1.1. Melody Deeley is hereby appointed as the Personal Information Compliance Officer (the "Officer") for Summit Pacific College ("SPC").
1.2. All persons, whether employees, volunteers, or board or committee members who collect, process, or use personal information shall be accountable for such information to the Officer.
1.3. This policy shall be made available via SPC's website (www.summitpacific.ca), or a paper copy provided upon written request.
1.4. Any personal information transferred to a third party for processing is subject to this Policy. The Officer shall use the contractual or other appropriate means to protect personal information at a level comparable to this Policy while a third party is processing this information.
1.5. Personal information to be collected, retained, or used by SPC shall be done so only after the Officer gives written approval. This information shall be secured according to the Officer's instructions.
1.6. Any person who believes SPC uses personal information collected, retained, or used for purposes other than those that person explicitly approved may contact the Officer to register a complaint or to make any related inquiry.
1.7. Upon receiving a complaint from any person regarding the collection, retention, or use of personal information, the Officer shall promptly investigate the complaint and notify the person who complained about his/her findings and corrective action taken, if any.
1.8. Upon receiving the response from the Officer, the person who filed the complaint may, if he/she is not satisfied, appeal to the SPC's Operations Committee to review and determine the disposition of the complaint at issue.
1.9. The determination of the Operations Committee shall be final and the Officer shall abide by and implement any of its recommendations.
1.10. The Officer shall communicate and explain this policy and give training regarding it to all employees and volunteers who might be in a position to collect, retain, or use personal information.
1.11. The Officer shall prepare and disseminate information to the public which explains SPC's protection of personal information policies and procedures.