R-22.1 - Act respecting health and social services information

Section 78 Disposition versions

Not in force

Not in force

78. Before giving a mandate or entering into a contract of enterprise or for services involving the communication of information outside Québec, the body holding the information must ensure that a privacy impact assessment has been conducted. Section 45 applies, with the necessary modifications, to such an assessment.

The mandate may be given or the contract of enterprise or for services entered into only if the assessment shows that the information would receive adequate protection, in particular in light of generally recognized principles regarding the protection of personal information. The agreement referred to in section 77 must then take into account, in particular, the results of the assessment and, if applicable, the terms agreed on to mitigate the risks identified in the assessment.

The same applies where a body entrusts a person or group outside Québec with the task of collecting, using, communicating or keeping such information on its behalf.

2023, c. 5, s. 78.