The ACPBA Code of Privacy incorporates the ten interrelated principles of the Canadian Standards Association (CSA) Model Code for the Protection of Personal Information. Each principle is a core element in the ACPBA Code of Privacy.

1. ACCOUNTABILITY

The ACPBA is responsible for personal information under its control and shall designate an individual or individuals who are accountable for the organization's compliance with the ten principles.

2. IDENTIFYING PURPOSES

The purposes for which personal information is collected by the ACPBA shall be identified at or before the time the information is collected.

The purpose for which the ACPBA collects personal information is to allow for communication between the members and the Association’s Executive, corporate partners and highland game committees.

3. CONSENT

The knowledge and consent of the individual are required for the collection, use or disclosure of personal information, except where required by law.

4. LIMITING COLLECTION

The collection of personal information shall be limited to that which is necessary for the purposes identified by the ACPBA. Information shall be collected by fair and lawful means.

5. LIMITING USE, DISCLOSURE, AND RETENTION

Personal information shall not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal information shall be retained only for as long as necessary to fulfill the purpose for which it was collected.

At no time will the Association sell or rent the personal information of its membership.

6. ACCURACY

Personal information shall be maintained in as accurate, complete, and up-to-date form as is necessary for the purposes for which it is to be used.

The ACPBA will ensure to the best of their ability that the personal information they collect, use, and disclose is accurate, complete, current, and relevant to the stated purpose.

7. SAFEGUARDS

Security safeguards appropriate to the sensitivity of the information shall protect personal information.

Members will ensure that personal information is stored in secure electronic and hard copy files. Hard copy files will be stored in locked file cabinets with restricted access. Electronic files will be stored in secure systems that include power-on password protection and a secure firewall. Electronic files will be encrypted with an industry standard encryption program before being transferred electronically. Distribution of personal information will be on a need-to-know basis.

8. OPENNESS

The ACPBA will make readily available to individuals specific information about its policies and practices relating to the management of personal information.

The ACPBA will make available to the public easily understandable information about the Association, its Constitution and Bylaws, this Code of Privacy, both in hard copy and on its website.

9. INDIVIDUAL ACCESS

Upon request, an individual shall be informed of the existence, use, and disclosure of his or her personal information and shall be given access to that information. An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate.

10. CHALLENGING COMPLIANCE

A member shall be able to address a challenge concerning compliance with the above principles to the designated individual or individuals accountable for the ACPBA’s privacy compliance.