12. A public body within the meaning of the Act respecting Access to documents held by public bodies and the Protection of personal information (chapter A-2.1) that holds information related to the mission of the institute must provide the institute with the non-personal information it requests that is necessary for the purposes of this Act. The institute may require a public body described in the first paragraph to provide the personal information necessary to carry out studies, evaluations or assessments under sections 5 to 7 so as to, among other things, determine care and service trajectories, study the evolution of certain illnesses and health or social services problems and determine their scope, ascertain the extent to which services, technologies, methods of intervention and medications are used, or assess the impact on the different health and social services system resources involved. Except for those purposes or in the cases and on the conditions described in subparagraphs 1 to 4 of the second paragraph of section 59 or in section 59.1 of the Act respecting Access to documents held by public bodies and the Protection of personal information, the personal information collected may not be communicated to a third party.
In accordance with the Act respecting Access to documents held by public bodies and the Protection of personal information, the institute must take security measures to ensure the protection of the personal information it collects. It must, among other things, adopt a policy on the security and protection of such information. The policy must be approved by the Minister, with or without amendment.
The institute must obtain a confidentiality agreement regarding the information it holds from each of the members of its personnel and from any person who works at the institute or with whom it has entered into a service contract.