|
The Personal Information Protection and Electronic Documents Act (PIPEDA or the PIPED Act) is a Canadian law relating to data privacy. It governs how private sector organizations collect, use and disclose personal information in the course of commercial business. In addition, the Act contains various provisions to facilitate the use of electronic documents. PIPEDA became law on 13 April 2000 to promote consumer trust in electronic commerce. The act was also intended to reassure the European Union that the Canadian privacy law was adequate to protect the personal information of European citizens. In accordance with section 29 of PIPEDA, Part I of the Act ("Protection of Personal Information in the Private Sector") must be reviewed by Parliament every five years.〔Section 29 of (the Act )〕 The first Parliamentary review occurred in 2007.〔(PIPEDA Review – Privacy Commissioner of Canada )〕 PIPEDA incorporates and makes mandatory provisions of the Canadian Standards Association's Model Code for the Protection of Personal Information, developed in 1995. However, there are a number of exceptions to the Code where information can be collected, used and disclosed without the consent of the individual. Examples include reasons of national security, international affairs, and emergencies. Under the act, personal information can also be disclosed without knowledge or consent to investigations related to law enforcement, whether federal, provincial or foreign.〔Section 7, subparagraph (3)(c.1)(ii) of (the act )〕 There are also exceptions to the general rule that an individual shall be given access to his or her personal information. Exceptions may include information that would likely reveal personal information about a third party, information that cannot be disclosed for certain legal, security, or commercial proprietary reasons, and information that is subject to solicitor-client privilege.〔Subsection 9(3) of (the Act )〕 ==Overview== "Personal Information", as specified in PIPEDA, is as follows: information about an identifiable individual, but does not include the name, title or business address or telephone number of an employee of an organization. The law gives individuals the right to * know why an organization collects, uses or discloses their personal information; * expect an organization to collect, use or disclose their personal information reasonably and appropriately, and not use the information for any purpose other than that to which they have consented; * know who in the organization is responsible for protecting their personal information; * expect an organization to protect their personal information by taking appropriate security measures; * expect the personal information an organization holds about them to be accurate, complete and up-to-date; * obtain access to their personal information and ask for corrections if necessary; and * complain about how an organization handles their personal information if they feel their privacy rights have not been respected. The law requires organizations to * obtain consent when they collect, use or disclose their personal information; * supply an individual with a product or a service even if they refuse consent for the collection, use or disclosure of your personal information unless that information is essential to the transaction; * collect information by fair and lawful means; and * have personal information policies that are clear, understandable and readily available. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「Personal Information Protection and Electronic Documents Act」の詳細全文を読む スポンサード リンク
|