Management of Confidential Information
EFry staff manage confidential information regarding the lives of others. We define “confidential information” as any and all business information known by employees through their employment with EFry. This includes, but is not limited to, information about EFry clients, administrative information, personnel (staff and volunteers) and financial matters (including donor information), and the processes and procedures followed by EFry.
No confidential information regarding clients is exchanged, shared, or otherwise provided to others without express written consent to release information.
Similarly, we respect donors’ rights to be removed from any of our mail, email or telephone campaigns. We will not reveal the names of donors who have requested anonymity, and no donor information will be shared with other charities without express written consent.
Access to confidential information is limited to persons who have the appropriate reliability screening or security clearance and who have a need-to-know. Site locations must have written precautions to be taken to ensure that persons who are not cleared and who may be in the proximity of confidential information do not gain access to this information.
Staff protect confidential information by ensuring compliance with all applicable legal requirements. All written information and all discussions of confidential information must be managed in accordance with EFry policy.
EFry stores confidential information in secured locked locations; and within locked cabinets inaccessible to unauthorized personnel. EFry maintains the security of computing resources including through safeguarding sensitive positions or locations and maintaining current awareness and training of computer technology security (e.g., passwords, virus protection, backups). Electronic information is held on Canadian servers. Financial information is encrypted.
Management of Client Privacy
Privacy is an important consideration for clients receiving service. All program locations have posted copies of the rules and requirements inclusive any restrictions in privacy. Clients sign a copy of the rules and complete an Informed Consent as to the rule and any restrictions on privacy before their entry into a program.
A copy of each program’s rules and client requirements is available upon request by anyone.