7.1 Safeguards Must Protect against All Possible Threats The security safeguards shall protect personal information against loss or theft, as well as unauthorized access, use, copying, modification, disclosure or disposal. The credit union shall protect personal information regardless of the format in which it is held. 7.2 Safeguards Must Reflect Sensitivity The nature of the safeguards will vary depending on the sensitivity, amount, distribution and format of the information, and the method of storage. More sensitive information will be safeguarded by a higher level of protection. 7.3 Methods of Safeguards The methods of protection will include: physical measures, for example, locked filing cabinets and restricted access to offices; organizational measures, for example, controlling entry to data centres and limiting access to information to a "need-to-know" basis; technological measures, for example, the use of passwords and encryption; and investigative measures, in cases where the credit union has reasonable grounds to believe that personal information is being inappropriately collected, used or disclosed. 7.4 Reminding Employees about Safeguards The credit union shall periodically remind employees, officers and directors of the importance of maintaining the confidentiality of personal information. Employees, officers and directors are individually required to sign an Oath of Ethical Conduct annually, including commitment to keep member's personal information in strict confidence. 7.5 Third Party Safeguards Parties shall be required to safeguard personal information disclosed to them in a manner consistent with the policies of the credit union. Examples include cheque printing, data processing, credit collection, credit bureaus and card production. 7.6 Destruction of Personal Information Care shall be taken in the disposal or destruction of personal information, to prevent unauthorized parties from gaining access to the information.
7.1 Safeguards Must Protect against All Possible Threats The security safeguards shall protect personal information against loss or theft, as well as unauthorized access, use, copying, modification, disclosure or disposal. The credit union shall protect personal information regardless of the format in which it is held. 7.2 Safeguards Must Reflect Sensitivity The nature of the safeguards will vary depending on the sensitivity, amount, distribution and format of the information, and the method of storage. More sensitive information will be safeguarded by a higher level of protection. 7.3 Methods of Safeguards The methods of protection will include: physical measures, for example, locked filing cabinets and restricted access to offices; organizational measures, for example, controlling entry to data centres and limiting access to information to a "need-to-know" basis; technological measures, for example, the use of passwords and encryption; and investigative measures, in cases where the credit union has reasonable grounds to believe that personal information is being inappropriately collected, used or disclosed. 7.4 Reminding Employees about Safeguards The credit union shall periodically remind employees, officers and directors of the importance of maintaining the confidentiality of personal information. Employees, officers and directors are individually required to sign an Oath of Ethical Conduct annually, including commitment to keep member's personal information in strict confidence. 7.5 Third Party Safeguards Parties shall be required to safeguard personal information disclosed to them in a manner consistent with the policies of the credit union. Examples include cheque printing, data processing, credit collection, credit bureaus and card production. 7.6 Destruction of Personal Information Care shall be taken in the disposal or destruction of personal information, to prevent unauthorized parties from gaining access to the information.
Appendiz-C-Model-Privacy-Code.docx