12.17. The public body designated as an official source of government digital data must, for the purposes of this division, submit to the Commission d’accès à l’information a report on the personal information collected, used or communicated within 45 days after the end of each fiscal year containing(1) a description of the personal information collected or the personal information communicated to the public body and its origin;
(2) the names of the public bodies to which personal information is communicated;
(3) a description of the purposes for which the personal information is collected, used or communicated;
(4) a description of the terms for the communication of the personal information; and
(5) a description of the measures to ensure the protection of the personal information.