This could cover a wide range of topics. What obligations does the IT professional have to only collect information allowed under Canada's privacy legislation? What about the information you have on your PIM?

There are at least three levels of concern. What can/should/must the IT Professional do about the information that she or he collects about other people? When someone gives you their business card, or includes a vCard with an email message, or includes contact information on a website what use or uses can you ethically make of that information?

If you a part of a team developing a Customer Relationship Management System, what limits, if any, should be placed on the use of personal information? Does it matter if the system is for a non-profit organization? Can or should you be allowed to buy, sell, or barter customer/donor/constituient information?

What responsibilities does the IT Professional have if she or he discovers a colleague is mis-using personal information?  What should she or he do if a colleague or a team of colleagues are developing a system that is likely to mis-use personal information?