[28 / 2 / 26]
>Federally regulated organizations that conduct business in Canada are always subject to PIPEDA. The Act also applies to their employees’ personal information. These organizations include:
>airports, aircraft and airlines;
>banks and authorized foreign banks;
>inter-provincial or international transportation companies;
>telecommunications companies;
>offshore drilling operations; and
>radio and television broadcasters.
>Under PIPEDA, personal information includes any factual or subjective information, recorded or not, about an identifiable individual. This includes information in any form, such as:
>age, name, ID numbers, income, ethnic origin, or blood type;
>opinions, evaluations, comments, social status, or disciplinary actions; and
>employee files, credit records, loan records, medical records, existence of a dispute between a consumer and a merchant, intentions (for example, to acquire goods or services, or change jobs).
>Meaningful consent is an essential element of PIPEDA. Organizations are generally required to obtain meaningful consent for the collection, use and disclosure of personal information.
>To make consent meaningful, people must understand what they are consenting to. It is only considered valid if it is reasonable to expect that your customers will understand the nature, purpose and consequences of the collection, use or disclosure of their personal information.
>Consent can only be required for collections, uses or disclosures that are necessary to fulfil an explicitly specified and legitimate purpose. For non-integral collections, uses and disclosures, individuals must be given a choice.
>The form of consent must take into account the sensitivity of the personal information.
>The way you seek consent will depend on the circumstances and type of information you are collecting.
>Individuals can withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice, and you must inform individuals of the implications of withdrawal.
>airports, aircraft and airlines;
>banks and authorized foreign banks;
>inter-provincial or international transportation companies;
>telecommunications companies;
>offshore drilling operations; and
>radio and television broadcasters.
>Under PIPEDA, personal information includes any factual or subjective information, recorded or not, about an identifiable individual. This includes information in any form, such as:
>age, name, ID numbers, income, ethnic origin, or blood type;
>opinions, evaluations, comments, social status, or disciplinary actions; and
>employee files, credit records, loan records, medical records, existence of a dispute between a consumer and a merchant, intentions (for example, to acquire goods or services, or change jobs).
>Meaningful consent is an essential element of PIPEDA. Organizations are generally required to obtain meaningful consent for the collection, use and disclosure of personal information.
>To make consent meaningful, people must understand what they are consenting to. It is only considered valid if it is reasonable to expect that your customers will understand the nature, purpose and consequences of the collection, use or disclosure of their personal information.
>Consent can only be required for collections, uses or disclosures that are necessary to fulfil an explicitly specified and legitimate purpose. For non-integral collections, uses and disclosures, individuals must be given a choice.
>The form of consent must take into account the sensitivity of the personal information.
>The way you seek consent will depend on the circumstances and type of information you are collecting.
>Individuals can withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice, and you must inform individuals of the implications of withdrawal.
