Principle 3: Consent for the Collection, Use, and Disclosure of Personal Information
The consent of the individual or his or her legally authorized representative (for example, a substitute decision-maker such as an attorney for personal care or family member) is required for the collection, use, or disclosure of personal information, except where the law permits or requires otherwise. Baycrest will obtain the individual's express consent, or rely on implied consent, in accordance with the law and Baycrest policy.
Individuals can give consent in many ways. For example, it may be given in a particular manner (orally or in writing), or at a particular time (such as when the individual receives a service or treatment). An individual may withdraw consent at any time, but the withdrawal cannot be retroactive. The withdrawal may also be subject to legal or contractual restrictions and reasonable notice.
