PRINCIPLE 1  -  Accountability

Members are responsible for the proepr management of all personal information under their control,  and shall designate one or more persons to be accountable for compliance.

 

PRINCIPLE 2  -  Identifying the Purposes of Personal Information

Members shall identify the purposes of collecting information before or at the time the information is collected.

 

PRINCIPLE 3  -  Obtaining Consent

The knowledge and consent of the consumer are requierd for the collection, use or disclosure of the personal information except where inappropriate.

 

PRINCIPLE 4  -  Limiting Collection of Personal Information

Members shall limit the collection of personal information to that which is necessary for the purposes identified.

 

PRINCIPLE 5  -  Limiting Use, Disclosure and Retentionof Personal Information

Members shall use or disclose personal information only for the reason it was collected, except with the consent of the consumer or as required by law.

 

PRINCIPLE 6  -  Accuracy of Personal Information

Members shall keep personal information as accurate, complete, current and relevant as necessary for its identified purpose.

 

PRINCIPLE 7  -  Protecting Information

Members shall protect personal information with safeguards appropriate to the sensitivity of the information.

 

PRINCIPLE 8  -  Openness Concerning Policies and Practices

Members shall make readily available to consumers specific information about their policies and practices relating to the management of personal information.

 

PRINCIPLE 9  -  Consumer Access to Personal Information

Upon request, members shall inform a consumer of the existence, use and disclosure of his or her personal information and shall give the individual assess to that information.

 

PRINCIPLE 10 -  Challenging Compliance

A consumer shall be able to address a challenge concerning compliance with the above principles to the designated accountable person or persons in the member office.