example: (a) an application form may be used to seek consent, collect information, and inform the individual of the use that will be made of the information. By completing and signing the form, the individual is giving consent to the collection and the specified uses; (b) a checkoff box may be used to allow individuals to request that their names and addresses not be given to other organizations. Individuals who do not check the box are assumed to consent to the transfer of this information to third parties; (c) consent may be given orally when information is collected over the telephone; or (d) consent may be given at the time that individuals use a product or service.
Personal Information Protection and Electronic Documents Act — P-8.6 (a)
Individuals can give consent in many ways. For example: (a) an application form may be used to seek consent, collect information, and inform the individual of the use that will be made of the information. By completing and signing the form, the individual is giving consent to the collection and the specified uses; (b) a checkoff box may be used to allow individuals to request that their names and addresses not be given to other organizations. Individuals who do not check the box are assumed to consent to the transfer of this information to third parties; (c) consent may be given orally when information is collected over the telephone; or (d) consent may be given at the time that individuals use a product or service.
Personal Information Protection and Electronic Documents Act — P-8.6 (a)
(a) an application form may be used to seek consent, collect information, and inform the individual of the use that will be made of the information. By completing and signing the form, the individual is giving consent to the collection and the specified uses;
Personal Information Protection and Electronic Documents Act — P-8.6 (b)
(b) a checkoff box may be used to allow individuals to request that their names and addresses not be given to other organizations. Individuals who do not check the box are assumed to consent to the transfer of this information to third parties;
Personal Information Protection and Electronic Documents Act — P-8.6 (c)
(c) consent may be given orally when information is collected over the telephone; or
Personal Information Protection and Electronic Documents Act — P-8.6 (d)
(d) consent may be given at the time that individuals use a product or service.
Personal Information Protection and Electronic Documents Act — P-8.6
4.3.8 An individual may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. The organization shall inform the individual of the implications of such withdrawal.
Personal Information Protection and Electronic Documents Act — P-8.6
An individual may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. The organization shall inform the individual of the implications of such withdrawal.
Personal Information Protection and Electronic Documents Act — P-8.6
The collection of personal information shall be limited to that which is necessary for the purposes identified by the organization. Information shall be collected by fair and lawful means.
Personal Information Protection and Electronic Documents Act — P-8.6
4.4.1 Organizations shall not collect personal information indiscriminately. Both the amount and the type of information collected shall be limited to that which is necessary to fulfil the purposes identified. Organizations shall specify the type of information collected as part of their information-handling policies and practices, in accordance with the Openness principle (Clause 4.8).
Personal Information Protection and Electronic Documents Act — P-8.6
Organizations shall not collect personal information indiscriminately. Both the amount and the type of information collected shall be limited to that which is necessary to fulfil the purposes identified. Organizations shall specify the type of information collected as part of their information-handling policies and practices, in accordance with the Openness principle (Clause 4.8).
Personal Information Protection and Electronic Documents Act — P-8.6
4.4.2 The requirement that personal information be collected by fair and lawful means is intended to prevent organizations from collecting information by misleading or deceiving individuals about the purpose for which information is being collected. This requirement implies that consent with respect to collection must not be obtained through deception.
Personal Information Protection and Electronic Documents Act — P-8.6
The requirement that personal information be collected by fair and lawful means is intended to prevent organizations from collecting information by misleading or deceiving individuals about the purpose for which information is being collected. This requirement implies that consent with respect to collection must not be obtained through deception.
Personal Information Protection and Electronic Documents Act — P-8.6
4.4.3 This principle is linked closely to the Identifying Purposes principle (Clause 4.2) and the Consent principle (Clause 4.3).
Personal Information Protection and Electronic Documents Act — P-8.6
This principle is linked closely to the Identifying Purposes principle (Clause 4.2) and the Consent principle (Clause 4.3).
Personal Information Protection and Electronic Documents Act — P-8.6
Personal information shall not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal information shall be retained only as long as necessary for the fulfilment of those purposes.
