P-39.1 - Act respecting the protection of personal information in the private sector

Full text
8. Any person who collects personal information from the person concerned must, when the information is collected and subsequently on request, inform that person
(1)  of the purposes for which the information is collected;
(2)  of the means by which the information is collected;
(3)  of the rights of access and rectification provided by law; and
(4)  of the person’s right to withdraw consent to the communication or use of the information collected.
If applicable, the person concerned is informed of the name of the third person for whom the information is being collected, the name of the third persons or categories of third persons to whom it is necessary to communicate the information for the purposes referred to in subparagraph 1 of the first paragraph, and the possibility that the information could be communicated outside Québec.
On request, the person concerned is also informed of the personal information collected from him, the categories of persons who have access to the information within the enterprise, the duration of the period of time the information will be kept, and the contact information of the person in charge of the protection of personal information.
The information must be provided to the person concerned in clear and simple language, regardless of the means used to collect the personal information.
1993, c. 17, s. 8; 2021, c. 25, s. 107.
8. A person who collects personal information from the person concerned must, when establishing a file on that person, inform him
(1)  of the object of the file;
(2)  of the use which will be made of the information and the categories of persons who will have access to it within the enterprise;
(3)  of the place where the file will be kept and of the rights of access and rectification.
1993, c. 17, s. 8.