Does your non-profit have a process for requests to access information from the non-profit?
A request for information is when someone asks for access to your non-profit’s records.
3
Is it active ?
Yes
Does your non-profit allow all of its workers and volunteers to access personal information?
Access means an worker or volunteer can view, copy, or share personal information. For example, storing worker personnel files on a computer that others can use is giving access.
Does your non-profit consider the purpose for disclosing personal information?
Purpose means the reason(s) for disclosing personal information. Non-profits may only disclose personal information (with consent) for those reasons.
Does your non-profit’s privacy policy explain that you may disclose personal information for legal reasons?
A privacy policy sets out how and when a non-profit may collect, use, disclose, and retain (store) personal information.
Does your non-profit know that it has to disclose personal information if "required by law"?
Required by law means some type of legal process requiring your non-profit to provide personal information as directed. Examples include subpoenas, warrants, and court/tribunal orders.
Does your non-profit get consent before disclosing personal information?
Consent is permission. It means a person voluntarily agreed to the collection of their unique information. Consent can be express or implied.
Does your non-profit ever disclose personal information?
Disclose means to make personal information available to a third person or other organization. For example, sharing an email list of names and phone numbers is a disclosure of the personal information of everyone on the list.
Does your non-profit collect worker information only for reasons related to employment?
Reasons related to employment include establishing, managing, and ending employment. Examples include collecting information about previous employment and maintaining personnel files, including records of disciplinary action.