PRIVACY POLICY
***
THIS POLICY DESCRIBES HOW PERSONAL INFORMATION ABOUT YOU MAY BE COLLECTED, USED AND DISCLOSED, AND HOW YOU CAN GET ACCESS TO, AND/OR CORRECT, THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
I. YOUR PRIVACY RIGHTS
Lab One, Canada and its Canadian affiliates, including ExamOne Canada (collectively referred to as “Lab One” or “We”) recognize the importance of privacy and the sensitivity of personal information. We are committed to protecting any personal information We hold. For these reasons We have created the following Privacy Policy ("Privacy Policy"). This Privacy Policy outlines how We manage your personal information and safeguard your privacy. 
From January 1, 2004, all businesses engaged in commercial activities must comply with the Personal Information Protection and Electronic Documents Act (“Act”), and the Canadian Standards Association Model Code for the Protection of Personal Information, which it incorporates. The Act gives you rights concerning the privacy of your personal information.
Lab One is responsible for the personal information We collect and hold. To ensure this accountability, We have developed this Privacy Policy, and trained our employees about our policies and practices.
***
II. WHAT IS PERSONAL INFORMATION
Personal Information or "PI" for short is defined as any information about an identifiable individual, but does not include the name, title or business address or telephone number of an employee of an organization.
For example, your PI includes information that relates to your physical or mental health, race, origin, color, religion, age, marital status, education, medical, criminal or employment history, information relating to financial transactions, identifying number, an unlisted address or unlisted telephone number, fingerprints, and blood type, among others. In addition, some information that is otherwise publicly available is not protected by the Act.
***
III. HOW WE COLLECT, USE AND DISCLOSE YOUR PERSONAL INFORMATION.
We collect, use and disclose PI primarily to provide services to insurance companies that enable them to process your insurance applications and claims. Below, We list the principles that govern our use and disclosure of PI and provide examples of how these principles are applied. 
A. Principles of Personal Information: 
1. Lab One will collect only PI about you that relates directly to the insurance underwriting, claims, or other business activities We perform. Lab One will obtain your consent before or at the time the information about you is collected, with very few exceptions. Normally, We ask for your consent in writing, but in some circumstances, We may accept your oral consent. Sometimes, your consent may be implied through your conduct with us or We may not ask for your specific consent in a case of urgency or where We believe you would consent if asked and it is impractical to obtain your consent. You may also withdraw your consent in writing (addressed to the Privacy Official listed in Section VII), to stop any future uses or disclosure (to the extent We have not taken any action relying on that consent). Your withdrawal will not have an effect on the use or disclosure occurring prior to our receipt of your withdrawal. Some of the PI We collect will be processed and stored by LabOne, Inc., our parent company in the United States, where the United States government and its agencies may be able to apply to a court in the United States for an order to obtain disclosure of it. Such PI, when processed and stored in Canada by Lab One, also is subject to disclosure to foreign governments, pursuant to the laws and treaties of Canada.
2. Lab One will notify you about the purpose for which PI is requested when or before the PI is collected. This notification may be provided orally or in writing. 
3. After obtaining your consent, Lab One may only use or disclose your PI for the purpose for which the information was collected, or for a use or disclosure consistent with that purpose, unless the use or disclosure fits into one of the exceptions listed below in Section B. For example, We may use or disclose PI We obtain throughout the underwriting process, and We may disclose it to the company or companies to which you are applying for insurance. When information is to be used or disclosed for a purpose not previously identified to you, such new purpose will be identified for you prior to such use or disclosure, and your consent will be requested.
4. Whenever possible, Lab One will collect PI directly from you, unless you have authorized otherwise. We collect information only by lawful means and not in an unreasonably intrusive way.
5. Lab One will take reasonable steps to ensure that your PI is accurate, up-to-date, and as complete as possible. 
6. Lab One will take reasonable steps to ensure compliance by it and its parent, LabOne, Inc. with the Act with respect to the collection, use, and disclosure of your PI. This will be accomplished through use of safeguards appropriate for the sensitivity of the PI. Such safeguards are intended to protect your PI against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification. Lab One may use a variety of methods of protection to safeguard your PI, including physical measures, organizational measures, or technological measures. Lab One has instituted policies and practices to manage PI in accordance with applicable legal and regulatory requirements.
7. We retain PI only for as long as We need it to effectively provide our services and for a reasonable length of time thereafter in case We need to meet any potential obligations or legal or government requirements. We destroy paper files containing PI by shredding. We destroy electronic information by deleting it, and when the hardware is discarded, We ensure that the hard drive is physically destroyed. Clinical specimens, including blood, urine and saliva, are disposed of according to applicable legal and regulatory requirements. 
B. Exceptions to Consent. Under certain circumstances We may use and/or disclose your PI without your consent or knowledge. For example:
1. When disclosure is permitted, authorized, or required by law. For example, We will disclose PI when a law, court order or a subpoena requires that We disclose PI. We will also make disclosures when the Attorney General of Canada requires it for proceedings involving the Crown in right of Canada or the Canadian Government or when a foreign government through a treaty with Canada has requested it. In the event PI collected about you by Lab One is processed and stored by LabOne, Inc., in the United States, that information may also be subject to the laws of the United States.
