D. ACCURACY AND CORRECTION KEY REQUIREMENTS:

Take reasonable steps to ensure personal information is not used or disclosed unless it is accurate, full and up-to-date.

Ensure that every individual is able to: o correct their personal information, o have a statement of disagreement attached to the personal information if the correction is not made and o require a notice of the correction or the statement of disagreement to be sent to anyone to whom the personal information was disclosed within the year before the above action was taken.

See sections 30(2) and 36 of MFIPPA and 40(2) and 47 of FIPPA.

FINDINGS PRIVACY REQUIREMENT Y N IP NA EXPLANATION PRIVACY IMPACT ACTION ITEMS QUESTIONS STANDARD OF ACCURACY Will there be measures in place to make sure personal information is not used, unless it is accurate, complete and up-to-date? Provide details of measures. CORRECTING THE PERSONAL INFORMATION Will there be a defined and documented process for the processing of a request for the correction of personal information? Provide details of process. CORRECTION REQUESTS/STATEMENT OF DISAGREEMENT Will there be a defined and documented process for individuals to request the correction of their personal information? Provide details of process. CONTROLS Will controls be in place to ensure that only authorized personnel will be able to add, change or delete personal information? Will there be periodic reviews of the controls to ensure effectiveness