This Privacy Policy is designed to comply with the requirements of the Personal Information Protection and Electronic Documents Act (referred to as “PIPEDA). The Canadian Standards Association’s Model Code for the Protection of Personal Information sets out 10 privacy principles which form the basis of PIPEDA. These principles are as follows:
Accountability: ISC is responsible for personal information under its control and shall designate an individual or individuals who are accountable for ISC’s compliance with the remaining principles.
Identifying Purposes: The purposes for which personal information is collected shall be identified by ISC at or before the time the information is collected.
Consent: The knowledge and consent of the individual are required for the collection, use or disclosure of personal information, except where inappropriate or permitted by law.
Collection: The collection of personal information shall be limited to that which is necessary for the purpose identified by ISC. Information shall only be collected by fair and lawful means.
Disclosure and Disposition: Personal information shall not be used or disclosed by ISC for purposes other than that for which it was collected, or use that is consistent with that purpose, except with the consent of the individual or as required by law. ISC shall retain personal information only so long as is required by law or necessary to fulfill the purposes for which it was collected.
Accuracy: Personal information shall be accurate and kept as up to date as is reasonably possible, and necessary for the purposes for which ISC has collected it.
Safeguarding: All personal information shall be protected by ISC by using safeguards appropriate to the sensitivity of the information.
Openness: ISC shall make readily available to individuals specific information about its policies and practices relating to the management of personal information.
Individual’s Access: Upon request to ISC, an individual shall be informed of the existence, use and disclosure of his or her personal information and shall be given access to that information. An individual shall have the right to challenge ISC with regard to the accuracy and completeness of the information and to have it amended as appropriate.
Challenging Compliance: An individual shall be able to address a challenge concerning compliance with any of these principles to the designated individual or individuals accountable for ISC’s compliance with these principles, in accordance with the procedures outlined in this policy.
