This topic reviews the rules we in government must follow when collecting personal information and personal health information.
To provide services in government we often need to collect personal information about individuals. Sometimes we collect that information directly from individuals (e.g. the person completes an application) and sometimes we collect it indirectly from someone else (e.g. from another government department to provide an intersectoral service).
The Access to Information and Protection of Privacy Act provides rules to follow before we collect personal information. Remember the following:
Limit collection of personal information to legitimate purposes. Check the Act for the rules to follow.
The purpose for collection should be documented. This documentation can help ensure appropriate collection and can be shared with individuals to explain why their personal information is collected and how it will be used and disclosed.
Government cannot collect personal information unless proper authority exists. The Access to Information and Protection of Privacy Act or program specific statutes may provide that authority.