Checklist

If your business wants to collect, use, or disclose meaningful personal information:
- You need consent (some limited exceptions apply)
- You should only collect the personal information you need
- You can only use or disclose personal information for the purpose for which consent was given
- Even with consent, you still have to limit the collection, use, or disclosure to that which would be considered appropriate
- The more sensitive the personal information, the greater the safeguards required such as Healthcare records
- Individuals have a right to see the personal information your business holds on them
Oversight is through the Office of the Privacy Commissioner of Canada (OPC)