www.carters.ca
www.charitylaw.ca
§In that case, if
systems are maintained on servers that are
located outside of Canada, the servers should
be accessed or arrangements should be made
for staff to access the servers for the purpose
of providing systems electronic records as
required by CRA
–Canadian privacy legislation permits the collection, use and disclosure of personal information if proper arrangements are first made for its protection in Canada in accordance with applicable legislation
–However, the Patriot
Act provides U.S. authorities with the means to access personal information in U.S.
jurisdiction (e.g. court orders may be obtained to access personal information held in the U.S.), so should exercise caution (need to notify donors)
24