USE KEY REQUIREMENTS:

For each use of personal information, ensure that all parties involved in the project, for example, your institution, partners and other third parties, use personal information only with the authority to do so. o Is the use for the purpose it was collected or for a consistent purpose?14 o Is the use authorized by the individual to whom it relates? o Does the use comply with another statute? o Is the use for other purposes permitted by M/FIPPA?

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3999529/pdf/policy-08-087.pdf

FINDINGS PRIVACY REQUIREMENT Y N IP NA EXPLANATION PRIVACY IMPACT ACTION ITEMS QUESTIONS AUTHORITY Has the purpose of the collection been defined? What is the purpose of the collection? PURPOSE(S) OF USE Has the purpose of the use been defined? Explain purpose(s) Will personal information be used for other purposes? Will uses of personal information be for purposes stated in the notice of collection or for a consistent purpose? MANNER OF USE Have all parties using personal information been defined, for example, program staff, consultants, agents, third party service providers, etc.? CONTROLS Will there be procedural, technical, and physical measures in place to ensure personal information will be used only for authorized purposes and by authorized parties? Explain measures Will there be periodic reviews of the use controlsto ensure effectiveness? DATA MINIMIZATION Is use of all the personal information necessary for the project to proceed? Why or why not