privacy protection policy

---

 There are a number of requirements to comply  with the law. Organizations covered by PIPEDA must generally obtain an  individual's consent when they collect, use or  disclose that  individual's personal information. People have the right  to access  their personal information held by an organization. They also  have the  right to challenge its accuracy. 

What is personal information? Under  PIPEDA,  personal information includes any factual or subjective  information,  recorded or not, about an identifiable individual. This  includes  information in any form, such as:

• age, name, ID numbers, income, ethnic origin, or blood type;
• opinions, evaluations, comments, social status, or disciplinary actions; and
• employee files, credit records, loan records, medical records,   existence of a dispute between a consumer and a merchant, intentions   (for example, to acquire goods or services, or change jobs).

Application of PIPEDA: PIPEDA  applies to organizations that collect, use or disclose  personal  information in the course of commercial activities, including  federal  works, undertakings and businesses. Given the nature of their   activities, this would include private sector lawyers and law firms,  and  in many cases, their clients.