Personal organization information is usually any information that identifies a buyer, employee or perhaps partner. Whether your business collects this information through direct get in touch with or over the internet, you must shield it so that it does not be occupied as a liability for your company.

PIPEDA, Canada’s personal privacy rules, defines sensitive information as “information that relates to an individual and that can be used to identify the person. ” This includes any information that is linked or linkable to an individual (i. e. the name, social security number or biometric information) and is also not in any other case publicly readily available.

Examples of PII include:

Public security numbers; the date and place of entry into the world; their moms maiden identity; their travelling licence amount; their medical data and other health-related information; and credit card or purchase cards account numbers.

Sensitive PII, also called PHI, is details that in cases where disclosed without the individual’s consent might lead to harm, humiliation or hassle to all of them. This includes the Social Security Number, medical record, disciplinary actions, overall performance ratings, career history and any other information that could be taken to identify or perhaps trace a person.

PIPEDA needs organizations to:

Be clear about the purpose for collecting your details before or at the time of collection, and mention why you may need it. You can ask for more details or decrease to provide this if you are unsatisfied considering the explanation.

Limit the amount and type of sensitive information gathered as to what is necessary with respect to the intended goal. If you provide you with additional information, it should be for a goal related to the original purpose and only when you be in agreeement it.