|
These ten principles of privacy are interrelated and must be read in conjunction with the accompanying commentary.
Principle #1: The Scotiabank Group Member's Accountability
The Scotiabank Group Member is accountable for all personal information in its possession or custody, including any personal information disclosed to third parties for processing or other administrative functions. Each Scotiabank Group Member has established policies and procedures to comply with this code, and has designated one or more persons to be accountable for compliance.
Principle #2: Identifying the Purposes of Collecting Personal Information
The Scotiabank Group Member will identify the purposes for which it collects the personal information, before or when the information is collected.
Principle #3: Getting the Customer's Consent
The Scotiabank Group Member will make a reasonable effort to make sure customers understand how their personal information will be used by the Scotiabank Group Member. The Scotiabank Group Member will obtain consent from its customers before or when it collects or uses the personal information. The Scotiabank Group Member will not attempt to deceive a customer into giving consent.
A customer's consent can be express, implied, or given through an authorized representative. A customer can withdraw consent at any time, with certain exceptions. The Scotiabank Group Member, however, may collect, use or disclose personal information without the customer's knowledge or consent in exceptional circumstances where such collection, use or disclosure is permitted or as required by law.
Principle #4: Limits for Collecting Personal Information
The Scotiabank Group Member limits the amount and type of personal information it collects. Each Scotiabank Group Member will collect personal information for the purposes it identifies to the customer. The Scotiabank Group Member collects personal information using policies and procedures which are fair and lawful.
Principle #5: Limits for Using, Disclosing and Keeping Personal Information
The Scotiabank Group Member will use or disclose personal information only for the reasons it was collected, unless a customer gives consent to use or disclose it for another reason, or it is permitted or required by law.
Under certain exceptional circumstances, the Scotiabank Group Member has a legal duty or right to disclose personal information without customer knowledge or consent to protect matters which include the Scotiabank Group Member's or the public interest.
The Scotiabank Group Member will keep personal information only as long as necessary for the identified purposes for which it was collected.
Principle #6: Keeping Personal Information Accurate
The Scotiabank Group Member will keep personal information as accurate, complete and current as necessary for the identified purposes for which it was collected.
Customers may, in writing, challenge the accuracy and completeness of their personal information and request that it be amended as appropriate.
Principle #7: Safeguarding Personal Information
The Scotiabank Group Member protects personal information with safeguards appropriate to the sensitivity of the information.
Principle #8: Making Information About Policies and Procedures Available to Customers
The Scotiabank Group Member is open about the policies and procedures it uses to manage personal information. Customers have access to information about these policies and procedures. The information will be made available in a manner that is generally easy to understand.
Principle #9: Customer Access to Personal Information
When customers make a request in writing, the Scotiabank Group Member will within a reasonable time tell them what personal information the Scotiabank Group Member has, what it is being used for, and to whom it has been disclosed.
When customers request it in writing, the Scotiabank Group Member will give them access to their personal information. The Scotiabank Group Member will respond to the written request in a timely fashion. In certain situations, however, the Scotiabank Group Member may not be able to give customers access to all their personal information. The Scotiabank Group Member will explain the reasons for this lack of access and any recourse the customer may have, except where prohibited by law.
Principle #10: Handling Complaints and Questions
Customers may challenge the Scotiabank Group Member's compliance with this code. The Scotiabank Group Member has policies and procedures to receive, investigate, and respond to customers' complaints and questions.
|
