|
Principle #1: Accountability
Enerplus is accountable for all personal information in its possession or custody, including any personal information collected, used or disclosed by or to third parties for processing or other business functions under contract to Enerplus.
Enerplus has established policies and procedures to comply with this code, and has designated persons to be accountable for compliance.
Principle #2: Identifying Purposes
Where reasonable, Enerplus will identify the purposes for which it collects, uses or discloses personal information before or when it collects the information.
Principle #3: Consent
Enerplus will make reasonable efforts to ensure that clients and staff understand that personal information is being collected about them and used for specified purposes.
Enerplus will obtain appropriate consent from clients, staff and other individuals before or when it collects, uses, or discloses their personal information, unless otherwise permitted or required by law. Consent can be express, implied, or given through an authorized representative. Enerplus will respect an individual's right to withdraw consent, subject to certain limitations.
Principle #4: Limited Collection of Personal Information
Enerplus will endeavor to collect only the optimal amount and type of personal information necessary to meet identified business purposes, and no more.
Principle #5: Limited Use and Disclosure of Personal Information
Enerplus will use and disclose personal information only for the reasons for which it was collected, unless the individual gives consent to use or disclose it for another reason, or it is permitted or required by law.
Enerplus will endeavor to keep personal information only as long as necessary for the identified purposes for which it was collected or to meet certain legal requirements.
Principle #6: Accuracy of Information
Enerplus will keep personal information as accurate, complete and up-to-date as necessary for the identified purposes for which it was collected. Individuals may, in writing, challenge the accuracy and completeness of their personal information and request that it be amended.
Principle #7: Safeguarding Personal Information
Enerplus protects personal information with safeguards appropriate to the sensitivity of the information.
Principle #8 Availability of Policies and Procedures
Enerplus is open about the policies and procedures it uses to manage personal information. Clients, staff and other individuals have access to information about these policies and procedures. The information will be made available in a manner that is reasonably easy to understand.
Principle #9 Access to Personal Information
Enerplus will provide individuals with access to their own information when they request it in writing, subject to some legal limitations. In cases where such limitations apply, Enerplus will provide an explanation for restricting access and inform the individual how they can exercise their right to challenge the restriction.
Principle #10: Complaints and Questions
Individuals may challenge Enerplus compliance with this charter. Enerplus shall maintain policies and procedures to receive, investigate, and respond to any complaints and questions.
|
