{"id":198,"date":"2023-09-01T10:37:18","date_gmt":"2023-09-01T15:37:18","guid":{"rendered":"https:\/\/alliancept.org\/?page_id=198"},"modified":"2024-01-18T12:28:27","modified_gmt":"2024-01-18T18:28:27","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/alliancept.org\/about-us\/about-us\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<style>.kb-row-layout-id198_88f8fa-92 > .kt-row-column-wrap{align-content:start;}:where(.kb-row-layout-id198_88f8fa-92 > .kt-row-column-wrap) > .wp-block-kadence-column{justify-content:start;}.kb-row-layout-id198_88f8fa-92 > .kt-row-column-wrap{column-gap:var(--global-kb-gap-md, 2rem);row-gap:var(--global-kb-gap-md, 2rem);padding-top:30px;padding-right:0px;padding-bottom:100px;padding-left:0px;grid-template-columns:minmax(0, 1fr);}.kb-row-layout-id198_88f8fa-92{background-image:url('https:\/\/alliancept.org\/wp-content\/uploads\/2023\/09\/bg-blue-man.png');background-size:contain;background-position:100% 50%;background-attachment:scroll;background-repeat:no-repeat;}.kb-row-layout-id198_88f8fa-92 > .kt-row-layout-overlay{opacity:0.30;}.kb-row-layout-id198_88f8fa-92{z-index:2;position:relative;}@media all and (max-width: 1024px){.kb-row-layout-id198_88f8fa-92 > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}}@media all and (max-width: 767px){.kb-row-layout-id198_88f8fa-92 > .kt-row-column-wrap{padding-bottom:0px;grid-template-columns:minmax(0, 1fr);}.kb-row-layout-wrap.wp-block-kadence-rowlayout.kb-row-layout-id198_88f8fa-92{background-image:linear-gradient(180deg,rgb(255,255,255) 49%,rgb(207,237,246) 100%);}}<\/style><div class=\"kb-row-layout-wrap kb-row-layout-id198_88f8fa-92 alignfull has-white-background-color kt-row-has-bg wp-block-kadence-rowlayout\"><div class=\"kt-row-column-wrap kt-has-1-columns kt-row-layout-equal kt-tab-layout-inherit kt-mobile-layout-row kt-row-valign-top\">\n<style>.kadence-column198_7d0ef6-00 > .kt-inside-inner-col,.kadence-column198_7d0ef6-00 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column198_7d0ef6-00 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column198_7d0ef6-00 > .kt-inside-inner-col{flex-direction:column;}.kadence-column198_7d0ef6-00 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column198_7d0ef6-00 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column198_7d0ef6-00{position:relative;}@media all and (max-width: 1024px){.kadence-column198_7d0ef6-00 > .kt-inside-inner-col{flex-direction:column;}}@media all and (max-width: 767px){.kadence-column198_7d0ef6-00 > .kt-inside-inner-col{flex-direction:column;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column198_7d0ef6-00\"><div class=\"kt-inside-inner-col\"><style>.kb-row-layout-id198_cb936d-cc > .kt-row-column-wrap{align-content:start;}:where(.kb-row-layout-id198_cb936d-cc > .kt-row-column-wrap) > .wp-block-kadence-column{justify-content:start;}.kb-row-layout-id198_cb936d-cc > .kt-row-column-wrap{column-gap:var(--global-kb-gap-md, 2rem);row-gap:var(--global-kb-gap-md, 2rem);padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;grid-template-columns:repeat(2, minmax(0, 1fr));}.kb-row-layout-id198_cb936d-cc > .kt-row-layout-overlay{opacity:0.30;}@media all and (max-width: 1024px){.kb-row-layout-id198_cb936d-cc > .kt-row-column-wrap{grid-template-columns:repeat(2, minmax(0, 1fr));}}@media all and (max-width: 767px){.kb-row-layout-id198_cb936d-cc > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}}<\/style><div class=\"kb-row-layout-wrap kb-row-layout-id198_cb936d-cc alignnone wp-block-kadence-rowlayout\"><div class=\"kt-row-column-wrap kt-has-2-columns kt-row-layout-equal kt-tab-layout-inherit kt-mobile-layout-row kt-row-valign-top\">\n<style>.kadence-column198_c5b5dc-fa > .kt-inside-inner-col,.kadence-column198_c5b5dc-fa > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column198_c5b5dc-fa > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column198_c5b5dc-fa > .kt-inside-inner-col{flex-direction:column;}.kadence-column198_c5b5dc-fa > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column198_c5b5dc-fa > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column198_c5b5dc-fa{position:relative;}@media all and (max-width: 1024px){.kadence-column198_c5b5dc-fa > .kt-inside-inner-col{flex-direction:column;}}@media all and (max-width: 767px){.kadence-column198_c5b5dc-fa > .kt-inside-inner-col{flex-direction:column;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column198_c5b5dc-fa\"><div class=\"kt-inside-inner-col\">\n<p><strong>ABOUT<\/strong><\/p>\n\n\n\n<div style=\"height:70px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h1 class=\"wp-block-heading\"><strong>Privacy Policy<\/strong><\/h1>\n\n\n\n<p class=\"has-medium-plus-font-size\">CAPR is committed to ensuring the privacy of its members and students.<\/p>\n<\/div><\/div>\n\n\n<style>.kadence-column198_8e83ab-32 > .kt-inside-inner-col{padding-top:60px;padding-right:60px;padding-bottom:60px;padding-left:60px;}.kadence-column198_8e83ab-32 > .kt-inside-inner-col,.kadence-column198_8e83ab-32 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column198_8e83ab-32 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column198_8e83ab-32 > .kt-inside-inner-col{flex-direction:column;}.kadence-column198_8e83ab-32 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column198_8e83ab-32 > .kt-inside-inner-col{background-image:url('https:\/\/alliancept.org\/wp-content\/uploads\/2023\/09\/squares.png');background-size:auto;background-position:center center;background-attachment:scroll;background-repeat:no-repeat;}.kadence-column198_8e83ab-32 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column198_8e83ab-32{position:relative;}@media all and (max-width: 1024px){.kadence-column198_8e83ab-32 > .kt-inside-inner-col{flex-direction:column;}}@media all and (max-width: 767px){.kadence-column198_8e83ab-32, .kt-inside-inner-col > .kadence-column198_8e83ab-32:not(.specificity){margin-right:-30px;margin-left:-30px;}.kadence-column198_8e83ab-32 > .kt-inside-inner-col{flex-direction:column;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column198_8e83ab-32 subheader-img\"><div class=\"kt-inside-inner-col\"><style>.kb-row-layout-id198_9d298a-1a > .kt-row-column-wrap{align-content:start;}:where(.kb-row-layout-id198_9d298a-1a > .kt-row-column-wrap) > .wp-block-kadence-column{justify-content:start;}.kb-row-layout-id198_9d298a-1a > .kt-row-column-wrap{column-gap:var(--global-kb-gap-md, 2rem);row-gap:var(--global-kb-gap-md, 2rem);padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;grid-template-columns:minmax(0, 