Does your non-profit have a process for requests to access information from the non-profit?
A request for information is when someone asks for access to your non-profit’s records.
Learn about the legal rules for disclosing personal information.
10 minutes
To-do List
3 of 6
Topic
Does your non-profit allow all of its employees and volunteers to access personal information?
Access means an employee or volunteer can view, copy, or share personal information. For example, storing employee personnel files on a computer that others can use is giving access.
Does your non-profit consider the purpose for disclosing personal information?
Purpose means the reason(s) for disclosing personal information. Non-profits may only disclose personal information (with consent) for those reasons.
Does your non-profit’s privacy policy explain that you may disclose personal information for legal reasons?
A privacy policy sets out how and when a non-profit may collect, use, disclose, and retain (store) personal information.
Has your non-profit been formally ordered to disclose personal information?
Formally ordered means some type of legal process requiring your non-profit to provide personal information as directed. Examples include subpoenas, warrants, and court/tribunal orders.
Does your non-profit get consent before disclosing personal information?
Consent is permission. It means a person voluntarily agreed to the collection of their unique information. Consent can be express or implied.
Does your non-profit ever disclose personal information?
Disclose means to make personal information available to a third person or other organization. For example, sharing an email list of names and phone numbers is a disclosure of the personal information of everyone on the list.