Privacy and Confidentially

When handling financial and personal information of members or others with whom the Union has dealings, the following principles must be followed:

• Collect, use, and retain only the personal information necessary for the Union’s business. Whenever possible, obtain any relevant information directly from the person concerned. Use only reputable and reliable sources to supplement this information. Contact information will not be shared with third-parties for marketing purposes.
• Retain information only for as long as necessary or as required by law. Protect the physical security of this information.
• Limit internal access to personal information to those with a legitimate business reason for seeking that information. Use only personal information for the purposes for which it was originally obtained. Obtain the consent of the person concerned before externally disclosing any personal information, unless legal process or contractual obligation requires otherwise.
• When applicable, comply with the privacy and security requirements of HIPAA.