Serves under-18s, in British Columbia

Personal Information Protection Act, S.B.C. 2003, c. 63 · Read the law's page

• Do not collect, use or disclose personal information about an individual without the individual's consent, unless the Act authorizes it without consent or deems the consent given. Consent obtained by false or misleading information, or by deceptive or misleading practices, is not validly given.
• Do not require an individual to consent to the collection, use or disclosure of personal information beyond what is necessary to provide a product or service, as a condition of supplying it.
• On or before collecting personal information from an individual, disclose the purposes of the collection verbally or in writing and, on request, the position name or title and contact information of an officer or employee who can answer the individual's questions. This does not apply to a collection covered by implicit consent under section 8 (1) or (2).
• Collect, use and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances and that fulfil the purposes you disclosed or are otherwise permitted by the Act.
• Personal information available to the public may be collected, used or disclosed without consent on that basis only from a source the Regulations prescribe: a telephone directory or directory assistance service, a professional or business directory, a registry to which the public has a right of access, or a printed or electronic publication that is available to the public, on the conditions the Regulations state.
• Do not collect, use or disclose personal information from a publication where a court has prohibited its publication or the commissioner has ordered that the information was published contrary to the Act.
• Designate one or more individuals to be responsible for ensuring that you comply with the Act, and make their position names or titles and contact information available to the public. You remain responsible for personal information under your control, including information not in your custody.
• Develop and follow the policies and practices you need to meet the Act, develop a process for responding to complaints, and make information about both available on request.
• On an individual's written request, give them their personal information under your control, the ways it has been and is being used, and the names of the individuals and organizations it has been disclosed to, subject to the exceptions and prohibitions in section 23.
• Correct an error or omission in an individual's personal information when satisfied on reasonable grounds that a correction request should be implemented, send the corrected information to each organization it was disclosed to during the previous year, and annotate the information with the correction requested when you make none.
• On reasonable notice, allow an individual to withdraw consent at any time, tell them the likely consequences of withdrawing, and then stop collecting, using and disclosing the information unless the Act permits it without consent. An individual may not withdraw consent where doing so would frustrate the performance of a legal obligation.
• Protect personal information in your custody or under your control by making reasonable security arrangements against unauthorized access, collection, use, disclosure, copying, modification or disposal or similar risks.
• Keep personal information you used to make a decision that directly affects an individual for at least one year after using it, so that the individual has a reasonable opportunity to obtain access to it.
• Destroy documents containing personal information, or remove the means by which it can be associated with particular individuals, as soon as it is reasonable to assume that the purpose of collection is no longer served and retention is no longer necessary for legal or business purposes.
• Comply with an order of the commissioner not later than 30 days after being given a copy, unless an application for judicial review is brought before that period ends.