| |
The Parkinson's Society of Alberta
Privacy Statements
Accountability
The Executive Director of The Parkinson's Society of Alberta is the individual designated as the Chief Privacy Officer and as such is responsible for compliance with the law.
Identify Purpose
An organization should document why they are collecting any personal information, before or at the time of collection.
Consent
The knowledge and consent of the individual are required for the collection, use or disclosure of personal information. Consent may be sought through a form to complete and sign, a check off box or orally over the phone. Written consent must be obtained when the information sought is sensitive (e.g. medical, grades, financial).
Limiting Collection
Only necessary information should be collected.
Limiting Use, Disclosure & Retention of Personal Information
Information can only be used and disclosed for the purposes for which it was collected and retained only as long as necessary for the completion of those purposes. The organization should also have a procedure in place for the destruction of information that is no longer in use.
Accuracy
Information collected should be as accurate, complete and up to date as possible, but only as necessary for the purposes for which it is used.
Safeguard
The organization should have measures in place to protect information from theft, loss and unauthorized use.
Openness
The organization must make personal information protection policies and practices available to the public.
Individual Access
Upon request, individuals are to be informed of the existence, use and disclosure of all their personal information and given access to it.
Challenge Compliance
The organization must have a procedure in place to handle complaints regarding compliance with these principles.
Amended as at October, 2006
|
|