V2010 ISU R&FA Program: Privacy

Extracts from the:

PERSONAL INFORMATION PROTECTION ACT

[SBC 2003] CHAPTER 63

6.    (1)    An organization must not;

(a)    collect personal information about an individual,

(b)    use personal information about an individual, or

(c)    disclose personal information about an individual; unless

the individual gives consent to the collection, use or disclosure.

7.    (2)    An organization must not, as a condition of supplying a product or service, require an individual to consent to the collection, use or disclosure of personal information beyond what is necessary to provide the product or service.

8.    (3)    An organization may collect, use or disclose personal information about an individual for specified purposes if;

(a)    the organization provides the individual with a notice, in a form the individual can reasonably be considered to understand, that it intends to collect, use or disclose the individual's personal information for those purposes,

(b)    the organization gives the individual a reasonable opportunity to decline within a reasonable time to have his or her personal information collected, used or disclosed for those purposes,

(c)    the individual does not decline, within the time allowed under paragraph (b), the proposed collection, use or disclosure, and

(d)    the collection, use or disclosure of personal information is reasonable  having regard to the sensitivity of the personal information in the circumstances.

10.   (1)    On or before collecting personal information about an individual from the individual, an organization must disclose to the individual verbally or in writing;

(a)    the purposes for the collection of the information, and

(b)    on request by the individual, the position name or title and the contact information for an officer or employee of the organization who is able to answer the individual's questions about the collection.