Disclosure with consent

You must have an individual’s consent to collect, use or disclose personal
information unless the CYFSA authorizes you to do so without consent.

You may disclose personal information with the explicit consent of the individual to whom the information relates as long as the disclosure is for a lawful purpose. While implied consent is acceptable for collection and use of information in some cases, consent for disclosure must be explicit. This explicit consent may be written or verbal, but verbal consent is only valid if you make a written record of it.

 

A service provider has directly collected an individual’s personal information to register them for a literacy program at their request.

When intake staff share this information with their colleague who leads the literacy program, this is a “use” of information. The service provider can rely on the implied consent of the individual to use their information to deliver the literacy program.

Later, the literacy program leader concludes that the individual needs parenting support. She wants to share their information with another organization that provides parenting classes. This is a “disclosure” of the information, requiring explicit consent from the individual.