{"id":34535,"date":"2023-01-24T14:26:48","date_gmt":"2023-01-24T19:26:48","guid":{"rendered":"https:\/\/www.itworldcanada.com?p=523569"},"modified":"2023-01-25T09:25:53","modified_gmt":"2023-01-25T14:25:53","slug":"sidebar-pipedas-no-go-zones-for-businesses","status":"publish","type":"post","link":"https:\/\/technewsday.com\/staging\/sidebar-pipedas-no-go-zones-for-businesses\/","title":{"rendered":"Sidebar: PIPEDA\u2019s \u2018No-go\u2019 zones for businesses"},"content":{"rendered":"<p data-ar-index=\"0\">The federal Personal Information Protection and Electronic Documents Act (PIPEDA) applies to all businesses in Canada except those in B.C., Alberta, and Quebec.<\/p>\n<p data-ar-index=\"1\">The Office of the Privacy Commissioner of Canada (OPC) notes that PIPEDA states that any collection, use, or disclosure of personal information must only be for purposes that a reasonable person would consider appropriate in the circumstances.<\/p>\n<p data-ar-index=\"2\">PIPEDA is based on <a href=\"https:\/\/www.priv.gc.ca\/en\/privacy-topics\/privacy-laws-in-canada\/the-personal-information-protection-and-electronic-documents-act-pipeda\/p_principle\/\" rel=\"noopener\">10 fair principles<\/a> for the collection and use of personal data of employees, customers and partners. Three of these are, arguably, the most important:<\/p>\n<p data-ar-index=\"3\">\u2014 the knowledge and consent of the individual are required for the collection, use, or disclosure of personal information, <a title=\"gd_d1-d2_201703\" href=\"https:\/\/www.priv.gc.ca\/en\/privacy-topics\/privacy-laws-in-canada\/the-personal-information-protection-and-electronic-documents-act-pipeda\/r_o_p\/gd_d1-d2_201703\/\" data-udi=\"umb:\/\/document\/c11c3fae0a814bd0b1ec4d139a3f6b3f\">except where inappropriate;<\/a><\/p>\n<p data-ar-index=\"4\">\u2014 the collection of personal information must be limited to what is needed for the purposes identified by the organization. Information must be collected by fair and lawful means;<\/p>\n<p data-ar-index=\"5\">\u2014 unless the individual consents otherwise or it is required by law, personal information can only be used or disclosed for the purposes for which it was collected. Personal information must only be kept as long as required to serve those purposes.<\/p>\n<p data-ar-index=\"6\">To make it clearer, the OPC says the following purposes would generally be considered inappropriate \u2014 or, what it calls no-go zones \u2014 by a reasonable person:<\/p>\n<ul>\n<li>collecting, using, or disclosing personal information in ways that are otherwise unlawful;<\/li>\n<li>profiling or categorizing individuals in a way that leads to unfair, unethical, or discriminatory treatment contrary to human rights law;<\/li>\n<li>collecting, using, or disclosing personal information for purposes that are known to, or likely to, cause significant harm to the individual;<\/li>\n<li>publishing personal information with the intent of charging people for its removal;<\/li>\n<li>requiring employees to provide passwords to their social media accounts to employers for the purpose of employee screening; and<\/li>\n<li>conducting surveillance on an individual using their own device\u2019s audio or video functions.<\/li>\n<\/ul>\n<p data-ar-index=\"7\">The post <a href=\"https:\/\/www.itworldcanada.com\/article\/sidebar-pipedas-no-go-zones-for-businesses\/523569\">Sidebar: PIPEDA\u2019s \u2018No-go\u2019 zones for businesses<\/a> first appeared on <a href=\"https:\/\/www.itworldcanada.com\/\">IT World Canada<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A summation of what businesses can and can&#8217;t do under Canada&#8217;s national p<\/p>\n","protected":false},"author":17,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[361,16],"tags":[511],"class_list":["post-34535","post","type-post","status-publish","format-standard","hentry","category-privacy","category-security","tag-pipeda"],"acf":[],"_links":{"self":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/34535","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/comments?post=34535"}],"version-history":[{"count":2,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/34535\/revisions"}],"predecessor-version":[{"id":34592,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/posts\/34535\/revisions\/34592"}],"wp:attachment":[{"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/media?parent=34535"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/categories?post=34535"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/technewsday.com\/staging\/wp-json\/wp\/v2\/tags?post=34535"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}