Personal Information includes any factual or subjective information, recorded or not, about an identifiable individual. Personal information does not include the name, title, business address or business telephone number of an employee of an organization. Personal information includes information in any form including home address, home phone number, age, personal email address, race, national or ethnic origin, colour, religion, sexual orientation, marital status, mental or physical disability, family members' names, employee files, identification numbers, evaluations, disciplinary actions, the existence of a dispute, opinions, comments, social status, income, credit and bank records, donation information, loan records or medical records.
Personal information will only be used for the purposes for which it is collected and should not be used for any other purposes without the consent of the individual. Specific permission must be sought if personal information is to be used for any other purpose other than for which it was initially collected.
Personal information is stored under lock and key and only authorized individuals shall have access to it. Once personal information is no longer required, it should be destroyed except in cases where federal and/or provincial retention rules apply.
To protect against illegal harvesting of personal information, all necessary precautions should be taken to secure and backup personal information that is stored electronically. This should be done with appropriate safeguards that include, but are not limited to, up-to-date antivirus software, firewalls, password protection, instillation of critical software updates and patches, controlled physical access to personal information servers, and other network security measures.