109. In assessing the risk of injury to a person whose information is concerned by a confidentiality incident, a body must consider, in particular, the sensitivity of the information concerned, the anticipated consequences of its use and the likelihood that such information will be used for injurious purposes. The body must also consult the person in charge of the protection of information within the body.
2023, c. 52023, c. 5, s. 109.