Few important privacy principles to consider creating a privacy policy: What other privacy principles would you add?

The objective of this document is to build a privacy policy for Vamait Inc. a company for which I want to provide privacy and technology among other things in the next few days and months. This Policy review is based on the one of a company that I don’t want to mention here. To this review, we assume the Policy was updated the last time on October 12, 2022.

Vamait Inc. is a Canadian registered company that I want to position as a technology company with privacy as a service.

Vamait Inc. as a federal company that request customers personal information is subject to the federal laws and regulations. It will have a dedicated website for privacy where visitors and customers will find multiple questions with answers about how the company collects, uses, and discloses customers’ personal information. Additional questions can be sent by an email to our email or by mail.

The privacy policy of Vamait Inc. will be a small document of 4 or 5 pages: 1 page will be the cover page, 1 page will be used for the table of contents and the remaining 2 or 3 pages will be filled with questions and answers on how the company will manage customer’s consent, collection, use, disclosure, correcting and safeguarding of their personal information.

The privacy policy of Vamait Inc. will be understandable in plain terms. It will be written for a large public with simple terms and explanations coming directly after simple questions asked in the document.

Readers will be able to review and correct their personal information by contacting Vamait Inc. This service may cost a fee. The request must be done in writing. If the readers of the privacy policy have questions or concerns or inquiries, they can send us an email or send a mail. It is important to note that the company will do its best to have a dedicated privacy office. This will prove our commitment to handle very well its customers’ personal information. If a customer is not satisfied with the information provided by Vamait Inc., they can contact the Office of the Privacy Commissioner of Canada.

In its privacy policy, Vamait Inc. will emphasize multiple privacy principles. For the consent principle, the company will explain how and when consent will be requested (along with certain exceptions like when consent it is not required by law). The company will make the difference between implied consent and express consent. Express consent will be used to collect, use, and disclose customers’ personal information or in case the safety and security of Vamait Inc. infrastructure could be jeopardized.

Another privacy principle that Vamait Inc. will used is the security safeguards. This privacy principle will be used depending on the sensitivity of the personal information that will be collected.

The access privacy principle is another principle that Vamait Inc. will use to ensure employees who manage, and access personal information are trained on the confidentiality of personal information.

Another privacy principle that Vamait Inc. will highlight is accountability. The company will do everything possible to secure customers’ personal information and it is committed to update the privacy policy and promise to inform the customers of any modification not only on our website but also by text, email, and notice. In addition, all privacy complaints to the company will be treated very seriously.

With the federal reform of privacy laws, there is no doubt that companies like Vamait Inc. Canada will update their privacy document to take in consideration the changes in discussion in the Bill C-27: Digital Charter Implementation Act, 2022 which will be implemented as the Consumer Privacy Protection Act (CPPA) that is designed to replace the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

What other privacy principles would you add?

#privacy, #policy, #law, #security, #private, #public, #IT, #technology