A-2.1, r. 3.1 - Regulation respecting confidentiality incidents

Section 5 Disposition versions

2022-12-29

5. Notices to persons whose personal information is concerned by a confidentiality incident presenting a risk of serious injury, given under the second paragraph of section 63.8 of the Act respecting Access to documents held by public bodies and the Protection of personal information (chapter A-2.1) or the second paragraph of section 3.5 of the Act respecting the protection of personal information in the private sector (chapter P-39.1), must contain

(1)  a description of the personal information covered by the incident or, if that information is not known, the reasons why it is impossible to provide such a description;

(2)  a brief description of the circumstances of the incident;

(3)  the date or time period when the incident occurred or, if that is not known, the approximate time period;

(4)  a brief description of the measures the body has taken or intends to take after the incident occurred in order to reduce the risks of injury;

(5)  the measures that the body suggests the person concerned take in order to reduce the risk of injury or mitigate any such injury; and

(6)  the contact information where the person concerned may obtain more information about the incident.

O.C. 1761-2022, s. 5.

Not in force

In force: 2022-12-29

5. Notices to persons whose personal information is concerned by a confidentiality incident presenting a risk of serious injury, given under the second paragraph of section 63.8 of the Act respecting Access to documents held by public bodies and the Protection of personal information (chapter A-2.1) or the second paragraph of section 3.5 of the Act respecting the protection of personal information in the private sector (chapter P-39.1), must contain

(1)  a description of the personal information covered by the incident or, if that information is not known, the reasons why it is impossible to provide such a description;

(2)  a brief description of the circumstances of the incident;

(3)  the date or time period when the incident occurred or, if that is not known, the approximate time period;

(4)  a brief description of the measures the body has taken or intends to take after the incident occurred in order to reduce the risks of injury;

(5)  the measures that the body suggests the person concerned take in order to reduce the risk of injury or mitigate any such injury; and

(6)  the contact information where the person concerned may obtain more information about the incident.

O.C. 1761-2022, s. 5.