Privacy PolicyA. IntroductionThe purpose of this Privacy Policy (the “Policy”) is to outline Farris’ obligations with respect to the proper collection, use and disclosure of personal information of clients and third parties in compliance with British Columbia’s Personal Information Protection Act (“PIPA”). Farris recognizes and respects the importance of privacy and the sensitivity of its clients’ personal information. Farris will continue to review this Policy to make sure that it is relevant and remains current with changing standards in the legal profession and the law. B. Definitions“ business contact information” means information that enables an individual to be contacted at work, including his/her name, title, business address, business telephone number, fax number and e-mail address. “Farris” means Farris, Vaughan, Wills and Murphy & Farris Management Limited Partnership. “personal information” means personally identifiable information about clients and third parties, but does not include business contact information or work product information. “work product information” means information prepared or collected by an individual or group of individuals as part of their employment or business responsibilities or activities related to their employment or business. C. Scope and Application of this PolicyThis Policy applies to all personal information of clients, employees, suppliers, agents, contractors, partners and affiliated entities and other third parties that is collected, used or disclosed by Farris. This Policy does not, however, impose any limits on the collection, use and disclosure of:
D. Purpose for CollectionFarris collects personal information for the following purposes:
E. ConsentFarris requires the informed consent of individuals to collect, use or disclose any personal information, subject to certain exceptions discussed below. Consent can be express, implied or given through an authorized representative and may be given orally, in writing or electronically depending on such factors as the sensitivity of the personal information, applicable time limitations and the reasonable expectations of the client or third party. By retaining Farris to provide legal services, an individual consents to the collection, use and disclosure of personal information by Farris in order to properly advise the individual. If possible, Farris will seek consent to use and disclose the personal information at the same time as it collects the personal information. After the personal information has been collected, Farris may want to use the personal information for a new purpose. In such circumstances, Farris will not use or disclose personal information for the new purpose without obtaining the consent of the individual concerned, unless permitted or authorized by law. Subject to contractual or legal arrangements, an individual may withdraw or refuse consent. In such circumstances, Farris will stop collecting, using and disclosing the personal information of such individual. Farris will inform such individual of the likely consequences of withdrawing his or her consent, if any. Farris can collect, use or disclose personal information without an individual’s knowledge or consent in the following circumstances:
F. Limiting Collection of Personal InformationFarris will only collect personal information that is necessary for purposes disclosed above or disclosed at or before the time of collection or as permitted by law. Farris will collect personal information only by fair and lawful means. Where practical, Farris will collect personal information directly from the individual to whom the information relates. When necessary or as otherwise permitted by PIPA, Farris may collect personal information from other sources. G. Limiting Use, Disclosure and Retention of Personal InformationFarris will only use or disclose personal information for the purpose for which it was collected, subject to the consent of the individual or as permitted or required by law. Under some circumstances, Farris may have a legal obligation or right to disclose personal information without an individual’s consent. Farris may disclose an individual’s personal information:
Farris will retain personal information for only as long as is necessary for the purposes for which it was collected, for legal or business purposes or as required by law. Subsequently, such information will be destroyed, erased or made anonymous in accordance with established procedures. H. Accuracy of Personal InformationFarris will make reasonable efforts to ensure that personal information in its control is as accurate, complete and current as required for the purposes for which it was collected and will minimize the possibility that incorrect personal information may be used to make a decision about a client or third party or may be disclosed to a third party. However, Farris will not routinely update other personal information unless it is necessary to fulfill the purposes for which it was collected. I. Safeguarding Personal InformationFarris will protect personal information in its control against risks of loss, theft, unauthorized access, disclosure, copying, use, modification or destruction by security safeguards that are appropriate to the sensitivity of the information. Farris will use appropriate security measures when destroying or disposing of personal information to prevent unauthorized access, use and disclosure of such information. J. Access and CorrectionClients and third parties have a right to make a written request for access to their personal information in the control of Farris. Farris will, within 30 days, or such other time period if Farris has obtained an extension under PIPA, inform the individual of the personal information about that individual in its possession, what it is being used for, and where reasonably possible, to whom it has been disclosed. If Farris is granted an extension under PIPA to respond to a request to view personal information, it will notify the individual of the reason for the extension, the time when a response can be expected and the right of the individual to complain about the extension to British Columbia’s Information and Privacy Commissioner. The reasons for not providing access to personal information may include that the personal information:
If an individual’s request for access to personal information is rejected by Farris, Farris will:
Farris reserves the right to charge a reasonable fee for access to personal information that will vary with the type and amount of information requested. Where a cost will be incurred by the requesting individual, Farris will inform the individual of the cost and request further direction from the individual on whether or not Farris should proceed with the request. In some circumstances, Farris will require a deposit for all or part of the fee. Individuals may request corrections to their personal information in the control of Farris. Where appropriate, Farris will send the amended information to third parties having access to the information in question. If an individual’s request for correction is rejected by Farris, Farris will make a notation of such request and rejection on the individual’s file or personal information. K. Questions and ComplaintsQuestions and complaints relating to this Policy and Farris’ handling of an individual’s personal information should be directed in writing to Farris’ Personal Information Officer or any other person designated for this purpose by Farris. Farris will investigate the complaint and notify the complainant of the results of the investigation. If Farris does not address the individual’s concerns to the satisfaction of the individual, the individual may ask for a review of Farris’ decision or make a complaint to the British Columbia Information and Privacy Commissioner. L. Personal Information OfficerFarris’ Personal Information Officer may be contacted at: Office of the Personal Information Officer M. Address of British Columbia’s Information and Privacy CommissionerBritish Columbia’s Information and Privacy Commissioner may be contacted at: Office of the Information and Privacy Commissioner for British Columbia |
||||