Personal Information Protection and Electronic Documents Act — P-8.6
4.5.1 Organizations using personal information for a new purpose shall document this purpose (see Clause 4.2.1).
Personal Information Protection and Electronic Documents Act — P-8.6
Organizations using personal information for a new purpose shall document this purpose (see Clause 4.2.1).
Personal Information Protection and Electronic Documents Act — P-8.6
4.5.2 Organizations should develop guidelines and implement procedures with respect to the retention of personal information. These guidelines should include minimum and maximum retention periods. Personal information that has been used to make a decision about an individual shall be retained long enough to allow the individual access to the information after the decision has been made. An organization may be subject to legislative requirements with respect to retention periods.
Personal Information Protection and Electronic Documents Act — P-8.6
Organizations should develop guidelines and implement procedures with respect to the retention of personal information. These guidelines should include minimum and maximum retention periods. Personal information that has been used to make a decision about an individual shall be retained long enough to allow the individual access to the information after the decision has been made. An organization may be subject to legislative requirements with respect to retention periods.
Personal Information Protection and Electronic Documents Act — P-8.6
4.5.3 Personal information that is no longer required to fulfil the identified purposes should be destroyed, erased, or made anonymous. Organizations shall develop guidelines and implement procedures to govern the destruction of personal information.
Personal Information Protection and Electronic Documents Act — P-8.6
Personal information that is no longer required to fulfil the identified purposes should be destroyed, erased, or made anonymous. Organizations shall develop guidelines and implement procedures to govern the destruction of personal information.
Personal Information Protection and Electronic Documents Act — P-8.6
4.5.4 This principle is closely linked to the Consent principle (Clause 4.3), the Identifying Purposes principle (Clause 4.2), and the Individual Access principle (Clause 4.9).
Personal Information Protection and Electronic Documents Act — P-8.6
This principle is closely linked to the Consent principle (Clause 4.3), the Identifying Purposes principle (Clause 4.2), and the Individual Access principle (Clause 4.9).
Personal Information Protection and Electronic Documents Act — P-8.6
Personal information shall be as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used.
Personal Information Protection and Electronic Documents Act — P-8.6
4.6.1 The extent to which personal information shall be accurate, complete, and up-to-date will depend upon the use of the information, taking into account the interests of the individual. Information shall be sufficiently accurate, complete, and up-to-date to minimize the possibility that inappropriate information may be used to make a decision about the individual.
Personal Information Protection and Electronic Documents Act — P-8.6
The extent to which personal information shall be accurate, complete, and up-to-date will depend upon the use of the information, taking into account the interests of the individual. Information shall be sufficiently accurate, complete, and up-to-date to minimize the possibility that inappropriate information may be used to make a decision about the individual.
Personal Information Protection and Electronic Documents Act — P-8.6
4.6.2 An organization shall not routinely update personal information, unless such a process is necessary to fulfil the purposes for which the information was collected.
Personal Information Protection and Electronic Documents Act — P-8.6
An organization shall not routinely update personal information, unless such a process is necessary to fulfil the purposes for which the information was collected.
Personal Information Protection and Electronic Documents Act — P-8.6
4.6.3 Personal information that is used on an ongoing basis, including information that is disclosed to third parties, should generally be accurate and up-to-date, unless limits to the requirement for accuracy are clearly set out.
Personal Information Protection and Electronic Documents Act — P-8.6
Personal information that is used on an ongoing basis, including information that is disclosed to third parties, should generally be accurate and up-to-date, unless limits to the requirement for accuracy are clearly set out.
Personal Information Protection and Electronic Documents Act — P-8.6
Personal information shall be protected by security safeguards appropriate to the sensitivity of the information.
Personal Information Protection and Electronic Documents Act — P-8.6
4.7.1 The security safeguards shall protect personal information against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification. Organizations shall protect personal information regardless of the format in which it is held.
Personal Information Protection and Electronic Documents Act — P-8.6
The security safeguards shall protect personal information against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification. Organizations shall protect personal information regardless of the format in which it is held.
