Saturday, August 20, 2011 6:37 pm, Posted by Absolute Destruction
Most Canadian business leaders understand the devastation that can occur to their business if there was a security breach that resulted in the theft of confidential documents. Consequences of an information breach can include: permanently damaged reputation, loss of sales and profits, and costly lawsuits. In Canada, businesses are legally obligated implement measures that will minimize the chance of a security breach. Canadian legislators have established a legal framework to make sure businesses, government agencies, and other organizations, implement the essential security protocols to protect sensitive information from theft, loss, and misuse.
In Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) protect personal information that is in the possession of private sector organizations. This Act provides the guidelines for the collection, use, and disclosure of that information in the course of commercial activity. The Personal Information Protection and Electronic Documents Act is governed by the Privacy Commissioner of Canada, and applies to organizations and businesses located in provinces without substantially similar legislation. “Substantially similar” means that a provincial privacy law incorporates the 10 principles of PIPEDA and provides for effective oversight and redress mechanism and contains a reasonable purpose test.
PIPEDA places the responsibility to protect information on the organization that collects the information. As of 2010, only Alberta, BC, and Quebec have considerably similar legislation. As of January 1, 2004, Canadian organizations engaged in commercial activity are required to comply with the Act's 10 privacy principles. Principles 5 and 7 (Schedule 1, Section 5 of PIPEDA) relate to document retention and destruction. Personal information that is no longer required to fulfill the identified purposes should be destroyed, erased or made anonymous. Organizations shall develop guidelines and implement procedures to govern the destruction of personal information.
The Act applies to all commercial activities. The Act does not extend to employment unless the organization is a federal work undertaking or business. Provincial laws govern the treatment of employee information.
PIPEDA was developed in response to the need for privacy protection in the private sector. Companies and other organizations have an easy and affordable way to meet government regulations outlined in PIPEDA. Organizations can meet and exceed the Act's mandates by using the services of a Canada Document Shredding Company. A document has established an efficient security process to ensure all sensitive documents are shredded permanently without the risk of being lost or stolen. Organizations have the option of choosing on-site and off-site shredding. Both are equally secure, however, on-site shredding is chosen due to its convenience and the papers are shredded on location using an industrial shredding the machine that the company has brought on their truck. This shredding method means the documents have shredded the papers permanently. In addition, customers are provided with a Certificate of Document Destruction after the shredding is complete. This certificate is legal verification that the documents were properly destroyed.
To protect your company from expensive lawsuits, personal identity theft, fraud, and corporate espionage, it is essential to use the services of a document shredding company. It will not only provide peace of mind, but your business will meet the guidelines established in the Personal Information Protection and Electronic Documents Act.