Consolidated Statutes and Regulations
Consolidated Statutes
Consolidated Regulations
Annual Statutes and Regulations
Annual Statutes
Annual Regulations
Additional information
Québec Official Publisher
What’s new?
Information note
Policy of the Minister of Justice
Laws: Amendments
Laws: Provisions not in force
Laws: Provisions brought into force
Annual Statutes: PDF versions since 1996
Regulations: Amendments
Annual Regulations: PDF versions since 1996
Court Decisions
G-1.03 - Act respecting the governance and management of the information resources of public bodies and government enterprises
Section 12.19
Disposition versions
12.19. Any person to whom or body to which personal information is communicated by a body designated as an official source of government digital data or by another public body referred to in an order made under section 12.14, in the context of a mandate or contract related to carrying out an administrative or public service purpose specified in such an order and entrusted to the person or body in accordance with section 67.2 of the Act respecting Access to documents held by public bodies and the Protection of personal information (chapter A-2.1), must submit to an external audit aimed at ensuring compliance with the highest standards and best practices in matters of information security and protection of such information.
The Minister may determine the cases and circumstances in which the first paragraph does not apply, and makes the criteria leading to the decision public.
12.19. Any person to whom or body to which personal information is communicated by a body designated as an official source of government digital data or by another public body referred to in an order made under section 12.14, in the context of a mandate or contract related to carrying out an administrative or public service purpose specified in such an order and entrusted to the person or body in accordance with section 67.2 of the Act respecting Access to documents held by public bodies and the Protection of personal information (chapter A-2.1), must submit to an external audit aimed at ensuring compliance with the highest standards and best practices in matters of information security and protection of such information.
The Chair of the Conseil du trésor may determine the cases and circumstances in which the first paragraph does not apply, and makes the criteria leading to the decision public.
