A regulated member of ASET works for an organization that collects large amounts of data...

The ASET Code of Ethics mandates that members act with integrity towards clients and employers, which strictly includes the maintenance of confidentiality. When a regulated member has access to proprietary data, trade secrets, or personal customer information, they are ethically and legally bound to protect that information. Sharing sensitive customer data with a third-party client without explicit authorization and legal justification is a severe breach of confidentiality and violates privacy laws such as the Personal Information Protection and Electronic Documents Act (PIPEDA) or provincial equivalents. Anonymizing the data or signing a confidentiality agreement with the requesting client does not override the fundamental breach of trust and unauthorized access to the employer's proprietary data. The member must firmly decline the client's request to access this restricted information. If the client persists, the member should escalate the issue to their management or corporate legal department. Upholding confidentiality is not just an ethical duty but a strict legal necessity to protect the public, the customers, and the employer from harm and liability.