Star_1964,
Below is text directly from PIPEDA:
This is what I'm referring to.
You can find PIPEDA at:
http://www.privcom.gc.ca
I added the FULL PIPEDA Act to the photo album
/album/displayimage.php?album=lastup&cat=0&pos=0
Feel free to down load it and have a look!
The Federal Personal Information Protection and Electronic Documents Act (Principle 4.3.1) states the following:
4.3.1
Consent is required for the collection of personal information and the subsequent use or disclosure of this information. Typically, an organization will seek consent for the use or disclosure of the information at the time of collection. In certain circumstances, consent with respect to use or disclosure may be sought after the information has been collected but before use(for example, when an organization wants to use information for a purpose not previously identified.)
4.3.2
The principle requires "knowledge and consent". Organizations shall make a reasonable effort to ensure that the individual is advised of the purposes for which the information will be used. To make the consent meaningful, the purposes must be stated in such a manner that the individual can reasonably understand how the information will be used or disclosed.
4.9 Principle 9
Upon request, an individual shall be informed of the existence, use and disclosure of his or her personal information and shall be given access to that information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate.
4.9.5
When an individual successfully demonstrates the inaccuracy or incompleteness of personal information, the organization shall amend the information as required. Depending upon the nature of the information challenged, amendment involves the correction, deletion or addition of information. Where appropriate, the amended information shall be transmitted to third parties having access to the information in question.
7.(3) For the purpose of clause 4.3 of Schedule 1, and despite the note that accompanies that clause, an organization may
disclose personal information without the knowledge or consent of the individual only if
(b) for the purpose of collecting a debt owed by the individual to the organization.