People Corporation has policies in place with respect to privacy and accessibility, applicable to all entities and divisions. Full details are provided below.
The central concepts of PIPEDA are Knowledge and Consent. Under PIPEDA, organizations are required to obtain the consent of individuals before acquiring and handling their personal information. In obtaining consent, it is the responsibility of the organization to identify the purpose(s) for which the personal information is being collected, as well as how it will be used, disclosed, etc., when the information is collected. The use or disclosure of such information is limited only to those purposes consented to by the individual.
Enrolment and claims information will be collected from plan sponsors for their plan members:
Enrolment and other plan member records will be secured in locked cabinets while on People Corporation premises. Such documentation will be retained for a reasonable period of time after the member has left the plan, or after the plan has terminated, to ensure any and all outstanding claims can be adjudicated in accordance with the plan design. When documentation is destroyed it will be shredded.
The following process will be used when responding to Privacy Act complaints:
A copy of the complaint, the investigation report, the outcome, along with a record showing the completion of any required remedial steps will be retained by People Corporation and will be made available to the Privacy Commission at their request.