Does your non-profit’s privacy policy explain that you may disclose personal information for legal reasons?
A privacy policy sets out how and when a non-profit may collect, use, disclose, and retain (store) personal information.
#ffffff
Has your non-profit been formally ordered to disclose personal information?
Formally ordered means some type of legal process requiring your non-profit to provide personal information as directed. Examples include subpoenas, warrants, and court/tribunal orders.
Does your non-profit get consent before disclosing personal information?
Consent is permission. It means a person voluntarily agreed to the collection of their unique information. Consent can be express or implied.
Does your non-profit ever disclose personal information?
Disclose means to make personal information available to a third person or other organization. For example, sharing an email list of names and phone numbers is a disclosure of the personal information of everyone on the list.
Does your non-profit collect employee information only for reasons related to employment?
Reasons related to employment include establishing, managing, and ending employment. Examples include collecting information about previous employment and maintaining personnel files, including records of disciplinary action.
Does your non-profit have employees?
An employee is a person hired by the non-profit to do work.
Does your non-profit get consent from individuals before collecting their personal information?
Consent is permission. It means a person voluntarily agreed to the collection of their unique information. Consent can be express or implied.
Prior to collecting personal information, does your non-profit identify the purpose for its collection and use?
Purpose means the reason(s) for collecting personal information and how it might be used. Non-profits may only use personal information for those reasons.