65.1. Personal information may not be used within a public body except for the purposes for which it was collected.
A public body may, however, use such information for another purpose with the consent of the person to whom it relates, or without that consent, but only
(1) if the information is used for purposes consistent with the purposes for which it was collected;
(2) if the information is clearly used for the benefit of the person to whom it relates; or
(3) if the information is necessary for the application of an Act in Québec, whether or not the law explicitly provides for its use.
In order for a purpose to be consistent within the meaning of subparagraph 1 of the second paragraph, it must have a direct and relevant connection with the purposes for which the information was collected.
If information is used in one of the cases referred to in subparagraphs 1 to 3 of the second paragraph, the person in charge of the protection of personal information within the body must record the use in the register provided for in section 67.3.