At Brenda Lai CPA, respecting privacy is an important part of my commitment to my clients and employees.
My commitment to privacy is reflected in The Brenda Lai CPA Privacy Code, which has been developed to comply with the relevant portions of the Personal Information and Electronic Documents Act (Canada). In this respect, The Brenda Lai CPA Privacy Code governs my behavior with respect to the collection, use and disclosure of my clients’ and employees’ personal information.
I have also developed The Brenda Lai CPA Privacy Protection Pledge to explain why I collect personal information, how I use personal information and how I keep such information protected. A copy of The Brenda Lai CPA Privacy Protection Pledge is being made available to all of my clients. You can also review it at www.blaicpa.ca.
The Personal Information Protection Act (PIPA) governs how all private sector organizations in British Columbia handle personal information of clients, employees, and other. Personal information is defined as information that can identify an individual and information about an identifiable individual.
My firm has always protected the personal information received by me in the course of providing services to my clients and I have formalized my policies as a commitment to maintaining your privacy.
What Information I Collect and Why
I need my clients to provide me with all the relevant facts and information related to my engagement. This information will include personal information about my clients and about other individuals with whom my clients conduct commercial transactions.
Consent for Collection, Use, and Disclosure
I will always try to collect personal information directly from the person to whom the information pertains where practical and I will collect personal information from other sources when necessary. If I need to collect information about individuals other than my clients, I shall do so in accordance to the provisions of PIPA. I will make reasonable efforts to ensure that the personal information I collect, use, and distribute is accurate and complete.
By engaging my firm to provide services, I consider an individual to have given my firm consent to the collection, use, and distribution of the individual’s personal information. Once this consent has been obtained by my firm, I will continue to collect, use, and disclose personal information for the purpose of providing the agreed upon services without obtaining further written or verbal consent to do so. I may also collect, use, or disclose personal information about an individual without that individual’s consent as permitted under PIPA.
My firm will maintain the strictest confidence with respect to any client's or former client's information. Accordingly, confidential client information will not, without client consent, be disclosed to any individuals in my firm beyond those who are engaged on providing services to the client. This policy applies to anyone outside the firm, except as required by law or under the Chartered Professional Accountants of British Columbia’s Code of Professional Conduct.
In accordance with professional regulations, my client files must periodically be reviewed by provincial practice inspectors and by other firm personnel to ensure that I have adhered to professional and firm standards. File reviewers are required to maintain confidentiality of client information.
Security and Retention
In recognition of my professional and legal obligations to protect my confidential client information, I have made arrangements to protect against unauthorized access, collection, use, disclosure, copying, modification, disposal, or destruction of personal information.
I will retain client personal information for a reasonable time period as required by my Code of Professional Conduct and the terms of my professional liability insurance policy. When no longer required, client personal information will be disposed of in a secured manner.
Requests for Access and Correction
Individuals have the right to ask, in writing, for access to their own personal information in the custody or under the controls of my firm as permitted under PIPA. I will respond to requests as accurately and completely as reasonably possible in the time allowed by PIPA. I am entitled to refuse access in certain situation such as when:
The personal information is protected by solicitor-client privilege.
Disclosure of the personal information would reveal confidential commercial information that could, in a reasonable person’s opinion, harm the competitive position of my firm.
The personal information was collected for an investigation or legal proceeding that has not concluded, including any appeals.
The information was collected by a mediator or arbitrator in conducting a mediation or arbitration where the mediator or arbitrator was appointed under a collective agreement, a law, or by a court.
Disclosure could reasonably be expected to threaten the safety or physical or mental health of another individual.
Disclosure could reasonably be expected to cause immediate or grave harm to the safety or to the physical or mental health of the individual who made the request.
Disclosure would reveal personal information about another individual.
Disclosure would identify the individual who has provided personal information about another individual and that individual does not consent to disclosure of his or her identity.