Personal Information Protection and Electronic Documents Act — P-8.6
4.7.2 The nature of the safeguards will vary depending on the sensitivity of the information that has been collected, the amount, distribution, and format of the information, and the method of storage. More sensitive information should be safeguarded by a higher level of protection. The concept of sensitivity is discussed in Clause 4.3.4.
Personal Information Protection and Electronic Documents Act — P-8.6
The nature of the safeguards will vary depending on the sensitivity of the information that has been collected, the amount, distribution, and format of the information, and the method of storage. More sensitive information should be safeguarded by a higher level of protection. The concept of sensitivity is discussed in Clause 4.3.4.
Personal Information Protection and Electronic Documents Act — P-8.6 (a)
4.7.3 The methods of protection should include (a) physical measures, for example, locked filing cabinets and restricted access to offices; (b) organizational measures, for example, security clearances and limiting access on a “need-to-know” basis; and (c) technological measures, for example, the use of passwords and encryption.
Personal Information Protection and Electronic Documents Act — P-8.6 (a)
The methods of protection should include (a) physical measures, for example, locked filing cabinets and restricted access to offices; (b) organizational measures, for example, security clearances and limiting access on a “need-to-know” basis; and (c) technological measures, for example, the use of passwords and encryption.
Personal Information Protection and Electronic Documents Act — P-8.6 (a)
(a) physical measures, for example, locked filing cabinets and restricted access to offices;
Personal Information Protection and Electronic Documents Act — P-8.6 (b)
(b) organizational measures, for example, security clearances and limiting access on a “need-to-know” basis; and
Personal Information Protection and Electronic Documents Act — P-8.6 (c)
(c) technological measures, for example, the use of passwords and encryption.
Personal Information Protection and Electronic Documents Act — P-8.6
4.7.4 Organizations shall make their employees aware of the importance of maintaining the confidentiality of personal information.
Personal Information Protection and Electronic Documents Act — P-8.6
Organizations shall make their employees aware of the importance of maintaining the confidentiality of personal information.
Personal Information Protection and Electronic Documents Act — P-8.6
4.7.5 Care shall be used in the disposal or destruction of personal information, to prevent unauthorized parties from gaining access to the information (see Clause 4.5.3).
Personal Information Protection and Electronic Documents Act — P-8.6
Care shall be used in the disposal or destruction of personal information, to prevent unauthorized parties from gaining access to the information (see Clause 4.5.3).
Personal Information Protection and Electronic Documents Act — P-8.6
An organization shall make readily available to individuals specific information about its policies and practices relating to the management of personal information.
Personal Information Protection and Electronic Documents Act — P-8.6
4.8.1 Organizations shall be open about their policies and practices with respect to the management of personal information. Individuals shall be able to acquire information about an organization’s policies and practices without unreasonable effort. This information shall be made available in a form that is generally understandable.
Personal Information Protection and Electronic Documents Act — P-8.6
Organizations shall be open about their policies and practices with respect to the management of personal information. Individuals shall be able to acquire information about an organization’s policies and practices without unreasonable effort. This information shall be made available in a form that is generally understandable.
Personal Information Protection and Electronic Documents Act — P-8.6 (a)
4.8.2 The information made available shall include (a) the name or title, and the address, of the person who is accountable for the organization’s policies and practices and to whom complaints or inquiries can be forwarded; (b) the means of gaining access to personal information held by the organization; (c) a description of the type of personal information held by the organization, including a general account of its use; (d) a copy of any brochures or other information that explain the organization’s policies, standards, or codes; and (e) what personal information is made available to related organizations (e.g., subsidiaries).
Personal Information Protection and Electronic Documents Act — P-8.6 (a)
The information made available shall include (a) the name or title, and the address, of the person who is accountable for the organization’s policies and practices and to whom complaints or inquiries can be forwarded; (b) the means of gaining access to personal information held by the organization; (c) a description of the type of personal information held by the organization, including a general account of its use; (d) a copy of any brochures or other information that explain the organization’s policies, standards, or codes; and (e) what personal information is made available to related organizations (e.g., subsidiaries).
