On or before collecting the person’s personal information, informing the person  that their personal information is being collected under the Metal Dealers and Recyclers Act and explaining how it will be used.  Dealers and recyclers may want to explain the assignment of the customer code that protects a person’s identity in the daily report to police.  It is important not to collect more personal information than is required to fulfill the purpose of the Metal Dealers and Recyclers Act.

Using the personal information only for the purposes of the Metal Dealers and Recyclers Act and disclosing the personal information to the police only if they have a warrant.  You may not use the information you collected for any other purpose. For example, if you have not told the individual you will be using it for marketing purposes you may not do so.  Similarly, you would not disclose the information to a third party in exchange for money.

Ensuring the personal information is correctly and completely recorded.  The Metal Dealers and Recyclers Act does not authorize the scanning or photocopying of a person’s driver’s licence or BC Identification Card.  You have a legal obligation under the PIPA to ensure personal information is accurately and correctly recorded and inspectors have the authority to conduct audits to ensure this is done.

Using a password if the personal information is kept in an electronic form and a lock where paper copies of Form A are filed or other reasonable security arrangements to protect against unauthorized use or disclosure of personal information collected.

Keeping the personal information for only as long as it is necessary.  The Metal Dealers and Recyclers Act requires that the information be retained for one year.  If your business needs and legal requirements have been met you may want to securely destroy personal information before it becomes a security risk.

Ministry of Labour, Citizens’ Services and Open Government
Knowledge and Information Services