1fr);}.kb-row-layout-id198_9d298a-1a{border-top-left-radius:25px;border-top-right-radius:25px;border-bottom-right-radius:25px;border-bottom-left-radius:25px;overflow:hidden;isolation:isolate;}.kb-row-layout-id198_9d298a-1a > .kt-row-layout-overlay{border-top-left-radius:25px;border-top-right-radius:25px;border-bottom-right-radius:25px;border-bottom-left-radius:25px;}.kb-row-layout-id198_9d298a-1a{border-top:10px solid #ffffff;border-right:10px solid #ffffff;border-bottom:10px solid #ffffff;border-left:10px solid #ffffff;}.kb-row-layout-id198_9d298a-1a > .kt-row-layout-overlay{opacity:0.30;}@media all and (max-width: 1024px){.kb-row-layout-id198_9d298a-1a > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}}@media all and (max-width: 1024px){.kb-row-layout-id198_9d298a-1a{border-top:10px solid #ffffff;border-right:10px solid #ffffff;border-bottom:10px solid #ffffff;border-left:10px solid #ffffff;}}@media all and (max-width: 767px){.kb-row-layout-id198_9d298a-1a > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}.kb-row-layout-id198_9d298a-1a{border-top:10px solid #ffffff;border-right:10px solid #ffffff;border-bottom:10px solid #ffffff;border-left:10px solid #ffffff;}}<\/style><div class=\"kb-row-layout-wrap kb-row-layout-id198_9d298a-1a alignnone has-white-background-color kt-row-has-bg wp-block-kadence-rowlayout\"><div class=\"kt-row-column-wrap kt-has-1-columns kt-row-layout-equal kt-tab-layout-inherit kt-mobile-layout-row kt-row-valign-top\">\n<style>.kadence-column198_3534f6-b0 > .kt-inside-inner-col,.kadence-column198_3534f6-b0 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column198_3534f6-b0 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column198_3534f6-b0 > .kt-inside-inner-col{flex-direction:column;}.kadence-column198_3534f6-b0 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column198_3534f6-b0 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column198_3534f6-b0{position:relative;}@media all and (max-width: 1024px){.kadence-column198_3534f6-b0 > .kt-inside-inner-col{flex-direction:column;}}@media all and (max-width: 767px){.kadence-column198_3534f6-b0 > .kt-inside-inner-col{flex-direction:column;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column198_3534f6-b0\"><div class=\"kt-inside-inner-col\">\n<figure class=\"wp-block-image size-full is-style-rounded\"><img loading=\"lazy\" decoding=\"async\" width=\"640\" height=\"433\" src=\"https:\/\/i0.wp.com\/alliancept.org\/wp-content\/uploads\/2023\/09\/GettyImages-1366650091@2x.png?resize=640%2C433&#038;ssl=1\" alt=\"physiotherapist in blue scrubs making notes on a clipboard while elderly man watches from his seat on exam table\" class=\"wp-image-255\" srcset=\"https:\/\/i0.wp.com\/alliancept.org\/wp-content\/uploads\/2023\/09\/GettyImages-1366650091@2x.png?w=850&amp;ssl=1 850w, https:\/\/i0.wp.com\/alliancept.org\/wp-content\/uploads\/2023\/09\/GettyImages-1366650091@2x.png?resize=600%2C406&amp;ssl=1 600w, https:\/\/i0.wp.com\/alliancept.org\/wp-content\/uploads\/2023\/09\/GettyImages-1366650091@2x.png?resize=768%2C520&amp;ssl=1 768w\" sizes=\"(max-width: 640px) 100vw, 640px\" data-recalc-dims=\"1\" \/><\/figure>\n<\/div><\/div>\n\n<\/div><\/div><\/div><\/div>\n\n<\/div><\/div><\/div><\/div>\n\n<\/div><\/div>\n\n\n<hr class=\"wp-block-separator alignfull has-text-color has-blue-color has-alpha-channel-opacity has-blue-background-color has-background is-style-wide\"\/>\n\n\n<style>.kb-row-layout-id198_e4b9fd-cd > .kt-row-column-wrap{align-content:start;}:where(.kb-row-layout-id198_e4b9fd-cd > .kt-row-column-wrap) > .wp-block-kadence-column{justify-content:start;}.kb-row-layout-id198_e4b9fd-cd > .kt-row-column-wrap{column-gap:var(--global-kb-gap-none, 0rem );row-gap:var(--global-kb-gap-none, 0rem );padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;grid-template-columns:minmax(0, calc(30% - ((var(--global-kb-gap-none, 0rem ) * 1 )\/2))) minmax(0, calc(70% - ((var(--global-kb-gap-none, 0rem ) * 1 )\/2)));}.kb-row-layout-id198_e4b9fd-cd > .kt-row-layout-overlay{opacity:0.30;}.kb-row-layout-id198_e4b9fd-cd{z-index:1;position:relative;}@media all and (max-width: 1024px){.kb-row-layout-id198_e4b9fd-cd > .kt-row-column-wrap{grid-template-columns:repeat(2, minmax(0, 1fr));}}@media all and (max-width: 767px){.kb-row-layout-id198_e4b9fd-cd > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}}<\/style><div class=\"kb-row-layout-wrap kb-row-layout-id198_e4b9fd-cd alignnone wp-block-kadence-rowlayout\"><div class=\"kt-row-column-wrap kt-has-2-columns kt-row-layout-right-golden kt-tab-layout-inherit kt-mobile-layout-row kt-row-valign-top kt-inner-column-height-full\">\n<style>.kadence-column198_ab869a-e0 > .kt-inside-inner-col{box-shadow:6px 0px 8px -4px rgba(0, 0, 0, 0.2);}.kadence-column198_ab869a-e0 > .kt-inside-inner-col,.kadence-column198_ab869a-e0 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column198_ab869a-e0 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column198_ab869a-e0 > .kt-inside-inner-col{flex-direction:column;}.kadence-column198_ab869a-e0 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column198_ab869a-e0 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column198_ab869a-e0{position:relative;}@media all and (max-width: 1024px){.kadence-column198_ab869a-e0 > .kt-inside-inner-col{flex-direction:column;}}@media all and (max-width: 767px){.kadence-column198_ab869a-e0 > .kt-inside-inner-col{flex-direction:column;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column198_ab869a-e0\"><div class=\"kt-inside-inner-col\">\n<ul class=\"sub-menu\">\n\t<li class=\"page_item page-item-154 page_item_has_children\"><a href=\"https:\/\/alliancept.org\/about-us\/about-us\/\">About Us<\/a>\n<ul class='children'>\n\t<li class=\"page_item page-item-192 page_item_has_children\"><a href=\"https:\/\/alliancept.org\/about-us\/about-us\/annual-reports\/\">Annual Reports<\/a>\n\t<ul class='children'>\n\t\t<li class=\"page_item page-item-415\"><a href=\"https:\/\/alliancept.org\/about-us\/about-us\/annual-reports\/2022-annual-report\/\">2022 Annual Report<\/a><\/li>\n\t\t<li class=\"page_item page-item-428\"><a href=\"https:\/\/alliancept.org\/about-us\/about-us\/annual-reports\/2021-annual-report\/\">2021 Annual Report<\/a><\/li>\n\t\t<li class=\"page_item page-item-443\"><a href=\"https:\/\/alliancept.org\/about-us\/about-us\/annual-reports\/2020-annual-report\/\">2020 Annual Report<\/a><\/li>\n\t\t<li class=\"page_item page-item-449\"><a