A regulated member of ASET works for an organization that collects large amounts of data about its customers. The member is approached by a client…

Under the ASET Code of Ethics, members must act as faithful agents and maintain the confidentiality of their employer's business affairs and proprietary data. Customer data is highly sensitive and protected by privacy legislation. A regulated member does not have the authority to unilaterally distribute an employer's confidential customer data to a third-party client. Therefore, the member must decline the request to ensure compliance with confidentiality obligations, privacy laws, and their fiduciary duty to the employer.

B. Reporting the client is an extreme escalation; simply requesting data does not necessarily warrant a report to the Privacy Commissioner unless a breach occurred.

C. Signing a confidentiality agreement does not grant the member the authority to release the employer's proprietary and confidential customer data.

D. Anonymizing data (removing names) still constitutes an unauthorized release of the employer's proprietary information and may still violate privacy standards.

1. Association of Science and Engineering Technology Professionals of Alberta (ASET). (n.d.). ASET Code of Ethics, Principle 4 (Confidentiality and Faithful Agent).

2. Government of Alberta. Personal Information Protection Act (PIPA). Guidelines on unauthorized data disclosure and employee responsibilities.