NPP10

Sensitive information is a subset of personal information and special protection applies. You need customer consent when you collect, use or disclose sensitive information such as health information. The privacy laws require that sensitive information must always be treated very carefully:

• It can only be collected with the individual's consent
• It should always be treated more securely than 'non-sensitive' personal information
• You must obtain the customer's consent for any form of use or disclosure.