What happens if we receive unsolicited personal data?
Example: Client seeks your mortgage opinion and services. He/she sends a medical report among the supporting documents you requested. You must judge whether this data is allowed based on the consent you obtained.

Determine whether this data would be collected under the purpose of the service within a reasonable amount of time;
-
If yes, continue to use or disclose this data for the purpose;
-
If no, to destroy this data as soon as practicable;