Privacy statement for CMPA website and members-only area

Objective and scope of statement

The Canadian Medical Protective Association ("CMPA") is a mutual defence organization committed to advancing the interests of its member physicians through the provision of medical-legal advice and assistance as well as risk management services. Consistent with this mandate and applicable law, the CMPA is dedicated to maintaining high standards of confidentiality with respect to information entrusted to it. This statement has been prepared to inform you of our policy and practices concerning the collection, use and disclosure of personal information provided to the CMPA via the members-only area of this website only.

This privacy statement forms part of the CMPA website Terms of use agreement and members-only area Terms of use agreement. Your use of this website means that you have reviewed the relevant terms of use and this privacy statement and agree that we may collect, use and disclose your personal information in accordance with these documents. If you do not agree with these terms, you may choose not to use this website, and are requested not to provide any personal information through this website.

This privacy statement is in effect as of February 2003. Please review this statement periodically, and especially before you provide any personal information. With respect to the operation of this website and in particular, the members-only area, the CMPA will from time to time review and revise its privacy practices and this privacy statement. Any amendment of this statement will be posted on this website. Statement changes will apply to the information collected from the date of posting of the revised privacy statement to this website, as well as to existing information held by the CMPA at the time of amendment. Your continued use of the website and the members-only area after any changes or revisions to this privacy statement indicates your agreement with the terms of such revised privacy statement.

The collection, use, and disclosure of information

In browsing the Internet, you will encounter a technology called "cookies" which can be used to provide you with specific information from a website. A "cookie" is an element of data that a website can send to your browser, which may then store it on your system.

The CMPA website uses session cookies to track website usage. Session cookies track a user's progression through our website(s) in a single visit. These cookies enable our web server to remember things as you progress from one page to another. Session cookies are deleted as soon as you close your browser. If you leave your browser open for a prolonged period, the cookies on our website are not set to erase themselves automatically after a short period of time. They will, however, be deleted when you shut down your browser.

Persistent cookies do not erase themselves, and they remain on your computer until you erase them using your browser settings. This website makes use of persistent cookies in limited circumstances. In particular, persistent cookies enable our web server to remember specific information related to an authorized user's access to the CMPA's Good Practices Guide and other similar resources, where required. Because persistent cookies do not erase themselves, authorized users need not provide this specific information every time they access the CMPA's Good Practices Guide or other similar resources from the same computer.

A visitor to the CMPA website is not required to reveal any individually identifiable information, such as name, address, or telephone number. Nor is such information collected passively by electronic means.

Our web server tracks general information about visitors such as their IP address, domain name, time of visit and may ask for your medical specialty, occupation or other non-identifiable information. The CMPA's website also collects and aggregates information regarding which pages are being accessed. This information, only in aggregate form, is used internally to serve visitors better by helping us manage our site, diagnose any technical problems and improve the content of our website.

Please note that for security purposes and to ensure that the CMPA's website remains available for use, the CMPA employs software programs to monitor network traffic, to identify unauthorized attempts to upload or change information, and to prevent denial-of-service attacks or other attacks intended to cause damage.

The CMPA's use of personal information is limited to the purpose of fulfilling the mandate of CMPA or a purpose consistent with that purpose, and the CMPA does not sell, trade, barter or exchange for consideration any personal information it has obtained. Unless permitted or required by law, no personal information is collected without first obtaining the consent of the individual regarding the collection, use and dissemination of that information.

There may be circumstances where the use and/or disclosure of personal information by the CMPA may be justified or permitted or where the CMPA is obliged to disclose information without consent. In such circumstances, the CMPA will not disclose more information than is required and only as required by law.

The CMPA may disclose personal information collected via this website to any individual or organization that it retains to assist in the provision of service to users of this website (e.g., technical support). This will occur only if that individual or organization agrees to use such personal information solely for the purposes of performing tasks pursuant to instructions of the CMPA and, with respect to that information, to act in a manner consistent with the requirements of this statement.

The CMPA retains the right to use aggregated information that does not identify or permit the identification of an individual in any way that it determines appropriate.

Where obliged or permitted to disclose information without consent, the CMPA will not disclose more information than is required.

Accuracy and retention

The CMPA endeavours to ensure that any personal information in its possession is as accurate, current and complete as necessary for the purposes for which the CMPA uses that data. The CMPA generally retains personal information as long as the CMPA believes it is necessary to fulfil the purpose for which it was collected. Once this purpose has been fulfilled, the CMPA destroys the information in a secure manner that protects the privacy of the individual to which the information relates.

Currently, the principal place in which we retain personal information held by the CMPA is in the city of Ottawa, Ontario.

Security

The CMPA endeavours to maintain adequate physical, procedural and technical security with respect to its offices and information storage facilities so as to prevent any loss, misuse, unauthorized access, disclosure, or modification of personal information.

As part of those precautions, we restrict access to personal information to those we determine need to know that information in order that the CMPA may provide its services. The CMPA has a policy under which employee misuse of personal information is treated as a serious offence for which disciplinary action may be taken.

Privacy officer

If you have any questions about access to your personal information, our collection, use, management or disclosure of personal information or the CMPA's Privacy Policy, please contact the Privacy Officer at privacyofficer@cmpa.org.