Accountability: OSCR is responsible for personal information under its control and has designated a person who is accountable for compliance.
Identifying Purposes: The purpose for collection must be identified at the time of, or prior to, collection.
Consent: The client’s knowledge and consent to our collection and use of personal information is required. This is explained to the client at move in, and the client’s signature will have been obtained.
Limited Collection: Collection of personal information is limited to that which is necessary for the purposes identified.
Limit Use, Disclosure, Retention: Personal information is not used for purposes other than those for which it was collected, except with consent.
Accuracy: Personal information shall be as accurate, complete and up-to-date as is necessary for the purposes for which it is to be used.
Safeguards: Personal information is protected by security safeguards appropriate to the sensitivity of the information.
Openness: Specific information about policies and procedures relating to OSCR's management of personal information is available to you. Contact the Privacy Officer.
Individual Access: The client may request information about the existence, use and disclosure of the personal information, and may access it. The client may challenge the completeness or accuracy of the information, and have it amended as appropriate.
Challenging Compliance: The client may address a challenge concerning compliance with the above principles to the Privacy Officer.