PROTECTION AND SECURITY OF PERSONAL INFORMATION. (a) The MRSA undertakes to fully maintain and respect the confidentiality of the personal information subject to this article and not to disclose it to anyone unless such disclosure is authorized by this article or by consent of the individual who is the subject of the information or by law. (b) Only the following Association positions are authorized to have access to the information: (i) President (ii) Vice-President(s) (c) The MRSA will have reasonable security arrangements in place to safeguard the personal information subject to this article against such risks as unauthorized access, collection, use, disclosure, modification, destruction or disposition. (d) All such arrangements will comply with any information security policies and guidelines that may be in force for the University, including: (i) storing hard copy records in locked filing cabinets and in secure areas where they cannot be accessed by unauthorized persons; (ii) storing electronic records in a secure manner so that they cannot be accessed by unauthorized persons; (iii) keeping hard copy and electronic records containing personal information about members separate and apart from other MRSA records. (e) The MRSA undertakes to notify the Board of any unauthorized access, use or disclosure of personal information subject to this article and to promptly furnish the Board with full details of such unauthorized access, use or disclosure to the extent known by the MRSA. (f) In the event of an occurrence as described in Clause 36.6(e) above, the MRSA will immediately take all reasonable steps to prevent a reoccurrence of the event.
Appears in 5 contracts
Samples: Collective Agreement, Collective Agreement, Collective Agreement
PROTECTION AND SECURITY OF PERSONAL INFORMATION. (a) The MRSA undertakes to fully maintain and respect the confidentiality of the personal information subject to this article and not to disclose it to anyone unless such disclosure is authorized by this article or by consent of the individual who is the subject of the information or by law.
(b) Only the following Association positions are authorized to have access to the information:
(i) President
(ii) Vice-President(s)President
(c) The MRSA will have reasonable security arrangements in place to safeguard the personal information subject to this article against such risks as unauthorized access, collection, use, disclosure, modification, destruction or disposition.
(d) All such arrangements will comply with any information security policies and guidelines that may be in force for the University, including:
(i) storing hard copy records in locked filing cabinets and in secure areas where they cannot be accessed by unauthorized persons;
(ii) storing electronic records in a secure manner so that they cannot be accessed by unauthorized persons;
(iii) keeping hard copy and electronic records containing personal information about members separate and apart from other MRSA records.
(e) The MRSA undertakes to notify the Board of any unauthorized access, use or disclosure of personal information subject to this article and to promptly furnish the Board with full details of such unauthorized access, use or disclosure to the extent known by the MRSA.
(f) In the event of an occurrence as described in Clause 36.6(e36.6 (e) above, the MRSA will immediately take all reasonable steps to prevent a reoccurrence of the event.
Appears in 1 contract
Samples: Collective Agreement