sec.413Making individuals aware of personal information held

### sec.413 Making individuals aware of personal information held An intelligent access program service provider must prepare, and make publicly available, a document setting out the service provider’s policies on the management of personal information held by the service provider. making a document available at the service provider’s office making a document available on the service provider’s website Maximum penalty—$6000. If asked by an individual about whom an intelligent access program service provider holds personal information, the service provider must, within 28 days after receiving the request, give the individual the following information if the service provider can reasonably give the information— the kind of information the service provider holds about the individual; the purpose for which the information is held; the way in which the service provider collects, holds, uses and discloses the information; the entities to whom the information may be disclosed; that, under this Chapter, the individual has rights of access to the information or to have the information changed to ensure it is accurate, complete and up to date; how the rights mentioned in paragraph (e) can be exercised. Maximum penalty—$6000. Subsection (2) does not require an intelligent access program service provider to inform an individual that a report under section 422 or 423 exists or has been made. sch s 413 sub 2013 No. 4 s 12 amd 2016 No. 65 s 139 (sec.413-ssec.1) An intelligent access program service provider must prepare, and make publicly available, a document setting out the service provider’s policies on the management of personal information held by the service provider. making a document available at the service provider’s office making a document available on the service provider’s website Maximum penalty—$6000. (sec.413-ssec.2) If asked by an individual about whom an intelligent access program service provider holds personal information, the service provider must, within 28 days after receiving the request, give the individual the following information if the service provider can reasonably give the information— the kind of information the service provider holds about the individual; the purpose for which the information is held; the way in which the service provider collects, holds, uses and discloses the information; the entities to whom the information may be disclosed; that, under this Chapter, the individual has rights of access to the information or to have the information changed to ensure it is accurate, complete and up to date; how the rights mentioned in paragraph (e) can be exercised. Maximum penalty—$6000. (sec.413-ssec.3) Subsection (2) does not require an intelligent access program service provider to inform an individual that a report under section 422 or 423 exists or has been made. - • making a document available at the service provider’s office - • making a document available on the service provider’s website - (a) the kind of information the service provider holds about the individual; - (b) the purpose for which the information is held; - (c) the way in which the service provider collects, holds, uses and discloses the information; - (d) the entities to whom the information may be disclosed; - (e) that, under this Chapter, the individual has rights of access to the information or to have the information changed to ensure it is accurate, complete and up to date; - (f) how the rights mentioned in paragraph (e) can be exercised.