Ministry of Justice
Protection of Seller's Personal Information
Metal dealers and recyclers are governed by the provincial Personal Information and Protection Act (PIPA) and are responsible for protecting the personal information collected from a seller. Laws that are required to be followed in protecting personal information collected for the purposes of the Metal Dealers and Recyclers Act and include:
|Collection of Personal Information
On or before collecting the person’s personal information, informing the person that their personal information is being collected under the Metal Dealers and Recyclers Act and explaining how it will be used. Dealers and recyclers may want to explain the assignment of the customer code that protects a person’s identity in the daily report to police. It is important not to collect more personal information than is required to fulfill the purpose of the Metal Dealers and Recyclers Act.
|Usage and Disclosure
Using the personal information only for the purposes of the Metal Dealers and Recyclers Act and disclosing the personal information to the police only if they have a warrant. You may not use the information you collected for any other purpose. For example, if you have not told the individual you will be using it for marketing purposes you may not do so. Similarly, you would not disclose the information to a third party in exchange for money.
|Accurate and Complete Personal Information
Ensuring the personal information is correctly and completely recorded. The Metal Dealers and Recyclers Act does not authorize the scanning or photocopying of a person’s driver’s licence or BC Identification Card or BC Service Card. You have a legal obligation under the PIPA to ensure personal information is accurately and correctly recorded and inspectors have the authority to conduct audits to ensure this is done.
|Protecting the Security of Personal Information
Using a password if the personal information is kept in an electronic form and a lock where paper copies of Form A are filed or other reasonable security arrangements to protect against unauthorized use or disclosure of personal information collected.
Keeping the personal information for only as long as it is necessary. The Metal Dealers and Recyclers Act requires that the information be retained for one year. If your business needs and legal requirements have been met you may want to securely destroy personal information before it becomes a security risk.
The BC Information and Privacy Commissioner has an online tool to help businesses protect the personal information of customers. The Securing Personal Information: A Self-Assessment Tool for Organizations is an online questionnaire and analysis tool that helps small and medium-sized businesses to see how well they are protecting personal information. You can access this tool via the commissioner’s website: http://www.oipc.bc.ca
The Office of the Chief Information Officer is available to assist with questions and has additional information about a business’s responsibilities under PIPA and can be reached as follows:
Ministry of Labour, Citizens’ Services and Open Government
|Privacy Help Line:||250 356-1851|