only collect for lawful purpose and when necessary
should be collected from the individual collected
subject must know why, how, who, and their rights of the information collection
Collection can't be unlawful or unfair
agency must ensure that info is protected from loss, misuse or access from others
Individual entitled to access info and to know if agency still has info or not
individual entitled to request correction and have correction statement attached to information
information can't be used unless ensured to be accurate, up to date, and complete
agency not to keep info for longer than required
agency not to use info for anything other than its required purpose
agency not to disclose info to any person, body, or agency
only disclose to foreign body if certain grounds are established
not to assign numbers to individuals unless necessary
Breach of the Act
- Notify Privacy Commissioner
- Notifiable Breach: privacy breach + reason to believe it is likely to cause harm
- not applied to personal or domestic matters
- monitor operation of Act
- conduct audits of agencies
- deal w/ complaints, investigations and proceedings