Personal Information Protection and Electronic Documents Act — P-8.6 (a)
(a) the name or title, and the address, of the person who is accountable for the organization’s policies and practices and to whom complaints or inquiries can be forwarded;
Personal Information Protection and Electronic Documents Act — P-8.6 (b)
(b) the means of gaining access to personal information held by the organization;
Personal Information Protection and Electronic Documents Act — P-8.6 (c)
(c) a description of the type of personal information held by the organization, including a general account of its use;
Personal Information Protection and Electronic Documents Act — P-8.6 (d)
(d) a copy of any brochures or other information that explain the organization’s policies, standards, or codes; and
Personal Information Protection and Electronic Documents Act — P-8.6 (e)
(e) what personal information is made available to related organizations (e.g., subsidiaries).
Personal Information Protection and Electronic Documents Act — P-8.6
4.8.3 An organization may make information on its policies and practices available in a variety of ways. The method chosen depends on the nature of its business and other considerations. For example, an organization may choose to make brochures available in its place of business, mail information to its customers, provide online access, or establish a toll-free telephone number.
Personal Information Protection and Electronic Documents Act — P-8.6
An organization may make information on its policies and practices available in a variety of ways. The method chosen depends on the nature of its business and other considerations. For example, an organization may choose to make brochures available in its place of business, mail information to its customers, provide online access, or establish a toll-free telephone number.
Personal Information Protection and Electronic Documents Act — P-8.6
Upon request, an individual shall be informed of the existence, use, and disclosure of his or her personal information and shall be given access to that information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate.
Personal Information Protection and Electronic Documents Act — P-8.6
4.9.1 Upon request, an organization shall inform an individual whether or not the organization holds personal information about the individual. Organizations are encouraged to indicate the source of this information. The organization shall allow the individual access to this information. However, the organization may choose to make sensitive medical information available through a medical practitioner. In addition, the organization shall provide an account of the use that has been made or is being made of this information and an account of the third parties to which it has been disclosed.
Personal Information Protection and Electronic Documents Act — P-8.6
Upon request, an organization shall inform an individual whether or not the organization holds personal information about the individual. Organizations are encouraged to indicate the source of this information. The organization shall allow the individual access to this information. However, the organization may choose to make sensitive medical information available through a medical practitioner. In addition, the organization shall provide an account of the use that has been made or is being made of this information and an account of the third parties to which it has been disclosed.
Personal Information Protection and Electronic Documents Act — P-8.6
4.9.2 An individual may be required to provide sufficient information to permit an organization to provide an account of the existence, use, and disclosure of personal information. The information provided shall only be used for this purpose.
Personal Information Protection and Electronic Documents Act — P-8.6
An individual may be required to provide sufficient information to permit an organization to provide an account of the existence, use, and disclosure of personal information. The information provided shall only be used for this purpose.
Personal Information Protection and Electronic Documents Act — P-8.6
4.9.3 In providing an account of third parties to which it has disclosed personal information about an individual, an organization should attempt to be as specific as possible. When it is not possible to provide a list of the organizations to which it has actually disclosed information about an individual, the organization shall provide a list of organizations to which it may have disclosed information about the individual.
Personal Information Protection and Electronic Documents Act — P-8.6
In providing an account of third parties to which it has disclosed personal information about an individual, an organization should attempt to be as specific as possible. When it is not possible to provide a list of the organizations to which it has actually disclosed information about an individual, the organization shall provide a list of organizations to which it may have disclosed information about the individual.
Personal Information Protection and Electronic Documents Act — P-8.6
4.9.4 An organization shall respond to an individual’s request within a reasonable time and at minimal or no cost to the individual. The requested information shall be provided or made available in a form that is generally understandable. For example, if the organization uses abbreviations or codes to record information, an explanation shall be provided.