href=\"https:\/\/alliancept.org\/about-us\/about-us\/annual-reports\/2019-annual-report\/\">2019 Annual Report<\/a><\/li>\n\t\t<li class=\"page_item page-item-455\"><a href=\"https:\/\/alliancept.org\/about-us\/about-us\/annual-reports\/2018-annual-report\/\">2018 Annual Report<\/a><\/li>\n\t<\/ul>\n<\/li>\n\t<li class=\"page_item page-item-194\"><a href=\"https:\/\/alliancept.org\/about-us\/about-us\/staff\/\">Staff<\/a><\/li>\n\t<li class=\"page_item page-item-196\"><a href=\"https:\/\/alliancept.org\/about-us\/about-us\/land-acknowledgement\/\">Land Acknowledgement<\/a><\/li>\n\t<li class=\"page_item page-item-198\"><a href=\"https:\/\/alliancept.org\/about-us\/about-us\/privacy-policy\/\">Privacy Policy<\/a><\/li>\n\t<li class=\"page_item page-item-200\"><a href=\"https:\/\/alliancept.org\/about-us\/about-us\/award-of-distinction\/\">Award of Distinction<\/a><\/li>\n<\/ul>\n<\/li>\n<li class=\"page_item page-item-156 page_item_has_children\"><a href=\"https:\/\/alliancept.org\/about-us\/our-members-committees\/\">Our Members &#038; Committees<\/a>\n<ul class='children'>\n\t<li class=\"page_item page-item-204\"><a href=\"https:\/\/alliancept.org\/about-us\/our-members-committees\/committees\/\">Committees<\/a><\/li>\n\t<li class=\"page_item page-item-206\"><a href=\"https:\/\/alliancept.org\/about-us\/our-members-committees\/regulators\/\">Regulators<\/a><\/li>\n\t<li class=\"page_item page-item-202\"><a href=\"https:\/\/alliancept.org\/about-us\/our-members-committees\/board-of-directors\/\">Board of Directors<\/a><\/li>\n\t<li class=\"page_item page-item-208\"><a href=\"https:\/\/alliancept.org\/about-us\/our-members-committees\/external-partners\/\">External Partners<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul><\/div><\/div>\n\n\n<style>.kadence-column198_ed8db3-a7 > .kt-inside-inner-col{padding-top:80px;padding-right:50px;padding-bottom:50px;padding-left:100px;}.kadence-column198_ed8db3-a7 > .kt-inside-inner-col,.kadence-column198_ed8db3-a7 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column198_ed8db3-a7 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column198_ed8db3-a7 > .kt-inside-inner-col{flex-direction:column;}.kadence-column198_ed8db3-a7 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column198_ed8db3-a7 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column198_ed8db3-a7{position:relative;}@media all and (max-width: 1024px){.kadence-column198_ed8db3-a7 > .kt-inside-inner-col{padding-right:0px;padding-left:50px;flex-direction:column;}}@media all and (max-width: 767px){.kadence-column198_ed8db3-a7 > .kt-inside-inner-col{padding-top:50px;padding-right:0px;padding-left:0px;flex-direction:column;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column198_ed8db3-a7\"><div class=\"kt-inside-inner-col\">\n<p>CAPR is committed to protecting the privacy and security of the personal and personal health information of individuals with whom it interacts, such as employees, clients, suppliers and contractors. This is achieved by embedding rigorous and consistent privacy and information protection strategies across corporate services and business units.<\/p>\n\n\n\n<p>As a custodian of both personal and personal health information, CAPR complies with CSA Group standards for the protection of personal and personal health information. At a minimum, this includes the designation of the CAPR Chief Privacy Officer and the development of a Privacy Code governing the collection, use, disclosure, retention and disposal of personal and personal health information. The Privacy Code also specifies steps to be taken in cases of a privacy breach.<\/p>\n\n\n\n<p>This Privacy Code is to be posted publicly and will be made available to any requesting individual or organization. CAPR\u2019s Privacy Policy is owned and approved by the Board via recommendations from the Governance and Nominations Committee. The Board is responsible for assuring the establishment and operation of prudent and effective personal and personal health <\/p>\n\n\n\n<p>information controls and a secure information management environment associated with CAPR operations. The Board delegates \u2018day-to-day\u2019 management including privacy and information management to the Chief Privacy Officer, who delegates operational aspects to management personnel within CAPR.<\/p>\n\n\n\n<p>The Chief Privacy Officer of CAPR is the CEO or delegate appointed by the CEO.<\/p>\n\n\n\n<p>In the case of a privacy breach, CAPR will comply with best practices in terms of notifying the individual whose privacy has been breached and in reviewing and rectifying the situation.<\/p>\n\n\n\n<p>Individuals whose personal and personal health information has been collected, used, disclosed and\/or disposed of by CAPR may make complaints about CAPR\u2019s policies and practices relating to the handling of their personal and personal health information. A complaint may be made in writing to the Chief Privacy Officer specifying the nature of the complaint and the Chief Privacy Officer must undertake an investigation. The Chief Privacy Officer will provide a written response to the complainant outlining the results of the investigation and the actions, if any, taken or to be taken by CAPR in respect of the complaint. Appeals regarding a complaint decision will be escalated to the Board of Directors. The Board of Directors may seek consultation with Federal Privacy Commissioner or applicable provincial counterpart to inform the investigation process, seek advice and\/or validate decisions. CAPR will not penalize, sanction nor discriminate against any individual who has made a complaint or inquiry.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Objective<\/h2>\n\n\n\n<p>CAPR is committed to protecting the privacy and security of the personal and personal health information of individuals with whom it interacts, such as employees, clients, suppliers and contractors. This is achieved by embedding rigorous and consistent privacy and information protection strategies across corporate services and business units. CAPR\u2019s Privacy Code includes the strategies, tools, processes and reporting procedures necessary to support this. This Code outlines how CAPR manages, monitors and reports on privacy and information protection performance. This Code also provides the accountabilities of management and the Board related to the management of personal and personal health information.<\/p>\n\n\n\n<p>CAPR\u2019s purpose is to provide leadership and support to assist its Members in fulfilling their public interest mandate through the following core business activities:<\/p>\n\n\n\n<ul>\n<li>Administration and evaluation of the national Physiotherapy Competency Examination<\/li>\n\n\n\n<li>Administration and evaluation of the national Credentialling program<\/li>\n\n\n\n<li>Coordination and support of the development of national regulatory policy and special projects that represent the mutual interest of and are of high priority to Member Regulators.<\/li>\n<\/ul>\n\n\n\n<p>CAPR collects, holds and uses personal and personal health information about identifiable individuals in the course of providing services.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Scope<\/h2>\n\n\n\n<p>This Code applies to all aspects of CAPR business operations.&nbsp; References in this document to \u201cCAPR Personnel\u201d include Directors, Officers, employees, contract workers, consultants and agents of CAPR who collect, hold or use personal or personal health information.&nbsp; CAPR Personnel will comply with the requirements of this Code.&nbsp; Failure to comply with privacy practices could expose CAPR to legal risk and may result in disciplinary action for CAPR Personnel.<\/p>\n\n\n\n<p>Personal and personal health information refers to any information concerning an identifiable individual, but does not include the name, title, or business address or telephone number of an employee of an organization.<\/p>\n\n\n\n<p>Some examples of personal information collected by CAPR include:<\/p>\n\n\n\n<ul>\n<li>National origin, age or marital status<\/li>\n\n\n\n<li>Educational and employment history<\/li>\n\n\n\n<li>Correspondence with The Alliance that is explicitly or implicitly of a private nature<\/li>\n\n\n\n<li>Views or opinions concerning an employee\u2019s or individual\u2019s performance evaluation<\/li>\n\n\n\n<li>Salary<\/li>\n\n\n\n<li>Banking information<\/li>\n\n\n\n<li>A person\u2019s image (e.g., photographs, videos).<\/li>\n<\/ul>\n\n\n\n<p>Personal information is not restricted to the examples listed above.&nbsp; Personal information may be stored on paper, electronically or digitally, and includes videos, photographs, and\/or tape recordings.<\/p>\n\n\n\n<p>Some examples of personal health information collected by CAPR include:<\/p>\n\n\n\n<ul>\n<li>Details regarding an applicant\u2019s special needs accommodation<\/li>\n\n\n\n<li>Medical and dental histories of Alliance personnel.<\/li>\n<\/ul>\n\n\n\n<p>Personal health information is not restricted to the examples listed above.&nbsp; Personal health information includes any information concerning an identifiable individual\u2019s physical or mental health status; the provision of their health care; the eligibility of payment for their health care; the identify of the provider of their health care; and, where required for an authorized purpose, their health care number.&nbsp; Personal health information also includes information about an identifiable individual that is not personal health information but is contained in the same record or file as personal health information about the individual.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Legal Requirements<\/h2>\n\n\n\n<p>In Canada, the Personal Information Protection and Electronic Documents Act [PIPEDA], governs the legal requirements for the protection of personal information.&nbsp; While not directly subject to this legislation, CAPR has taken the position that business processes across the scope of roles within the organization will be designed to meet the inherent principles of the legislation.<\/p>\n\n\n\n<p>In Ontario, the Personal Health Information Protection Act [PHIPA] governs the legal requirements for the protection of personal health information.&nbsp; CAPR is subject to this legislation.<\/p>\n\n\n\n<p>In keeping with its legal requirements and best practices in the management of personal and personal health information:<\/p>\n\n\n\n<ul>\n<li>CAPR Personnel must obtain informed consent from individuals before they collect personal and personal health information. This means open communication and transparency of CAPR\u2019s information management practices.<\/li>\n\n\n\n<li>CAPR Personnel need to be sensitive and rigorous in the handling of files, correspondence and other records containing personal and personal health information about individuals.<\/li>\n\n\n\n<li>CAPR Personnel must understand and comply with information retention standards including the secure sharing and storage of all personal and personal health information.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Policy Principles<\/h2>\n\n\n\n<p>CAPR is responsible for personal and personal health information under its control and has designated the Chief Executive Officer as the Chief Privacy Officer who along with the management team is accountable for ensuring CAPR has processes, procedures and practices in place for the organization\u2019s compliance with the following principles:<\/p>\n\n\n\n<ul>\n<li>Identifying Purposes: The purposes for which personal and personal health information are collected will be identified by the organization at or before the time the information is collected.<\/li>\n\n\n\n<li>Consent: The knowledge and consent of the individual are required for the collection, use or disclosure of personal and personal health information, unless exceptions apply.<\/li>\n\n\n\n<li>Limiting Collection: The collection of personal and personal health information will be limited to that which is necessary for the purposes identified CAPR. Information will be collected by fair and lawful means.<\/li>\n\n\n\n<li>Limiting Use, Disclosure, and Retention: Personal and personal health information will not be used or disclosed for purposes other than those for which it was collected, except with the consent of the individual or as required by law. Personal and personal health information will be retained only as long as necessary for fulfilment of these purposes.<\/li>\n\n\n\n<li>Accuracy: Personal and personal health information will be as accurate, complete, and up-to-date as is necessary for the purposes for which it is to be used.<\/li>\n\n\n\n<li>Safeguards: Security safeguards appropriate to the sensitivity of the information will protect personal and personal health information.<\/li>\n\n\n\n<li>Openness: CAPR will make available to individuals specific information about its policies and practices relating to the management of personal and personal health information. The Privacy Code and related information management practices will be posted on the CAPR website.