63.10. In assessing the risk of injury to a person whose personal information is concerned by a confidentiality incident, a public body must consider, in particular, the sensitivity of the information concerned, the anticipated consequences of its use and the likelihood that such information will be used for injurious purposes. The body must also consult the person in charge of the protection of personal information within the body.
2021, c. 252021, c. 25, s. 151.