True or False? PIPEDA applies to personal information collected, used or disclosed by the retail sector, publishing companies, the service industry, manufacturers and other provincially regulated organizations.

True or False? The Office of the Privacy Commissioner of Canada defines the right to privacy as, not having the right to control access to one’s person and information about oneself.

True or False? Personal information about an identifiable individual includes, for example, age, name, ID numbers, income, and ethnic origin, blood type, and credit records.

True or False? The five major aspects for a business in gathering and using personal information are collection, use, disclosure, data security and storage, and disposal.

True or False? When conducting business it is not important to verify that customers or clients are whom they say they are by checking signatures on cards, and as appropriate, ask for photo ID.

Margaret works in a call centre at the local utility company. Bob Smith calls her to discuss his neighbour’s bill and asks what the amount of arrears is. Mr. Smith has provided Margaret with his neighbour’s address and telephone number. Margaret checks the account and notes that there is no signed consent on the file giving permission to release the customer’s billing information. Should Margaret give Mr. Smith the information he requests?

Sam is a procurement clerk and as part of his work duties he sets up new suppliers in the company’s database. Once the form is filled out by the supplier, Sam enters all contact information including banking information for processing supplier’s payments using Electronic Funds Transfers. Sam is concerned that the completed forms he processes are filed in an unlocked cabinet that is accessible to all staff and customers. What would you recommend Sam do?