13.10. The communication agreement must, in particular,(1) provide for measures that ensure the protection of the information;
(2) determine the retention period that applies to information;
(3) provide for the destruction of the information at the expiry of the retention period;
(4) provide that the Institut and the Commission d’accès à l’information must be informed without delay(a) of non-compliance with any condition set out in the agreement,
(b) of any failure to comply with the protection measures provided for in the agreement, and
(c) of any event that could breach the confidentiality of the information; and
(5) provide for the transmission to the Institut of information needed to maintain the register provided for in section 13.16.
Where the agreement concerns personal information, it must also stipulate that the information(1) may be made accessible only to persons who need it to exercise their functions and who have signed a confidentiality agreement;
(2) may not be used for purposes other than those specified in the detailed presentation of the research activities;
(3) may not be compared, combined or paired with any other information that has not been provided for in the detailed presentation of the research activities; and
(4) may not be communicated, published or otherwise distributed in a form allowing the persons concerned to be identified.