Privacy code

General guidelines

Protecting personal information

Desjardins Credit Union (DCU) is and shall always be committed to providing the highest level of security and privacy for personal information about current, past and prospective members or customers and other identifiable individuals that comes into its custody or control.

Scope

This Privacy Code contains ten principles that are to be adhered to by DCU regarding the collection, use and disclosure of information about any identifiable individual. Specific information that has been rendered anonymous by the removal of information that would identify a specific customer or individual is not subject to this code.

Basis of DCU's ten privacy principles

This Privacy Code complies with the requirements of the Personal Information Protection and Electronic Documents Act, which was enacted by Parliament in April, 2000.

For income tax reporting purposes, the government requires us to keep a record of your social insurance number if you have an account that earns interest or if you are buying registered investment products.

Summary of Desjardins Credit Union (DCU's) ten privacy principles

This Privacy Code describes DCU's privacy practices and procedures, and is based on internationally accepted fair information practices and the requirements of PIPEDA. The code is an important resource for members, customers, employees and any upper management staff.

We keep our employees informed about our policies and procedures for protecting personal information and reinforcement the importance of complying with them. All employees are also required, as a condition of employment, to conform to these policies and procedures.

Principle 1 - Accountability

DCU is responsible for all personal information under its control and its Privacy Officer is accountable for DCU's compliance with the principles described in this Privacy Code.

Principle 2 - Identifying purposes

The purposes for which personal information is collected will be identified and documented by DCU at or before the time the information is collected.

Principle 3 - Consent

An individual's knowledge and consent (express or implied) are required for the collection, use or disclosure of personal information by DCU, except as otherwise required or permitted by law.

Principle 4 - Limiting collection

DCU will limit the amount and type of personal information collected to that which is necessary for its purposes. Personal information will be collected by fair and lawful means.

Principle 5 - Limiting use, disclosure and retention

DCU will not use or disclose personal information for purposes other than those for which it was collected, except with the consent of the individual or as required or permitted by law. Personal information shall be retained only as long as necessary for the fulfillment of the stated purposes, except as otherwise required by law.

Principle 6 - Accuracy

DCU will keep personal information as accurate, complete, and up-to-date as necessary for its purposes. DCU will minimize the possibility of inappropriate information being considered in its decision making process.

Principle 7 - Safeguards

DCU will protect personal information with safeguards appropriate to the sensitivity of the information.

Principle 8 - Openness

DCU will be open about its policies and procedures regarding management of personal information. DCU will ensure that individuals are reasonably able to acquire information about DCU's policies and procedures and will make this information available in a form that is generally understandable.

Principle 9 - Individual access

Upon request in writing, DCU will inform an individual of the existence, use, and disclosure of his or her personal information and will provide access to that information, except where the law requires or permits DCU to deny access.

An individual shall be able to challenge the accuracy and completeness of the information and have it amended as appropriate.

Principle 10 - Handling inquiries and challenges

An individual will be able to direct a challenge concerning compliance with the above principles to DCU's Privacy Officer.

Desjardins Credit Union is responsible for all personal information under its control and its Privacy Officer is accountable for DCU's compliance with the principles described in this Privacy Code.

The DCU Privacy Officer may be contacted at: