P-39.1 - Act respecting the protection of personal information in the private sector

Section 21 Disposition versions

2022-09-22

21. A person carrying on an enterprise may communicate personal information without the consent of the persons concerned to a person or body wishing to use the information for study or research purposes or for the production of statistics.

The information may be communicated if a privacy impact assessment concludes that

(1)  the objective of the study or research or of the production of statistics can be achieved only if the information is communicated in a form allowing the persons concerned to be identified;

(2)  it is unreasonable to require the person or body to obtain the consent of the persons concerned;

(3)  the objective of the study or research or of the production of statistics outweighs, with regard to the public interest, the impact of communicating and using the information on the privacy of the persons concerned;

(4)  the personal information is used in such a manner as to ensure confidentiality; and

(5)  only the necessary information is communicated.

1993, c. 17, s. 21; 2021, c. 25, s. 118.

1994-01-01

21. The Commission d’accès à l’information, established by section 103 of the Act respecting Access to documents held by public bodies and the Protection of personal information (chapter A-2.1) may, on written request, grant a person authorization to receive communication of personal information for study, research or statistical purposes, without the consent of the persons concerned, if it is of the opinion that

(1)  the intended use is not frivolous and the ends contemplated cannot be achieved unless the information is communicated in a form allowing the persons to be identified;

(2)  the information will be used in a manner that will ensure its confidentiality.

Such authorization is granted for the period and on the conditions fixed by the Commission. It may be revoked before the expiry of the period for which it is granted if the Commission has reasons to believe that the person authorized does not respect the confidentiality of the information communicated to him or does not respect the other conditions.

1993, c. 17, s. 21.