Identify the purpose
Know why the information is being collected before or at the time of collection.
Security & privacy
Privacy should be designed into the call flow. Not added as a badge.
Trovi does not use a blanket “compliant” label to replace a real privacy review. The information collected, the purpose, the industry and the deployment all matter.
Privacy reviewbefore go-live
01
What information is actually needed?Limit the call flow to the purpose it serves
PURPOSE02
Does the caller need notice or consent?Especially where calls are recorded
CONSENT03
Who needs access?Keep access tied to the business workflow
ACCESS04
What rules apply to this industry?Health information can require additional care
SCOPECanadian privacy principles
Collect less. Explain why. Protect what you keep.
The Office of the Privacy Commissioner of Canada identifies accountability, purpose, consent, limiting collection, limiting use and retention, safeguards, openness and access among PIPEDA’s core principles.
Meaningful consent
People should understand what is being collected, why it is needed and how it will be used.
Limit collection
Collect only what is needed for the purpose instead of turning every call into a data grab.
Use appropriate safeguards
Safeguards should reflect the sensitivity of the information and the risks around it.
If calls are recorded
Tell callers what is happening and why.
Canada’s Privacy Commissioner says organizations subject to PIPEDA should inform customers that a call is being recorded, clearly state the purpose and seek consent. The guidance also emphasizes limiting use and retention.
Trovi setup principle: recording should be a deliberate business decision, not an invisible default. The exact notice and process should match the purpose and legal obligations of the business using it.
NOTICETell the caller if recording is enabledclear
PURPOSEState why the recording is being madespecific
USEUse the information for the stated purposelimited
REVIEWSet access and retention expectationscontrolled
Healthcare note
Health information raises the bar.
Ontario’s PHIPA framework limits the collection, use and disclosure of personal health information and emphasizes collecting no more than is reasonably necessary. Dental and other healthcare deployments should be reviewed with those obligations in mind.
This page is product information, not legal advice. Privacy requirements can vary by organization, province, data type and deployment.
Official sources