<\/li>\n\n\n\n<li>Individual Access: Upon request, an individual will be informed of the existence, use and disclosure of his or her personal and personal health information and will be given access to that information.&nbsp; An individual will be able to challenge the accuracy and completeness of the information and have it amended as appropriate.<\/li>\n\n\n\n<li>Challenging Compliance: An individual will be able to address a challenge concerning compliance with the above principles to the Chief Privacy Officer\/Chief Executive Officer of CAPR. Appeals will be forwarded to the Executive Committee of the Board.&nbsp; Where necessary, the Executive Committee will seek consultation with the Privacy Commissioner(s) to inform investigation processes and\/or validate decisions.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Privacy Roles<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Board<\/h3>\n\n\n\n<p>CAPR\u2019s Privacy Code is owned and approved by the Board via recommendations from the Governance and Nominations Committee. The Board is responsible for assuring the establishment and operation of prudent and effective personal and personal health information controls and a secure information management environment associated with CAPR\u2019s operations. The Board delegates \u2018day-to-day\u2019 management including privacy and information management to the Chief Executive Officer, who delegates operational aspects to management personnel within CAPR.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Chief Privacy Officer<\/h3>\n\n\n\n<p>CAPR\u2019s Chief Executive Officer or delegate serves as the Chief Privacy Officer.&nbsp; The Chief Privacy Officer is responsible for monitoring CAPR-wide application of the Privacy Code and for monitoring changes in relevant legislation.&nbsp; The Chief Privacy Officer also serves as a resource for management and may coordinate and support the efforts of management in CAPR Personnel training and awareness.&nbsp; The Chief Privacy Officer will assist in the development of business processes and procedures across programs.&nbsp; The Chief Privacy Officer also manages all complaints and is responsible for responding on behalf of CAPR to internal and external request for personal and personal health information and inquiries about CAPR\u2019s Privacy Code for personal and personal health information management.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">CAPR Personnel<\/h3>\n\n\n\n<p>Managers and designated CAPR Personnel are the custodians of the personal and personal health information collected, retained and used within their respective business units and organizational roles.&nbsp; CAPR Personnel are responsible for ensuring that:<\/p>\n\n\n\n<ol style=\"list-style-type:1\">\n<li>Consent has been obtained prior to collection of information, and processes to manage exceptions are in place;<\/li>\n\n\n\n<li>Only personal and personal health information necessary for the business purpose is collected, retained and used;<\/li>\n\n\n\n<li>Appropriate controls are in place to physically secure both hard copy (including external computer readable media) and electronically stored personal and personal health information;<\/li>\n\n\n\n<li>Electronic files that contain personal and\/or personal health information will not be stored in the generally accessible electronic file system, directories or databases;<\/li>\n\n\n\n<li>Appropriate system access controls including \u201cbusiness-related need to know\u201d restrictions are in place and kept up-to-date;<\/li>\n\n\n\n<li>Personal and personal health information is appropriately updated and accurate, having regard for the purpose of such information;<\/li>\n\n\n\n<li>Personal and personal health information is destroyed or made anonymous when it is reasonable to conclude that it is no longer required for any of the purposes for which it was collected.&nbsp; Management and Personnel will consistently adhere to CAPR record retention standards;<\/li>\n\n\n\n<li>Contracts with third parties for processing, using or storing personal and personal health information will contain appropriate clauses guaranteeing that the third party will comply with the CAPR Privacy Code and related privacy legislation, safeguard the information, and will only use the information provided for the contractual purposes.&nbsp; Similar privacy clauses will also be included in any agreement that the third party has with subcontractors they may engage to conduct work on their behalf for CAPR;<\/li>\n\n\n\n<li>Contracts with third parties who provide CAPR with personal and personal health information will include appropriate clauses asserting that they have obtained the required consent from their staff; and,<\/li>\n\n\n\n<li>Appropriate resources will be assigned to retrieve information requested by an individual.<\/li>\n<\/ol>\n\n\n\n<p>CAPR Management is responsible for ensuring that all CAPR Personnel have received appropriate training and support to understand and comply with the CAPR Privacy Code and applicable privacy laws.<\/p>\n\n\n\n<p>CAPR Management is also responsible for ensuring that appropriate safeguards are in place for the physical security of personal and personal health information stored in offsite archiving facilities, and for ensuring that such personal and personal health information is appropriately destroyed within a reasonable time following the destruction date established by the document owner.<\/p>\n\n\n\n<p>Corporate Information Services personnel are responsible for ensuring that appropriate safeguards are in place to protect the personal and personal health information stored electronically by CAPR, and for ensuring that all CAPR Personnel are sufficiently familiar with the availability and application of such safeguards to make appropriate use of them in complying with the Privacy Code.<\/p>\n\n\n\n<p>If required, CAPR will engage legal counsel to provide legal advice and support in relation to matters arising out of the CAPR Privacy Code.<\/p>\n\n\n\n<p>All CAPR Personnel are individually responsible for the personal and personal health information about others that they collect, use, retain or disclose.&nbsp; In the course of performing their duties for CAPR, Personnel will ensure that their activities with respect to that information are carried out only in accordance with the CAPR Privacy Code.