ICORM Policy on the Protection of

Personal Information and Electronic Documents

ICORM complies with all aspects of the Personal Information Protection and Electronic Documents Act . We are governed by and abide by the requirements in the collection, use and disclosure of personal information in the course of doing business.

In accordance with the law ICORM protects the Privacy of its members and customers as follows:

•  Reasonableness of the information our organization collects, uses or discloses;

•  Expectations that our organization collects, uses or discloses their personal information reasonably and appropriately, and not use the information for any purpose other than that to which they have consented;

•  Disclose who in the organization is responsible for protecting their personal information;

•  Meet the expectation that our organization protects their personal information by taking appropriate security measures;

•  Expect the personal information our organization holds about them to be accurate, complete and up - to - date;

•  Request to obtain access to their personal information and ask for corrections if necessary; and

•  Effectively handle and document a complaint about how an organization handles their personal information if they feel their privacy rights have not been respected.

ICORM will:

•  obtain consent when they collect, use or disclose their personal information;

•  supply an individual with a product or a service even if they refuse consent for the collection, use or disclosure of your personal information unless that information is essential to the transaction;

•  collect information by fair and lawful means; and

•  have personal information policies that are clear, understandable and readily available.

Though the Act requires that organizations comply with the CSA Model Code for the Protection of Personal Information, there are a number of exceptions to Code where information can be collected, used and disclosed without the consent of the individual. Examples include: for investigations related to law enforcement or in the event of an emergency. There are also exceptions to the general rule that an individual shall be given access to his or her personal information.