4.7 PRINCIPLE 7: SAFEGUARDS
Personal information shall be protected by security safeguards appropriate to the sensitivity of the information.
4.7.1
The security safeguards must protect personal information against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification. Wawanesa protects personal information regardless of the format in which it is held.
4.7.2
The nature of the safeguards will vary depending on the sensitivity of the information that has been collected, the amount, distribution and format of the information and the method of storage. More sensitive information should be safeguarded by a higher level of protection.
4.7.3
The methods of protection should include:
(a) physical measures, such as locked filing cabinets and restricted access to offices;
(b) organizational measures, such as security clearances and limiting access on a "need to know" basis; and
(c) technological measures, such as the use of passwords and encryption.
4.7.4
Wawanesa shall make its employees aware of the importance of maintaining the confidentiality of personal information.
4.7.5
Care shall be used in the disposal or destruction of personal information to prevent unauthorized parties from gaining access to the information.
