Add to clipboard  Print this page

Ten Privacy Principles

ASEBP has always been and will continue to be, committed to maintaining the accuracy, confidentiality, and security of your personal information.  This commitment is reflected by the Canadian Standards Association's Ten Privacy Principles which outline the values set by Alberta's Personal Information Protection Act and Canada's Personal Information Protection and Electronic Documents Act.

Principle 1 – Accountability
ASEBP is responsible for maintaining and protecting the customer information under its control. In fulfilling this mandate, we are required to designate an individual who is accountable for our compliance with the Ten Privacy Principles.

Principle 2 - Identifying Purposes
The purposes for which customer information is collected shall be identified before or at the time the information is collected.

Principle 3 – Consent
The knowledge and consent of the customer are required for the collection, use or disclosure of customer information except where required or permitted by law.

Principle 4 - Limiting Collection
The customer information collected must be limited to those details necessary for the purposes identified by ASEBP. Information must be collected by fair and lawful means.

Principle 5 - Limiting Use, Disclosure and Retention
Customer information may only be used or disclosed for the purpose for which it was collected unless the customer has otherwise consented, or when it is required or permitted by law. Customer information may only be retained for the period of time required to fulfill the purpose for which it was collected.

Principle 6 – Accuracy
Customer information must be maintained in as accurate, complete and up-to-date form as is necessary to fulfill the purposes for which it is to be used.

Principle 7 - Safeguarding Customer Information
Customer information must be protected by security safeguards that are appropriate to the sensitivity level of the information.

Principle 8 – Openness
ASEBP is required to make information available to customers concerning the policies and practices that apply to the management of their information.

Principle 9 - Customer Access
Upon request, a customer shall be informed of the existence, use and disclosure of their information, and shall be given access to it. Customers may verify the accuracy and completeness of their information, and may request that it be amended, if appropriate.

Principle 10 - Handling Customer Complaints and Suggestions
Customers may direct any questions or enquires with respect to the privacy principles outlined above or about our practices by contacting the designated person accountable for privacy at ASEBP.