The Scotiabank Group Member limits the amount and type of personal information it collects. Each Scotiabank Group Member will collect personal information for the purposes it identifies to the customer. The Scotiabank Group Member collects personal information using policies and procedures which are fair and lawful.

4.1 The Scotiabank Group Member will collect only the amount and type of information needed for the purposes documented by the Scotiabank Group Member and identified to the customer.

4.2 Although the Scotiabank Group Member will collect personal information primarily from customers, it may also collect it from external sources such as credit bureaus, employers, land registries, other lenders, and with regards to insurance products, medical information bureaus, brokers, insurers, the Insurance Crime Prevention Bureau, insurer's advisory organizations, underwriting and claims information networks, and attending physicians.