A.1 Preamble
A.2 Purpose
A.3 Overview
B. Explanatory notes concerning the Checklist questions
Control and
accountability
Transborder data flows
Collection of personal information
(sections 4 and 5 of the Privacy Act)
Accuracy of personal information
(subsection 6(2) of the Privacy Act)
Use of personal information (section 7 of
the Privacy Act
Disclosure of personal information
(section 8 of the Privacy Act)
Requests for information (section 12 of
the Privacy Act and section 4 of the Access to Information Act)
Correction of personal information
(paragraph 12(2)(a) of the Privacy Act)
Retention of records or personal
information (subsection 6(1) of the Privacy Act and subsections 4(1) and
(2) of the Privacy Regulations)
Protection of personal information
(sections 6, 7, and 8 of the Privacy Act and the Government Security
Policy)
Complaints and investigations (section 30
of the Access to Information Act and section 29 of the Privacy Act)
Audit and inspection of records or
personal information
Notification of breach
Subcontracting
Termination or expiry of the contract