A joint paper by Ontario Information and Privacy Commissioner and Deloitte & Touche has been released. The paper discusses issues of security and privacy, their overlap and distinctions. It also suggests some strategies for companies approaching security/privacy issues.
Ontario has not yet enacted privacy legislation. In the absence of new legislation, Canada’s federal private sector privacy law, the Personal Information Protection and Electronic Documents Act (PIPEDA), will become applicable to all commercial activities in Canada as of January 1, 2004. PIPEDA requires customer and client consent for the collection, use, and disclosure of personal information.
Recent decisions by the federal Privacy Commissioner have focussed on the need for clear and unambiguous notice to customers about the uses of personal information. They have narrowed the circumstances under which an organization may rely on implied consent.
This act will apply to organizations that disclose personal information across provincial or national borders for consideration.
via [Privacy Digest Weblog]
9:35:32 AM 
| 
