Personal business information is usually any information that identifies a buyer, employee or perhaps partner. Whether your business collects this info through direct contact or on the web, you must guard it so that it does not turn into a liability to your company.
PIPEDA, Canada’s personal privacy laws, defines sensitive information as “information that pertains to an individual and that can be used to distinguish the person. ” This includes details that is linked or linkable to an individual (i. e. the name, social security number or biometric information) and is not in any other case publicly available.
Examples of PII include:
Interpersonal protection numbers; the date and place of birth and labor; their moms maiden brand; their operating licence quantity; their medical data and other health-related information; and credit card or perhaps purchase cards account statistics.
Sensitive PII, also called PHI, is facts that in the event that disclosed without the individual’s consent may cause harm, unpleasantness or difficulty to them. This includes a person’s Social Security Number, medical record, disciplinary actions, performance ratings, career history and some other information that can go to these guys provide to identify or trace a person.
PIPEDA requires organizations to:
Be clear about the purpose meant for collecting your data before or perhaps at the time of collection, and explain why you require it. You can ask for more details or drop to provide it if you are unsatisfied along with the explanation.
Limit the amount and type of information that is personal gathered as to the is necessary for the purpose of the intended purpose. If you present additional information, it should be for a purpose related to the first purpose and only if you say yes to it.