4.5 PRINCIPLE 5: LIMITING USE, DISCLOSURE AND RETENTION
Personal information shall not be used or disclosed for purposes other than those for which the information was collected, except with the consent of the Customer or as required by law. Personal information shall be retained only as long as necessary for the fulfillment of those purposes .
4.5.1
There are situations specific to the P&C insurance business where Wawanesa will provide personal information as dictated by prudent insurance practices. For example:
(a) Risk-Sharing: As part of the underwriting and claims handling process, Wawanesa transfers personal information to other insurance companies including reinsurance companies which share in the risk. This would include situations where the Customer has made a fraudulent application for or renewal of a policy of insurance.
(b) Information Services: Wawanesa provides personal information for underwriting, claims, classification and rating purposes.
(c) Insurance Services: Wawanesa provides personal information to businesses that provide goods and services to insurance companies and/or their Customers, such as data processors, loss control managers and claims adjusters.
(d) Insurance Intermediaries: Wawanesa may provide personal information to its insurance intermediaries, such as brokers and agents.
Only the information necessary for these services will be provided by Wawanesa to these service providers.
4.5.2
If Wawanesa uses personal information for a new purpose it will document this purpose.
4.5.3
Wawanesa shall maintain and implement procedures with respect to the retention of personal information. Personal information that has been used to make a decision about a Customer shall be retained long enough to allow the Customer access to the information after the decision has been made. Wawanesa may be subject to legislative requirements with respect to retention periods.
4.5.4
Personal information that is no longer required to fulfill the identified purposes shall be destroyed, erased or made anonymous. Wawanesa will maintain and implement procedures to govern the destruction of personal information.