PIPA also allows individuals to request in writing for my firm to correct errors or omissions. I will correct any factual error or omissions and inform other organizations to whom I have disclosed the incorrect information. If I determine there is no factual error or omission, I will annotate the record with the record that a correction was requested but not made.
At Brenda Lai CPA, I respect your privacy. That is why I have developed The Brenda Lai CPA Privacy Code of which the objective is to specify Brenda Lai CPA’s guidelines for the collection, use and disclosure of your personal information.
The Brenda Lai CPA Privacy Code was developed to comply with the relevant portions of the Personal Information Protection and Electronic Documents Act (Canada). I have drafted The Brenda Lai CPA Privacy Code to facilitate my compliance with this new legislation and to demonstrate my commitment to protecting your personal information.
I have also developed The Brenda Lai CPA Privacy Protection Pledge. I want you to understand the purposes for which I collect personal information. I also want to make certain that I have your consent to continue to collect, use and disclose your personal information for those purposes.
The following is a brief synopsis of my privacy practices:
Why do I need to collect your personal information?
If you are a Brenda Lai CPA client, Brenda Lai CPA may have collected some basic information about you. I respect your privacy, which is why I collect personal information only for the purposes of complete my engagements as your CPA.
When do I disclose personal information?
There is a variety of circumstances where I may need to disclose some personal information about my clients. These circumstances will be to persons or organizations necessary to fufill my obligations as your CPA.
How do I protect your personal information?
In order to protect your personal information, Brenda Lai CPA:
1. will not collect, use or disclose your personal information for any purpose other than those identified above, except with your further consent;
2. will protect your personal information with appropriate security safeguards;
3. will protect the confidentiality of your personal information when dealing with other organizations;
4. will strive to keep your personal information as accurate and up to date as is necessary for the purposes identified above; and
5. will honour any request you may make for access to your personal information.
What are your choices?
I would like to have your consent to continue to collect, use and disclose your personal information for the purposes identified above. However, you do have choices and can refuse or withdraw your consent as follows:
1. You may refuse to provide your personal information to us.
2. You may also withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice.
However, in either case, this may limit my ability to serve you.
If you have any questions or concerns about my personal information management system, please contact the Brenda Lai CPA Privacy Officer (604) 299-7877 or via firstname.lastname@example.org. Otherwise, I will assume that I have your consent to collect, use and disclose your personal information for the purposes identified above and in a manner consistent with The Brenda Lai CPA Privacy Code.
Please visit the Office of the Privacy Commissioner of Canada’s web site at www.privcom.gc.ca.
Q. Why does Brenda Lai CPA collect personal information about her clients?
A. Brenda Lai CPA collects personal information to conduct her CPA public practice operation.
Q. Who is responsible for Brenda Lai CPA’s personal information management practices?
A. Responsibility for Brenda Lai CPA’s personal information management practices,
Q. How does Brenda Lai CPA protect my personal information?
A. Brenda Lai CPA protects your personal information against such risks as loss or theft, unauthorized access, disclosure, copying, use, modification or destruction, through appropriate security measures, regardless of the format in which it is held. Brenda Lai CPA’s employees follow procedures to protect and safeguard your personal information.
Q. As a Brenda Lai CPA client, can I place restrictions on the collection, use and disclosure of my personal information?
A. Yes. You may refuse or withdraw your consent at any time. Please see The Brenda Lai CPA Privacy Protection Pledge for details.
Q. How can I best understand how Brenda Lai CPA deals with the collection, use and disclosure of my personal information?
Q. How is personal information defined under the Personal Information Protection and Electronic Documents Act (Canada)?
A. Personal information is defined as any information about an identifiable individual, but does not include the name, title, business address or telephone number of an employee of an organization.
Q. Why has Brenda Lai CPA made available The Brenda Lai CPA Privacy Protection Pledge?
Q. Where can I obtain more information on privacy?
A. For a copy of the Personal Information Protection and Electronic Documents Act (Canada), please visit the Privacy Commissioner of Canada’s web site at www.privcom.gc.ca.