P-39.1 - Act respecting the protection of personal information in the private sector
8. A person who collects personal information from the person concerned must, when establishing a file on that person, inform him
(1) of the object of the file;
(2) of the use which will be made of the information and the categories of persons who will have access to it within the enterprise;
(3) of the place where the file will be kept and of the rights of access and rectification.