586
edits
Changes
Jump to navigation
Jump to search
Line 51:
Line 51: − + Line 60:
Line 60: − * <u>Ensure that combined data does not risk identification or re-identification of personal information – de-identification techniques should be considered prior to sharing personal information</u>
GC Enterprise Architecture/Framework (view source)
Revision as of 10:12, 21 September 2020
, 10:12, 21 September 2020→Design with privacy in mind for the collection, use and management of personal Information
* Share data openly <u>(for example on Canada’s Open Data portal)</u> by default as per the Directive on Open Government and Digital Standards, while adhering to existing enterprise and international standards, including on data quality and ethics
* Share data openly <u>(for example on Canada’s Open Data portal)</u> by default as per the Directive on Open Government and Digital Standards, while adhering to existing enterprise and international standards, including on data quality and ethics
* Ensure data formatting aligns to existing enterprise and international standards on interoperability. Where none exist, develop data standards in the open with key subject matter experts, in consultation with the Enterprise Data Community of Practice
* Ensure data formatting aligns to existing enterprise and international standards on interoperability. Where none exist, develop data standards in the open with key subject matter experts, in consultation with the Enterprise Data Community of Practice
* Ensure that combined data does not risk identification or re-identification of sensitive or personal information
* <u>Ensure that combined data does not risk identification or re-identification of personal information – de-identification techniques should be considered prior to sharing personal information</u>
=== <u>Design with privacy in mind for the collection, use and management of personal Information</u> ===
=== <u>Design with privacy in mind for the collection, use and management of personal Information</u> ===
* <u>Design processes so personal information remains accurate, up-to-date and as complete as possible, and the ability to correct</u>
* <u>Design processes so personal information remains accurate, up-to-date and as complete as possible, and the ability to correct</u>
* <u>Personal information should be collected directly from individuals but can be from shared sources where permitted by the Privacy Act</u>
* <u>Personal information should be collected directly from individuals but can be from shared sources where permitted by the Privacy Act</u>
* <u>Personal information needs to be available to facilitate Canadians’ right of access to and correction of government records</u>
* <u>Personal information needs to be available to facilitate Canadians’ right of access to and correction of government records</u>
* <u>Conduct a Privacy Impact Assessment (PIA) to identify and mitigate privacy risks for new or substantially modified programs when personal information is identified</u>
* <u>Conduct a Privacy Impact Assessment (PIA) to identify and mitigate privacy risks for new or substantially modified programs when personal information is identified</u>
