Last updated: October 2018
What is the scope of this Policy?
Key features of this Policy
What do we mean by ‘Personal Information’?
Throughout this policy, we use the phrase “Personal Information”. “Personal Information” is any information about an identifiable individual. In most provinces, Personal Information does not include your business address, telephone number, email address and similar contact details (“Business Contact Information”). Some Personal Information may be found in the public domain by accessing publications like telephone directories. The focus of this policy is Personal Information collected, used and disclosed by us that is NOT in the public domain, as provided by applicable privacy laws.
What types of Personal Information do we collect and use?
Primarily, we collect and use Personal Information about our members. We also have Personal Information about individuals who purchase our products and services, attend our events, conferences, seminars and/or participate in our task forces/committees/working groups, and submit manuscripts to our publications.
We assign a personal identifier to each member or customer so that you can use this number when contacting us, ordering our products and services and publications or registering for an event on our website. This identifier is also used by CMA’s subsidiaries e.g., Joule Inc..
We collect Personal Information directly from individuals, or receive it from one of the provincial or territorial medical associations (“PTMAs”) or subsidiaries, the CMA group of subsidiary companies, including our knowledge and innovation business, Joule Inc.
- If you are a CMA member, you may provide Personal Information like your home address, date of birth and gender to the CMA, or a PTMA or a CMA subsidiary which is then shared with CMA, on, for examples an application form, signing up for an App, participating in a community of interest, registering for a course or publication subscription.
- If you have attended an event organized through our Meetings Department, you might have provided us with credit card data as well as information about certain travel preferences and food sensitivities.
- If you have purchased a service such as classified advertising or attended one of our seminars (e.g., Physician Leadership Institute), or used our e-commerce registration system you provided us with personal contact information such as your name, address and credit card information.
- If you have submitted a manuscript for publication by CMAJ, you provided us with contact information, financial disclosure and competing interests data and the manuscript itself.
- If you participate in one of our surveys, panels, committees, communities of interest, task forces and/or working groups, you might provide us with personal contact information such as your name, email address, address and/or telephone number.
Why do we collect and use Personal Information?
We collect and use only the Personal Information necessary to achieve the following objectives or one consistent with one or more of these objectives:
- to determine an individual’s eligibility for membership in the CMA or to serve as a potential contributor to a publication;
- to determine an individual’s eligibility to benefit from the services of one of CMA’s subsidiaries or its preferred third-party suppliers;
- for registration and participation in cma.ca, member forums, publications, courses, and community of interest;
- to communicate information about CMA member benefits and provide CMA Member services, such as the delivery of publications, clinical resources, travel reservations, e-panels, etc.;
- to gain insight, to develop and market products and services (including those provided by MDFM and other third-party service providers) that are tailored to the interests of physicians and the purchasers of our products and services;
- to update information in our contact database;
- to provide individuals with the opportunity to benefit from supporting our foundation;
- to assist the CMA, Joule, and PTMAs with the maintenance of our membership databases and client contact information;
- to conduct surveys and studies of physicians, patients and the public to gain perspectives on topics impacting health care in Canada (see separate Survey Policy;
- to engage members, physicians, the public and patients in CMA’s policy development process and advocacy work; and/or
- to broadcast urgent health alerts of national significance.
When and to whom do we disclose Personal Information?
If you are both a CMA member and a client of Joule, when you inform us of an address change, this information will be changed for both organizations, unless you express a contrary preference.
Under the terms of an affiliation agreement with MDFM, we will periodically send, or have a third party send on our behalf, marketing and promotional communications about MDFM. Note that we do not disclose Personal Information to MDFM. You may opt-out of having your Personal Information used for this purpose, by following the process set out in the next section.
We might also disclose Personal Information to other third party service providers if these organizations have contracted or partnered with us to help in the provision of products, services or do research. For example, we might utilize a software survey platform of a third party or we might out-source the mailing function for one of our publications. We may also engage a third party to provide advertising or promotional services on our behalf. Such initiatives could include direct mail or email communications (as permitted by law) or online or social media advertising.
