G-1.03 - Act respecting the governance and management of the information resources of public bodies and government enterprises

Full text
12.16. The public body designated as an official source of government digital data must, before collecting, using or communicating personal information in the exercise of its function,
(1)  make an evaluation of the privacy factors and send the evaluation to the Commission d’accès à l’information; and
(2)  establish rules for its governance in respect of personal information and send them to the Commission.
The rules must include rules applicable to the preservation and destruction of the personal information concerned, the roles and responsibilities of the public body’s personnel members with regard to such information over the course of its life cycle and a procedure for dealing with complaints regarding personal information protection.
2021, c. 22, s. 7; 2023, c. 28, s. 10.
12.16. The public body designated as an official source of government digital data must, before collecting, using or communicating personal information in the exercise of its function,
(1)  make an evaluation of the privacy factors and send the evaluation to the Commission d’accès à l’information; and
(2)  establish rules for its governance in respect of personal information and have the rules approved by the Commission.
The rules must include rules applicable to the preservation and destruction of the personal information concerned, the roles and responsibilities of the public body’s personnel members with regard to such information over the course of its life cycle and a procedure for dealing with complaints regarding personal information protection. They must be submitted again for approval to the Commission every two years.
2021, c. 22, s. 7.