Safeguards
Principle #7 – Safeguards
Personal information will be protected by security safeguards appropriate to the sensitivity of the information.
7.1 Telepath will protect personal information against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification. The nature of the safeguards will vary depending on the sensitivity of the information that has been collected, the amount, distribution and format of the information, and the method of storage.
7.2 Telepath protects all personal information regardless of the format in which it is held. The methods of protection include:
(a) physical measures, such as locked filing cabinets and restricted access to offices;
(b) organizational measures, such as security clearances and limiting access on a “need to know basis”;
(c) technological measures, such as the use of passwords and encryption.
7.3 Telepath makes their employees aware of the importance of maintaining the confidentiality of personal information. Telepath employees are governed by a non-disclosure agreement prohibiting disclosure or use of any confidential or personal information for any purposes other than the stated business purposes.
7.4 Telepath will use care in the disposal or destruction of personal information to prevent unauthorized parties from gaining access to the information.