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Consent<\/h2>\n\n\n\n<p>Before collecting information about individuals, CAPR Personnel will explain the purpose for collection.&nbsp; Consent forms or verbal explanations will contain sufficient information about the use of such information.&nbsp; \u201cSufficient\u201d means that an ordinary person should be able to make the link between the data requested and its relationship with the process.&nbsp; Where an individual\u2019s consent is required, it must constitute informed consent.&nbsp; This means that the individual must understand why the information is being collected, and how CAPR intends to use the information.&nbsp; Therefore, the CAPR Personnel collecting consent must be sufficiently knowledgeable to explain the processes.<\/p>\n\n\n\n<p>Consent may be either implicit (for example, if information is requested for a specific purpose, and the information is provided, that would generally constitute implied consent) or explicit, depending on the circumstances and the nature of the information being collected.&nbsp; Explicit consent may be obtained either in writing or verbally.&nbsp; Where verbal consent is obtained, however, the verbal consent must be documented by those who collected it, and retained in a relevant file for future reference, along with a summary of the information provided to the individual to ensure the individual\u2019s verbal consent was give on an informed basis.&nbsp; Where the collection, use, and\/or disclosure of sensitive personal or personal health information are concerned (e.g., medical information or personal financial information such as salary), the consent must be explicit.&nbsp; Guidance on the classification of data by level of security can be obtained from the Chief Privacy Officer.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Explicit Consent<\/h2>\n\n\n\n<p>CAPR Personnel who are responsible for obtaining consent need to be familiar with the type of information collected and how it is used, in order to be able to explain and answer questions from the individual.&nbsp; The following are some examples of common situations requiring explicit consent:<\/p>\n\n\n\n<ul>\n<li>Human Resources gather a broad range of consent from employees when they start at the company.<\/li>\n\n\n\n<li>CAPR obtains consent from examination applicants requesting specific accommodations before disseminating accommodation plans to test sites for implementation.<\/li>\n\n\n\n<li>CAPR gathers explicit consent from credentialling and examinations candidates to release personal information to its member regulatory bodies if, in the course of conducting its business, CAPR becomes aware of circumstances or actions related to regulatory issues. All releases of this sort will be done with the knowledge of the affected applicant.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Implied Consent<\/h2>\n\n\n\n<p>The following are some examples of common situations involving implied consent:<\/p>\n\n\n\n<ul>\n<li>Individuals providing their resumes are deemed to consent for CAPR to use their personal information for employment and contracting purposes. CAPR\u2019s practice is to retain and use resumes for six months after receipt.&nbsp; In order to circulate or use the resume information of an unsuccessful candidate, his or her consent is required.&nbsp; CAPR implements practices to ensure this obligation is met.<\/li>\n\n\n\n<li>CAPR provides information on its external website about the information collected when a user accesses a CAPR webpage. Users of CAPR\u2019s website are deemed to consent to the collection and use of such information for the purpose of monitoring website activity.<\/li>\n\n\n\n<li>CAPR publishes aggregate data in written performance reports and individual data for registration purposes. Applicants and candidates are deemed to consent to the use of such information for organizational reporting and professional registration purposes.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Consent Process Exceptions<\/h2>\n\n\n\n<p>Some external parties, such as law enforcement agencies, have a lawful or investigative need to collect, use and disclose personal information without having to obtain the consent of the concerned individuals.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Withdrawing Consent<\/h2>\n\n\n\n<p>Individuals have the right to withdraw consent to the collection, use or disclosure of personal or personal health information in whole or in part, at any time, upon providing reasonable written notice.&nbsp; The individual must be informed about any potential consequences that may result from the withdrawal of their consent, prior to making such a decision (e.g., closure of applications, associated administrative fees).&nbsp; If an individual withdraws their consent, it is not retroactive and does not apply to personal and personal health information already collected, used or disclosed by CAPR.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Collecting and Using Personal and Personal Health Information<\/h2>\n\n\n\n<p>Personal and personal health information may only be collected if it relates to CAPR programs or business activities, if the information is reasonably necessary for the carrying out of such programs or activities, and if appropriate consent has been obtained.&nbsp; Personal and personal health information may only be used for the purpose for which it was collected and access to such information must be restricted to those CAPR Personnel who have a need for access in order to administer CAPR programs or business activities.&nbsp; All CAPR Personnel authorized to access personal and personal health information are required to maintain confidentiality of the information in accordance with the Privacy Code.<\/p>\n\n\n\n<p>CAPR may use personal and personal health information without the knowledge and consent of an individual only:<\/p>\n\n\n\n<ul>\n<li>For specific regulatory purposes;<\/li>\n\n\n\n<li>If there are reasonable grounds to believe the information could be useful when investigating a contravention of a federal, provincial or foreign law and the information is used for that investigation;<\/li>\n\n\n\n<li>For an emergency that threatens an individual\u2019s life, health or security; or<\/li>\n\n\n\n<li>If the information is publicly available.