Information & Ethics committee  Moving right along to the employer-employee relationship, it has become clear to us over the past six years that the consent model doesn't work very well in that context. We would propose that you consider the wording from the Alberta law, which establishes a reasonableness test,

Information & Ethics committee  I think it would be higher than that.

Information & Ethics committee  Maybe they're overcollecting.

Information & Ethics committee  If you've signed something and then you change your mind, you have the right to withdraw your consent.

Information & Ethics committee  Quite often, organizations don't listen to someone who tries to withdraw consent. They may explain to you that they can no longer provide you with the service if you withdraw consent, but in a lot of cases—say, for third-party marketing or something like that—you can withdraw you

Information & Ethics committee  As you know, the code says specifically that you can object to the collection, use, or disclosure of any personal information that's not required to provide you with the service. In the case of the credit card, what information do they need, how do they need to use it, to whom do

Information & Ethics committee  Oh no, it's completed. They did provide us with a paper on it.

Information & Ethics committee  Absolutely.

Information & Ethics committee  There is a fair amount of not so much disinformation as fear out there about RFIDs and what they're capable of doing. Right now there's limited use of them, but you're right, there's a whole great new world of RFIDs on its way in things like credit cards. There are some astoundin

Information & Ethics committee  An RFID is a radio frequency identification device. There are two types: active and passive. Some can only be read when they're put near a reader, and some actually emit a little signal. I don't know if you buy books at Chapters, but occasionally a little square piece of paper

Information & Ethics committee  I don't have the details at my fingertips, but yes, we did fund one of the universities. I think it was the Dalhousie Law School in conjunction with their computer engineering school. They came forward with a project on studying RFID.

Information & Ethics committee  As you probably know, the law is based on the CSA model code for the protection of personal information, which was developed as a voluntary instrument by various stakeholders, including business. It's a management standard, so it's quite easy to apply. It wasn't developed as a l

Information & Ethics committee  That's right.

Information & Ethics committee  To put this in context, to take the fact situation in the Blood Tribe case, our complaint came from an employee of the Blood Tribe. Blood Tribe is a federal work under the definition, so we investigated. She wanted access to her personal information held by her employer, and the

Information & Ethics committee  When we investigated the complaint we had about CIBC Visa, where the information does in fact flow into the United States, we discovered that CIBC had done everything they could to protect the information it dealt with. The agreement they had with the company they outsourced to d