Clear guidelines set out the important things for a privacy officer to consider in making a decision about whether to grant access to your non-profit’s records. All requests for information must be handled with care. Clear guidelines help to ensure caution and consistency in decision making.

A privacy policy is a document that describes how your non-profit deals with personal information. Dealing with personal information includes its collection, use, disclosure, and retention (storage).

A privacy officer is a person your non-profit designates to answer questions about how your non-profit collects, uses, retains, and discloses personal information.