Who is responsible for personal information, whether in electronic form or otherwise, sent from a broker to a third party such as an insurer?
A. The broker. Organizations are responsible for personal information that has been transferred to a third party for processing. While it is not possible to control the behaviour of third parties, you must give yourself reasonable assurances that the insurer or other party receiving the information is complying with the Act.
Related Questions
- Who is responsible for personal information, whether in electronic form or otherwise, sent from a broker to a third party such as an insurer?
- What happens to the paper I-9s I recently sent to Payroll? Are they going to be converted to the electronic form?
- Which party is responsible for paying the cost of forensic analysis and electronic discovery?