In summary, the NPP's restrict our use and disclosure of personal information to only those uses necessary for the purposes of our business and limit the circumstances in which we can disclose a customer's information. We need to be aware of our obligations to:

• Correctly use customer identifiers
• Maintain the quality and correctness of our customer information
• Provide customers with access to their personal information
• Use personal information for marketing purposes only within certain guidelines
• Disclose personal information to relevant authorities for legal or public health reasons
• Properly transmit personal information overseas.

Use and disclosure (NPP 2) is the main principle that applies here. Other relevant principles that were covered as part of the process were:

• NPP 3 - Data Quality
• NPP 6 - Access and correctness of information
• NPP 7 - Identifiers
• NPP 9 - Transborder data flows.