5. At the beginning of a process of anonymization, a body must remove from the information it intends to anonymize all personal information that allows the person concerned to be directly identified.
The body must then conduct a preliminary analysis of the re-identification risks considering in particular the individualization criterion, the correlation criterion and the inference criterion, as well as the risks of other reasonably available information, in particular in the public space, being used to identify a person directly or indirectly.
783-2024O.C. 783-2024, s. 5.