1.1 The Canadian Institute of Food Safety is committed to respecting the privacy of its customers.
1.2 The following policy discusses how personal information received by the Canadian Institute of Food Safety will be dealt with.
1.3 The Canadian Institute of Food Safety fully complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial privacy laws. We do this so that our customers will have confidence that they are dealing with a supplier committed to excellence and security for our customers.
2. Information Protection
2.1 The Canadian Institute of Food Safety must not do anything, or engage in any practice, that contravenes any information protection principles contained in the Personal Information Protection and Electronic Documents Act (PIPEDA). In particular, the Canadian Institute of Food Safety declares that it will:
2.2 Not collect personal information unless:
2.2.1 the information is collected for a lawful purpose that is directly related to a function or activity of the Canadian Institute of Food Safety; and
2.2.2 the collection of the information is reasonably necessary for that purpose.
2.3 Not collect personal information by any unlawful means;
2.4 Collect the information directly from the individual;
2.5 Make the individual to whom the information relates aware of:
2.5.1 the fact that the information is being collected; and
2.5.2 the purposes for which the information is being collected; and
2.5.3 the intended recipients of the information; and
2.5.4 whether the supply of the information by the individual is required by law or is voluntary, and any consequences for the individual if the information (or any part of it) is not provided; and
2.5.5 the existence of any right of access to, and correction of, the information; and
2.5.6 the name and address of the entity that is collecting the information and the entity that is to hold the information.
2.6 Ensure that any information collected is relevant to that purpose, is not excessive, and is accurate, up to date and complete, and that the collection of the information does not intrude on the personal affairs of the individual;
2.7 Ensure that the information is kept for no longer than is necessary, that the information is disposed of securely, that the information is protected against loss, unauthorised access, use, modification or disclosure, etc.;
2.8 Ensure that everything possible is done to prevent unauthorised use or disclosure of the information;
2.9 Help an individual to ascertain whether the Canadian Institute of Food Safety holds personal information, whether the Canadian Institute of Food Safety holds personal information relating to them, and, if so, the nature of that information, its purpose, and their entitlement to gain access to the information;
2.10 Provide the individual with access to the information;
2.11 Make appropriate amendments (whether by way of corrections, deletions or additions) to ensure that the personal information is accurate, and relevant, up to date, complete and not misleading;
2.12. Attach to the information, in such a manner as is capable of being read with the information, any statement provided by that individual of any amendment sought;
2.13 Notify recipients of that information of the amendments made;
2.14 Not use the information without ensuring that the information is relevant, accurate, up to date, complete and not misleading;
2.15 Not use the information for a purpose other than that for which it was collected unless:
2.15.1 the individual to whom the information relates has consented to the use of the information for that other purpose; or
2.15.2 the other purpose for which the information is used is directly related to the purpose for which the information was collected; or
2.15.3 the use of the information for that other purpose is necessary to prevent or lessen a serious and imminent threat to the life or health of the individual to whom the information relates or of another person.
2.16 Not disclose unless the disclosure is necessary to prevent or lessen a serious and imminent threat to the life or health of the individual concerned or another person;
2.17 Ensure that, if personal information is disclosed to a person or body that is a public sector agency, that agency does not use or disclose the information for a purpose other than the purpose for which the information was given to it;
2.18 Not disclose personal information relating to:
2.18.1 an individual’s ethnic or racial origin; or
2.18.2 political opinions; or
2.18.3 religious or philosophical beliefs; or
2.18.4 trade union membership; or
2.18.5 health or sexual activities