- Do you know who has access to it?
- Do they have clear privacy policies?
- Who qualifies as a "third party"?
- Have you consented to distributing it outside of "the Organization"
- Contact them and find out. Get it in writing; it is your right.
FEDERAL: The Application of PIPEDA to Charitable and Non-Profit Organizations
"As the definition of commercial activity makes clear, selling, bartering or leasing a membership list or a list of donors would be considered a commercial activity. As a result, consent is required for the disclosure of this information."
PROVINCIAL: Personal Health Information [OHIP] Protection Act, 2004, S.O. 2004, c. 3, Sched. A
"...collection, use, disclosure, retention or disposal of the information, as the case may be, is necessary in the course of the agent’s duties and is not contrary to this Act or another law..."
"We do not sell or distribute your personal information to any other third parties not listed herein." - Does this mean only Ontario Soccer, Eastern Ontario District Soccer Association and the Club personnel have access to your information?
Do "officers, members, employees, coaches, volunteers, officials, participants, clubs, agents, sponsors, owners.operators of facilities, and representatives ("the Organization") have access to your information?
Does "the Organization" have internal processes to deal with negligence or it is not a matter of importance?