520.3.12. A certification service provider may collect information under section 520.3.11 from(1) the actual person, if the law authorizes the person to apply for a certificate referred to in this Act;
(2) the access profile manager in the case of the persons employed or directed by that manager whom the latter authorizes to obtain and use a certificate;
(3) the professional order concerned in the case of a person whose profession is governed by the Professional Code (chapter C-26); and
(4) the Régie de l’assurance maladie du Québec, in the case of health professionals registered with the Régie.
Those persons must communicate the information referred to in section 520.3.11 to the certification service provider on request, and must inform the certification service provider without delay of any change in that information.
The Régie must destroy the files containing information that was communicated to it under this section for cross-matching with its register of health professionals.