Consolidated Statutes and Regulations
Consolidated Statutes
Consolidated Regulations
Annual Statutes and Regulations
Annual Statutes
Annual Regulations
Additional information
Québec Official Publisher
What’s new?
Information note
Policy of the Minister of Justice
Laws: Amendments
Laws: Provisions not in force
Laws: Provisions brought into force
Annual Statutes: PDF versions since 1996
Regulations: Amendments
Annual Regulations: PDF versions since 1996
Court Decisions
R-22.1 - Act respecting health and social services information
Section 78
Disposition versions
78. Before giving a mandate or entering into a contract of enterprise or for services involving the communication of information outside Québec, the body holding the information must ensure that a privacy impact assessment has been conducted. Section 45 applies, with the necessary modifications, to such an assessment.
The mandate may be given or the contract of enterprise or for services entered into only if the assessment shows that the information would receive adequate protection, in particular in light of generally recognized principles regarding the protection of personal information. The agreement referred to in section 77 must then take into account, in particular, the results of the assessment and, if applicable, the terms agreed on to mitigate the risks identified in the assessment.
The same applies where a body entrusts a person or group outside Québec with the task of collecting, using, communicating or keeping such information on its behalf.
Not in force
78. Before giving a mandate or entering into a contract of enterprise or for services involving the communication of information outside Québec, the body holding the information must ensure that a privacy impact assessment has been conducted. Section 45 applies, with the necessary modifications, to such an assessment.
The mandate may be given or the contract of enterprise or for services entered into only if the assessment shows that the information would receive adequate protection, in particular in light of generally recognized principles regarding the protection of personal information. The agreement referred to in section 77 must then take into account, in particular, the results of the assessment and, if applicable, the terms agreed on to mitigate the risks identified in the assessment.
The same applies where a body entrusts a person or group outside Québec with the task of collecting, using, communicating or keeping such information on its behalf.