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Disclosure of Personal and Personal Health Information<\/h2>\n\n\n\n<p>Personal and personal health information concerning an individual may only be disclosed to others when the purpose for the disclosure is consistent with the purpose for which the information was collected.&nbsp; This includes internal disclosure when there is a business-related need to know.&nbsp; It also includes external disclosure if the information is given to CAPR\u2019s third-party service providers to assist CAPR and\/or regulatory bodies in carrying out their programs or business activities.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Disclosure Process Exceptions<\/h2>\n\n\n\n<p>There are specific situations in which exceptions to disclosure procedures are permitted:<\/p>\n\n\n\n<ol style=\"list-style-type:1\">\n<li>For the purposes of a business transaction between two or more organizations (e.g., joint venture or partnership), the parties to the transaction may collect, use or disclose employee information without the consent of the individual, under certain circumstances.<\/li>\n\n\n\n<li>CAPR may disclose personal information without the individual\u2019s knowledge and consent only:\n<ul>\n<li>To a lawyer representing CAPR.<\/li>\n\n\n\n<li>To collect a debt the individual owes to CAPR.<\/li>\n\n\n\n<li>To comply with a subpoena, warrant or an order made by a court or other body with appropriate jurisdiction.<\/li>\n\n\n\n<li>To a regulatory body or government institution that has requested the information, identified its lawful authority and indicates that disclosure is for the purpose of carrying out an investigation, or gathering intelligence relating to any federal, provincial or foreign law, or suspects that the information relates to national security or the conduct of international affairs, or is for the purpose of administering a federal or provincial law.<\/li>\n\n\n\n<li>In an emergency threatening an individual\u2019s life, health or security. (CAPR must then inform the individual of the disclosure).<\/li>\n\n\n\n<li>If is publicly available.<\/li>\n\n\n\n<li>If required by law.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<p>All other disclosure process exceptions require the approval of the Chief Privacy Officer.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Transmission \/ Sharing of Personal and Personal Health Information<\/h2>\n\n\n\n<p>CAPR Personnel will demonstrate extreme care when transmitting personal and personal health information internally or externally to ensure that:<\/p>\n\n\n\n<ul>\n<li>The persons who have requested the information and those to whom CAPR Personnel are sending it have been authenticated; and<\/li>\n\n\n\n<li>The method of transmission (whether by telephone, mail, fax, electronically or otherwise) is appropriate to protect the confidentiality of the information in light of its sensitivity.<\/li>\n<\/ul>\n\n\n\n<p>If mailed, the information will be enclosed in a securely sealed envelope and stamped \u201cPrivate and Confidential\u201d.&nbsp; In all instances, the name of the intended recipient must be clearly identified.&nbsp; Email flags will be used to denote personal or confidential information in email communications.&nbsp; Because of the ease with which email is transmitted, and issues relating to control over storage of multiple copies of email, the use of email to transmit personal and personal health information is discouraged where a reasonable alternative is available except with the expressed consent of the individual.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Retention and Disposal of Personal and Personal Health Information<\/h3>\n\n\n\n<p>The retention and disposal of personal and personal health information will comply with the CAPR Records Management Policy.&nbsp; Personal and personal health information no longer required to fulfil the purposes for which it was collected will be destroyed, erased or made anonymous.&nbsp; The Alliance will maintain a secure centralized filing system with appropriate access and retrieval controls for both employee and client information data. Care will be used in the disposal or destruction of personal and personal health information to prevent unauthorized parties from gaining access to the information.&nbsp; When disposal of hard copy information is authorized, shredding will be used to maintain confidentiality.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Accuracy \u2013 Updating Personal and Personal Health Information<\/h3>\n\n\n\n<p>Personal and personal health information will be updated to fulfil the purpose for which it was collected.&nbsp; CAPR information management processes will minimize the possibility of using incorrect information when making decisions about the individual, or when disclosing information to third parties.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Protection of Personal and Personal Health Information<\/h3>\n\n\n\n<p>CAPR\u2019s corporate and business practice standards specify operating procedures that protect electronically stored personal and personal health information.&nbsp; The physical security of such information will be managed through office security practices, records management practices and individual discretion, based on the sensitivity of the information.&nbsp; When developing safeguards for personal and personal health information, CAPR will consider loss, theft, alteration, unauthorized access, copying and use.&nbsp; If an incident occurs where personal or personal health information is inadvertently disclosed, lost, corrupted, or transmitted contrary to CAPR standards, CAPR Personnel will contact the Chief Privacy Officer immediately to report the incident and develop an appropriate remediation plan.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Open and Transparent Practices<\/h3>\n\n\n\n<p>CAPR will inform clients, employees and other individuals about the Privacy Code and its information management practices on the CAPR website and intranet sites.&nbsp; CAPR will also publish the contact information for the Chief Privacy Officer.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">An Individual\u2019s Access to their Personal and Personal Health Information<\/h3>\n\n\n\n<p>Any individual has the right to request access to their information.&nbsp; Access to specified information is given by allowing an individual to view CAPR documentation, or by providing them with a reproduced copy of the information.&nbsp; Under no circumstances will documents that are the property of CAPR be given to the individual requesting access.