Member Lists & Data Privacy

Allow 35–45 minutes. Read with your local bylaws, a recent employer dues report (CSV or spreadsheet), your signed-card roster, and access to your local's secure member database — not employer email. Sections move from Rand Formula vs. card-carrying members through the Membership List Directive, monthly reconciliation, and secure storage.

Pair with `/guide/membership-signup` for card-signing campaign craft — that guide teaches the floor pitch; this module teaches secretary reconciliation, constitutional privacy rules, and database hygiene. CLC membership administration materials and CUPE local secretary handbooks reinforce list custody; Unifor local officer training treats member data as a fiduciary trust.

To equip Local Secretaries, Treasurers, and administrators with the technical skills and legal knowledge to clean, reconcile, and securely manage membership lists — distinguishing employer-provided dues data from card-carrying members in good standing while maintaining absolute data privacy under constitutional guardrails.

• Know: The strict terms of the Membership List Directive; the legal distinction between a dues payer under the Rand Formula and a card-carrying member in good standing with voting rights.
• Feel/Understand: Extremely protective of members' private contact details; aware that membership lists are a sacred union trust that must never be shared with outside political, commercial, or factional interests.
• Be Able To: Process and clean raw CSV reports from the employer; execute targeted sign-up outreach to convert dues payers into active voting members; store and edit local databases on encrypted, union-controlled systems with strong access controls.

One of the most common errors a new Local Secretary makes is assuming everyone on the employer's dues deduction report is a voting union member.

• The Rand Formula: Under Canadian labour law, because all employees in a bargaining unit benefit from the collective agreement, they must pay union dues — whether or not they have signed a membership card.
• The distinction: Paying dues does not make an employee a signed-up member in good standing. Under union bylaws, a worker must sign a physical or digital membership card to obtain the right to vote on contracts, attend general meetings, run for office, or vote in local elections.
• The Secretary's duty: Cross-reference the employer's monthly dues report against the local's database of signed cards. Anyone paying dues without a card belongs on a sign-up target list — not on the voting roll.

CLC organizing education and national union membership materials both stress: the payroll file is a dues file, not a democracy file. `/guide/membership-signup` walks card-signing campaigns; this module owns the reconciliation math behind those campaigns.

Union membership lists are highly sensitive constitutional documents. The Membership List Directive — adopted across many Canadian unions as a binding constitutional privacy practice — mandates strict security guardrails regardless of which national body your local affiliates with.

• Commercial use: Sharing, selling, or leasing a membership list with any commercial partner — even an affinity discount vendor — is a serious constitutional offense. Members join a union, not a marketing database.
• Political campaigns: Locals cannot release lists to municipal, provincial, or federal candidates or parties, even when the union formally endorses them. All outreach must be conducted internally by the local itself through union channels.
• Employer access: Never store, send, or edit membership lists on employer-controlled servers (Microsoft 365, Google Workspace at work, Slack, Teams, Outlook). Employers may legally monitor their networks — which destroys member privacy and union independence.
• Internal factions: Releasing selective contact lists to one slate in a local election without constitutional authority violates the same trust as releasing to outsiders.

CUPE secretary guidance and OFL local administration workshops both repeat: if a third party asks for your list, the answer is almost always no — then design an internal communication plan instead.

Raw Excel or CSV sheets from employer payroll departments are notoriously messy. The Local Secretary should audit these files monthly — not once a year before an election.

Round 1 — Reconcile a sample. Take a redacted employer CSV (20–30 rows). Import to a spreadsheet on a union device. Mark columns: dues payer only, card signed, classification mismatch, arrears risk. Write three steward assignments for sign-up targets.

Round 2 — Privacy tabletop. List five places officers might accidentally store lists (work email, shared steward locker USB, employer Teams channel, personal iCloud, printed stack on lunchroom table). For each, name the fix and who owns the migration.

1. Payroll = membership — Treating every dues payer as a voter without a signed card.
2. Employer cloud storage — Editing lists on work Microsoft 365 or Google accounts.
3. Friendly political leaks — Releasing contacts to endorsed candidates "because we're aligned."
4. Annual-only reconciliation — Discovering 100+ unsigned dues payers the week of an election.
5. Unencrypted blasts — Emailing full CSV rosters to executive lists from personal accounts.

- Canadian Labour Congress — membership administration and organizing fundamentals - CUPE local secretary / membership materials — list custody and reconciliation - Unifor local officer training — database hygiene and member privacy - Ontario Federation of Labour — local administration workshops - Your national union constitution — Membership List Directive and good-standing rules - UnionOps: `/guide/membership-signup` (campaign craft); Module 5 (dues rebate audit alignment)