Personal business information is certainly any information that identifies a client, employee or partner. Whether your company collects this information through direct speak to or online, you must shield it so that it does not work as a liability to your company.
PIPEDA, Canada’s privateness legislation, defines private information as “information that relates to an individual and that can be used to spot the person. ” This includes details that is linked or linkable to an specific official website (i. e. the name, social security number or biometric information) which is not otherwise publicly available.
Examples of PII include:
Social protection numbers; a person’s date make of birth; their moms maiden brand; their cruising licence quantity; their particular medical data and other health-related information; and credit card or perhaps purchase credit card account volumes.
Sensitive PII, also called PHI, is details that in cases where disclosed with no individual’s consent could cause harm, humiliation or trouble to all of them. This includes the Social Security Number, medical record, disciplinary actions, efficiency ratings, work history and some other information that could be used to identify or trace someone.
PIPEDA requires organizations to:
Be clear regarding the purpose pertaining to collecting your information before or perhaps at the time of collection, and explain why you may need it. Ask for more details or drop to provide it if you are unsatisfied with the explanation.
Limit the amount and type of private information gathered as to the is necessary with respect to the intended goal. If you give additional information, it must be for a purpose related to the first purpose and as long as you say yes to it.