The 10 Privacy Principles of PIPEDA – Limiting Collection

The fourth principle of the 10 Privacy Principles of PIPEDA is Limiting Collection.

Limiting Collection

The principle of Limiting Collection states that the personal information your organization collects should only be limited to that which is necessary for the purposes identified.

Information Handling Policies and Procedures

Your organization’s privacy officer should create information handling policies and procedures and specify what type of personal information is collected. This works in tandem with the Openness principle.

Fair and Lawful Means

Your organization must collect personal information by fair and lawful means. Whether collecting personal information in-person, on the phone, or through an application form, your organization shall identify the purposes for doing so, obtain proper consent, and do so in such a way that is clear and straight-forward.

Your organization may not use deception, trickery, or ambiguity to construe the purposes for which personal information is used.