In all cases, we take measures to ensure that Personal Information is managed appropriately and consistent with our policy, including requiring that any disclosed Personal Information be used solely for the purposes for which it was disclosed, be kept confidential, and be protected by appropriate security safeguards.
We may, in certain instances, contract with a third party service provider located in other countries. In such cases, your information may be processed and stored in other countries and the governments, courts or law enforcement or regulatory agencies may be able to obtain disclosure of your information under a lawful order made in that country. If you would like more information about the jurisdictions in which our service providers may operate please contact us as noted in the Addressing Your Concerns section of this Policy.
Within the CMA family of companies, your Personal Information in the form of interactions with the CMA or Joule may be shared amongst these CMA organizations. This will enable us to have a better understanding of your interests and activities such that we might tailor our product and service offerings to your interests. If you object a note will be entered in the database and your Personal Information will not be used for that purpose.
What if I object to any collection, use or disclosure of Personal Information?
We aim at all times to respect and honour your privacy and communication preferences. For instance, if you indicate to us that you do not wish to receive certain publications, participate in surveys or receive information about new or specific benefits and services such as communications from CMA or its subsidiaries, your preference will be noted and you will no longer receive correspondence from us on these issues. Our emails have an “unsubscribe” link, please use this to no longer receive information from us on certain topics. You may also contact the CMA Member Service Centre at 888 855 2555.
You may also at any time, subject to restrictions required by law, object to our collection, use or disclosure of Personal Information under this Policy. You need only provide us with reasonable notice in writing of your intention and the details of your objection. Our contact details are set out below.
Please note, however, that any such objection to the collection, use or disclosure of Personal Information may mean that we are unable to provide you with some or all of our products or services including CMA Member benefits. For example, if you object to the sharing of your CMA membership status with CMA’s subsidiaries, then you may not be eligible to benefit from components of their products or services.
It is your responsibility to contact us in order to determine how an objection to the collection, use and disclosure of Personal Information might affect the services supplied.
How accurate is the Personal Information held by us?
We make every reasonable effort to ensure the accuracy and currency of your Personal Information so that we might fulfill the purposes for which it was first collected. Please therefore advise us accordingly of any relevant changes so that we might better meet your needs.
How do I access the Personal Information held by you?
In order to obtain a report on the Personal Information held about you by the CMA and/or Joule, you may send a written request to the attention of:
Chief Privacy Officer
Canadian Medical Association
1867 Alta Vista Drive
Within a reasonable time frame, the Chief Privacy Officer will then advise you in writing whether it has such Personal Information and the nature of this information unless there is the rare occurrence that the release of such information is legally prohibited. If we cannot release the Personal Information, we will provide you with the reasons for denying access.
You may challenge the accuracy and completeness of the Personal Information that is maintained by the CMA. The CMA will amend Personal Information when an individual successfully demonstrates inaccuracy or incompleteness.
How secure is my Personal Information?
We make every reasonable effort to protect your Personal Information by implementing security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use or modification. We use physical, organizational and technological measures as methods of protection. For instance, only a limited number of staff have access to sensitive information, such as credit card numbers. Moreover, we ensure that employees are aware of the importance of maintaining the confidentiality of Personal Information.
How long do we retain Personal Information?
We keep Personal Information as long as it is needed to fulfill the purposes identified above. When Personal Information is no longer required to fulfill the identified purposes, it will be safely and securely destroyed. Moreover, we will retain Personal Information that is the subject of an access request for as long as is necessary to allow an individual to exhaust any legal remedy that is provided for in applicable federal or provincial/territorial legislation.
Chief Privacy Officer
Canadian Medical Association
1867 Alta Vista Drive
800 663 7336 x 8256.
For more information about your personal privacy rights, you might contact the Privacy Commissioner of Canada at https://www.priv.gc.ca/en or the applicable privacy commissioner in your province or territory.