A Legal Guide to PRIVACY AND DATA SECURITY 2025

Principle 6 — Accuracy Personal information shall be as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used. Principle 7 — Safeguards Personal information shall be protected by security safeguards appropriate to the sensitivity of the information. Principle 8 — Openness An organization shall make readily available to individuals specific information about its policies and practices relating to the management of personal information. Principle 9 — Individual Access Upon request, an individual shall be informed of the existence, use, and disclosure of his or her personal information and shall be given access to that information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate. Principle 10 — Challenging Compliance An individual shall be able to address a challenge concerning compliance with the above principles to the designated individual or individuals accountable for the organization’s compliance. There is little difference between the privacy principles of the EU and Canada. Canada Anti-Spam Law [SC 2010,C23] Effective July 1, 2014, Canada enacted one of the strictest laws intended to discourage unsolicited emails from businesses. The Canada Anti-Spam Law (CASL) broadly prohibits the sending of any electronic message that encourages participation in a commercial activity. CASL includes an opt- in regime that has serious ramifications for any business that promotes their products or services in Canadian markets. The definition of “electronic message” includes emails, text messages, phone calls, instant messaging, and social media. There are some exceptions for express or

159

Made with FlippingBook - Online Brochure Maker