2. For governmental investigation activities. For example, We will provide PI to assist the government when it conducts an investigation, audit or inspection of an organization or other person based upon breach of an agreement or a contravention of federal or provincial law, or if the information relates to national security, the defence of Canada or the conduct of international affairs.
3. For research purposes. In certain limited circumstances, We may use PI in order to conduct or support statistical, scholarly study, or research activities. In this case, We must notify the Privacy Commissioner of Canada prior to use. 
4. In emergency situations. We may disclose PI because of an emergency that threatens the life, health or security of an individual. In this case, We will inform you in writing of the disclosure. 
5. For legal activities. We may provide your PI to a lawyer who is representing Lab One.
6. For debt collection. We may disclose your PI for the purpose of collecting a debt owed to Lab One.
C. Security Safeguards. 
Lab One takes all reasonable precautions to ensure that your PI is kept safe from loss, unauthorized access, modification or disclosure.
Among the steps taken to protect your PI are:
§ premises security such as supervised or locked cabinet storage;
§ restricted file access to PI;
§ deploying technological safeguards like passwords, security software and firewalls to prevent hacking or unauthorized computer access;
§ paper information is transmitted through sealed, addressed envelopes or boxes by reputable companies;
§ electronic information is transmitted either through a direct line or is anonymized or encrypted;
§ internal password and security policies.
We use a number of consultants and agencies that may, in the course of their duties, have limited access to PI We hold. These include computer consultants, office security and maintenance, bookkeepers and accountants, a file storage company, temporary workers to cover holidays and illness, credit card companies, website managers, cleaners and our landlord. We restrict their access to any PI We hold as much as is reasonably possible. We also have their assurance that they follow appropriate privacy principles and where appropriate or required, have contractual undertakings from them to ensure they safeguard your PI.
***
IV. YOUR RIGHTS ASSOCIATED WITH YOUR PI
You have the following rights with respect to your PI:
A. The Right to Access Your PI. In most cases, you have the right to look at or get copies of your PI that We have, but you must make the request in writing to the Privacy Official identified below. However, We reserve the right to confirm the identity of the person seeking access to PI at or before complying with any access requests. Summary information is available upon written request. More detailed requests which require archive or other retrieval costs may be subject to a small fee. In certain situations, We may deny your request for access. If We do, We will explain why.
Your rights to access your PI are not absolute.
We may deny access when:
§ denial of access is required or authorized by law;
§ We have disclosed information to a government institution for law enforcement or national security reasons;
§ information relates to existing or anticipated legal proceedings against you;
§ when granting you access would have an unreasonable impact on other people's privacy;
§ when granting access could harm an individual's life or security; 
§ to protect our organization's rights and property; or
§ where the request is frivolous or vexatious.
B. The Right to Receive an Accounting of Uses and Disclosures. Except in the limited cases where disclosure has been made for law enforcement or national security reasons, you have a right to request and receive a list of instances in which We have disclosed your PI to third parties. We will attempt to be as specific as possible in identifying the organizations to which We have disclosed your PI. At a minimum, We will provide you a list of organizations to which We may have disclosed your PI.
C. The Right to Correct or Update Your PI. If you believe that there is an error or omission in your PI, you have the right to request that We correct the error or omission. You must provide the request and your reason for the request in writing. If you can establish that the PI We hold is inaccurate, We will take reasonable steps to correct it. We will also take reasonable steps to advise any third parties to whom We have disclosed your PI of the correction. If We refuse your request to correct PI, We will explain why.
***
V. COMMUNICATING WITH US
E-mail is not a 100% secure medium, and you should be aware of this when contacting us to send PI.
***
VI. CHANGES TO PRIVACY POLICY
We reserve the right to change the terms of our Privacy Policy at any time. Any changes to our Privacy Policy will apply to the PI We already have in our possession, or information We may collect in the future. When We make an important change to our Privacy Policy, We will publish the new policy.
***
VII. REQUEST FOR ACCESS/CORRECTION
If you have any questions about this Privacy Policy, or if you wish to correct or access your PI, please contact our Privacy Officer at:
Privacy Officer 
10101 Renner Boulevard
Lenexa, Kansas 66219
USA
Website: www.examone.ca

Or you may contact our Privacy Officer directly at 1-800-873-8845.
If you are not satisfied with our response, the Privacy Commissioner of Canada can be reached at: 
112 Kent Street
Ottawa, Ontario
K1A 1H3

Tel: 1-800-282-1376
Web site: www.privcom.gc.ca
***
VIII. EMPLOYMENT INQUIRIES
If you apply to Lab One for a job, We need to consider your PI as part of our review process. We normally retain information from candidates after a decision has been made. If We offer you a job, which you accept, the information will be retained in accordance with our privacy procedures for employee records.
***
IX. WEB SITE
Our web site may contain links to other web sites that are provided and maintained exclusively by third parties. Web sites provided and maintained by third parties are not subject to this Privacy Policy. Please review the privacy policies on those web sites to determine their information handling practices.
On our web site, like most other commercial websites, We may monitor traffic patterns, site usage and related site information in order to optimize our web service. We may provide aggregated web site or site traffic information to third parties, but these statistics do not include any identifiable PI. 
***
X. EFFECTIVE DATE OF THIS POLICY.
This policy went into effect initially on January 1, 2004 and was revised effective June 15, 2006.