Privacy Policy and Procedures
The Personal Information Privacy and Electronics Document Act will affect private organizations as of January 2004. What does this mean? In a nutshell, any organization that collects information on their customers, potential customers, suppliers, pr employees will be held accountable for how that information is collected, stored, disclosed and disbursed.
Privacy has become a very important concern to individuals, who is viewing my information, why are they seeing it and how will it affect me. As a way to increase individuals confidence in organizations, a privacy policy and procedures would ensure that confidential information is not disbursed to third parties.
This, which goes hand in hand with a security audit is a very detailed and time consuming exercise and requires the commitment of senior management.