<\/p>\n\n\n\n<p>Requests for access may be made verbally or may be written.&nbsp; Documents or files provided to an individual will be reviewed to ensure that no personal or personal health information about another individual is disclosed.&nbsp; If so, that information must be masked, or made anonymous before the person making the request views the document.&nbsp; Personal or personal health information to which an individual has requested access cannot be removed or destroyed under any circumstances.<\/p>\n\n\n\n<p>CAPR has the right to charge an individual a reasonable amount to recover the cost of producing and delivering documents requested by the individual. The Chief Privacy Officer in consultation with managers will be responsible for assessing related costs based on compliance with CAPR policy and determining the reasonability of charging the individual.&nbsp; If CAPR plans to charge, the individual must be informed, and the individual must accept the charge before the documents are produced.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Access Process Exceptions<\/h2>\n\n\n\n<p>Access shall be subject to any prohibitions, exceptions, or exemptions in applicable privacy laws.&nbsp; If access is denied, then the requesting individual shall be informed in writing of the reason for the denial.&nbsp; CAPR must refuse access to personal and personal health information that it has disclosed to a government institution for law enforcement or national security reasons.&nbsp; In some cases, the fact that such information was disclosed must also be withheld.&nbsp; The Chief Privacy Officer should be contacted if CAPR Personnel require direction on the refusal of access.&nbsp; It is also CAPR policy to refuse access, as permitted under applicable law, if:<\/p>\n\n\n\n<ul>\n<li>The information falls under solicitor\/client privilege,<\/li>\n\n\n\n<li>The information contains confidential commercial information,<\/li>\n\n\n\n<li>Disclosure could harm an individual\u2019s life, health or security,<\/li>\n\n\n\n<li>It was collected to investigate a breach of an agreement or contravention of a law, or<\/li>\n\n\n\n<li>It was generated in the course of a formal dispute resolution process, unless the Chief Privacy Office specifically authorizes access to any of the foregoing.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Complaint Process<\/h2>\n\n\n\n<p>Individuals whose personal and personal health information has been collected, used, disclosed and\/or disposed of by CAPR may make complaints about CAPR\u2019s policies and practices relating to the handling of their personal and personal health information.&nbsp; A complaint may be made in writing to the Chief Privacy Officer specifying the nature of the complaint.&nbsp; In the case of a complaint, the Chief Privacy Officer will undertake an investigation.&nbsp; The Chief Privacy Officer will provide a written response to the complainant outlining the results of the investigation and the actions, if any, taken or to be taken by CAPR in respect of the complaint.&nbsp; Appeals regarding a complaint decision will be escalated to the Executive Committee.&nbsp; The Executive Committee may seek consultation with Federal Privacy Commissioner or applicable provincial counterpart to inform the investigation process, seek advice and\/or validate decisions.&nbsp; CAPR will not penalize, sanction nor discriminate against any individual who has made a complaint or inquiry.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Third-party Service Providers<\/h2>\n\n\n\n<p>From time to time, CAPR retains third-party service providers to assist CAPR in administering its programs or conducting its business (e.g., service providers that keep records relating to our employee insurance and benefit plans).&nbsp; In some cases, in order to perform the services, CAPR must disclose personal and personal health information about its employees.&nbsp; CAPR Personnel entering into these contracts with third-party service providers will ensure that:<\/p>\n\n\n\n<ul>\n<li>Use of the personal and personal health information by the third-party service provider is limited to the purposes specified to exercise the contract;<\/li>\n\n\n\n<li>All use of the personal and personal health information will be in accordance with the Privacy Code;<\/li>\n\n\n\n<li>The third-party service provider refers any individuals looking for access to their personal and personal health information to CAPR;<\/li>\n\n\n\n<li>The third-party service provider uses appropriate safeguards to protect the personal and personal health information;<\/li>\n\n\n\n<li>The personal and personal health information is destroyed or returned to CAPR upon termination or completion of the contract; and,<\/li>\n\n\n\n<li>CAPR has the right to audit the third-party service provider\u2019s compliance with the contract.<\/li>\n<\/ul>\n<\/div><\/div>\n\n<\/div><\/div>\n\n\n<hr class=\"wp-block-separator alignfull has-text-color has-blue-color has-alpha-channel-opacity has-blue-background-color has-background is-style-wide\"\/>\n","protected":false},"excerpt":{"rendered":"<p>ABOUT Privacy Policy CAPR is committed to ensuring the privacy of its members and students. CAPR is committed to protecting the privacy and security of the personal and personal health information of individuals with whom it interacts, such as employees, clients, suppliers and contractors. This is achieved by embedding rigorous and consistent privacy and information [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":154,"menu_order":4,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":"","_links_to":"","_links_to_target":""},"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/alliancept.org\/wp-json\/wp\/v2\/pages\/198"}],"collection":[{"href":"https:\/\/alliancept.org\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/alliancept.org\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/alliancept.org\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/alliancept.org\/wp-json\/wp\/v2\/comments?post=198"}],"version-history":[{"count":15,"href":"https:\/\/alliancept.org\/wp-json\/wp\/v2\/pages\/198\/revisions"}],"predecessor-version":[{"id":2324,"href":"https:\/\/alliancept.org\/wp-json\/wp\/v2\/pages\/198\/revisions\/2324"}],"up":[{"embeddable":true,"href":"https:\/\/alliancept.org\/wp-json\/wp\/v2\/pages\/154"}],"wp:attachment":[{"href":"https:\/\/alliancept.org\/wp-json\/wp\/v2\/media?parent=198"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}